Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
File: c9759e38-7281-4188-858a-90f65ea06745.roa (raw, json)
Hash identifier: xTCKGS9iw3Qd0I7kz4CoJgw371qAmdlSn2mQ5daTR+A=
Subject key identifier: 2E:7C:62:4F:2E:CA:05:43:46:CB:71:C0:84:65:69:6C:0C:B5:9A:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7276DE3E79B4029DF388646923E4CB67B3119556
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:76:de:3e:79:b4:02:9d:f3:88:64:69:23:e4:cb:67:b3:11:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=19fb2b6e401baa03641a630b7fb3dae3c68a4d8cb43c3b4d7174fd4415d5c149, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:d1:3b:c3:25:be:3a:b2:0a:0c:13:de:a3:
d4:f4:4f:69:7d:ef:f8:a6:d3:a9:03:80:32:49:bf:
11:95:9f:15:5d:bb:66:8d:b0:bf:ef:64:82:2a:2c:
71:97:39:fb:01:da:56:cd:14:33:e3:cc:e3:7f:d5:
ee:69:eb:00:5d:d5:8f:30:19:2a:89:c1:f3:a2:7c:
a3:21:d1:df:9f:09:48:5b:9a:fb:5b:c8:00:f9:9a:
04:0d:b8:ae:77:a6:81:31:5d:72:ec:e1:7d:2e:84:
1a:59:bf:36:f5:69:a7:07:25:c6:98:7c:19:4b:d6:
25:f8:2b:a3:78:70:db:89:05:e6:ff:53:d9:e2:64:
92:ac:12:de:10:94:27:f4:67:cb:9c:02:21:ce:01:
08:8e:3a:a9:14:38:84:af:4c:69:bb:53:2d:10:3d:
0d:c2:19:e5:ab:1d:51:c7:8f:7b:39:66:66:5e:53:
c3:75:9b:3c:fe:1e:f3:0b:74:52:1e:c6:9d:91:db:
ea:b5:9d:57:1b:3c:3c:ff:37:c7:fb:87:28:c2:8a:
ed:6e:4f:95:c6:33:8b:69:b7:97:06:ca:d0:2a:a4:
19:b5:06:08:e7:70:e9:71:24:5a:cb:00:9a:c2:40:
64:09:59:86:4e:52:a3:3b:37:17:a8:6a:a1:2f:ff:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:62:4F:2E:CA:05:43:46:CB:71:C0:84:65:69:6C:0C:B5:9A:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:93:6f:ca:08:71:c6:3b:eb:0f:10:c7:1f:0d:a2:72:ef:13:
0e:c7:6f:bb:ec:c5:26:df:86:76:02:e0:ea:9c:a7:4c:90:f8:
aa:9b:2a:8f:cd:b8:d3:29:64:95:cd:8b:74:9d:aa:b4:15:7f:
3f:35:c4:86:f6:3c:9a:cd:0c:1a:89:08:bd:53:6a:f8:fd:12:
6d:18:b8:ae:95:3f:bc:73:48:d7:5c:28:1a:35:09:62:bc:6f:
ad:c6:6d:98:75:ea:61:8a:8b:e2:61:24:f8:6f:5e:fd:92:9d:
8c:e7:eb:03:7d:b6:90:45:22:0d:69:b9:b5:84:52:22:2e:c5:
49:17:ab:52:7d:02:cb:7b:ef:28:d2:8f:b0:3e:cc:61:fa:7a:
c7:5f:5a:39:35:6c:40:3e:81:dc:79:4d:49:f3:d0:5b:1d:8c:
97:56:f9:57:c8:22:b9:09:09:51:f6:a4:21:4f:fc:4a:38:3a:
8b:c2:d8:c9:85:79:c8:66:14:8a:cb:ea:a9:ce:37:98:44:33:
4c:53:11:f2:b5:6e:de:55:dc:21:26:d7:ac:80:7a:85:61:ae:
de:ad:39:17:a1:fd:fa:e8:ae:f2:b3:70:e3:2f:42:3c:6c:68:
d3:19:c3:80:c3:cc:c1:9d:84:44:a6:48:86:37:bd:bc:88:f9:
ac:2d:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:32 2024 by rpki-client on console-fra.rpki-client.org