Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
File: c9759e38-7281-4188-858a-90f65ea06745.roa (raw, json)
Hash identifier: +f+ANSAe1wgOj5/z1ww6sWjg/EnuBMdTQOgKL5VQAFo=
Subject key identifier: AB:E0:37:E0:0D:83:5D:89:DE:2B:17:52:1F:FD:A2:37:03:87:63:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 422C1F1EB463A5777E9546743FB65C159251B7EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Sep 2023 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:1f:1e:b4:63:a5:77:7e:95:46:74:3f:b6:5c:15:92:51:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=63d9d40a011ec17044869f95666339a31d37ffa6dd3a432b83af204976ea21f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:a3:ed:c5:79:a3:2e:a9:bd:47:b8:22:0a:
8f:aa:a1:70:f2:22:77:79:f6:80:2c:c7:1e:05:ee:
9b:98:0a:fb:29:d7:2b:b2:62:de:d7:17:ba:bf:5b:
82:f4:07:21:23:84:87:6e:65:0a:82:f8:77:cc:94:
09:e0:28:0d:a2:38:21:b9:17:06:08:b7:96:42:0c:
80:cd:76:a0:1a:04:01:03:f7:3d:ae:63:0a:10:3e:
c1:70:66:3e:87:34:a3:05:6b:a6:7b:8a:31:7e:a8:
93:3f:3a:cd:94:36:16:33:88:4c:f9:f1:c5:7b:71:
7b:1a:c2:d6:8f:ee:9c:90:3c:39:df:b2:c6:b4:bb:
4b:5a:b8:a9:80:04:07:1d:99:b0:df:f9:5c:a8:a2:
50:0f:f7:56:91:fb:e8:46:ce:6e:a6:13:9d:94:ab:
2b:e5:da:19:d5:43:a0:23:cd:01:8f:dc:28:0e:11:
fe:82:2f:20:d6:fc:c0:60:31:90:bf:12:7a:b4:b5:
fb:c8:80:6d:46:cc:36:23:b6:2e:7f:d5:78:5f:8f:
87:94:d4:10:6f:38:db:3f:5b:15:e2:ad:fb:ad:6d:
b5:31:0d:41:f6:62:64:3e:d6:c6:9d:5f:f6:12:b8:
1b:96:26:6d:d3:c0:ea:d7:0a:f2:ae:91:ba:84:c3:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:37:E0:0D:83:5D:89:DE:2B:17:52:1F:FD:A2:37:03:87:63:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:75:99:df:1e:ea:a3:a1:eb:99:69:a5:bc:a9:d0:9e:d9:7d:
30:dd:b1:3c:9d:86:10:fd:b7:41:d4:e4:a6:9a:78:0e:ed:c8:
d9:9c:3b:92:c4:3c:b1:b9:bc:b4:83:00:cf:23:e0:c5:3e:52:
3d:44:16:52:f9:72:91:67:6a:bd:93:10:65:a7:3d:85:4f:dd:
8a:e0:4b:9c:7a:27:c9:4a:f8:26:5f:03:f5:98:eb:9c:47:84:
04:34:66:7e:b5:79:b2:c1:06:a4:4e:4d:80:3a:d6:0a:b0:93:
0c:72:2e:f0:57:26:0a:56:01:34:d1:0f:50:2b:83:7b:28:60:
a7:12:76:e9:a5:29:5f:27:9c:04:7e:7b:3a:85:5f:c5:58:da:
1a:cc:92:2c:4c:bb:0b:73:25:84:9d:61:2f:52:b2:6a:e6:81:
f6:53:0f:07:b3:7d:a6:7a:50:4d:7f:da:a9:cb:c5:4e:4f:1b:
1e:17:59:09:c7:18:cd:ed:1a:36:70:52:77:d8:89:b3:77:da:
05:92:2f:83:fd:e7:d4:8f:4f:c7:73:c5:95:38:26:7e:c5:40:
15:b0:66:4d:23:d4:1d:52:c5:bc:cf:5a:fe:3a:f9:be:97:bc:
d6:92:d3:5b:c7:db:36:2d:58:00:66:7b:1d:81:da:75:aa:0e:
92:0f:67:b0
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQiwfHrRjpXd+lUZ0P7ZcFZJRt+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yMzA5MDkwMDAwMDBaFw0yMzEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDYzZDlkNDBhMDExZWMxNzA0NDg2OWY5NTY2NjMzOWEzMWQzN2ZmYTZkZDNh
NDMyYjgzYWYyMDQ5NzZlYTIxZjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXro+3FeaMuqb1HuCIKj6qhcPIid3n2gCzHHgXum5gK+ynXK7Ji3tcXur9b
gvQHISOEh25lCoL4d8yUCeAoDaI4IbkXBgi3lkIMgM12oBoEAQP3Pa5jChA+wXBm
Poc0owVrpnuKMX6okz86zZQ2FjOITPnxxXtxexrC1o/unJA8Od+yxrS7S1q4qYAE
Bx2ZsN/5XKiiUA/3VpH76EbObqYTnZSrK+XaGdVDoCPNAY/cKA4R/oIvINb8wGAx
kL8SerS1+8iAbUbMNiO2Ln/VeF+Ph5TUEG842z9bFeKt+61ttTENQfZiZD7Wxp1f
9hK4G5YmbdPA6tcK8q6RuoTDQIUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSr4Dfg
DYNdid4rF1If/aI3A4djQDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Yzk3NTllMzgtNzI4MS00MTg4LTg1OGEtOTBmNjVlYTA2NzQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBS6J4DAN
BgkqhkiG9w0BAQsFAAOCAQEAtHWZ3x7qo6HrmWmlvKnQntl9MN2xPJ2GEP23QdTk
ppp4Du3I2Zw7ksQ8sbm8tIMAzyPgxT5SPUQWUvlykWdqvZMQZac9hU/diuBLnHon
yUr4Jl8D9ZjrnEeEBDRmfrV5ssEGpE5NgDrWCrCTDHIu8FcmClYBNNEPUCuDeyhg
pxJ26aUpXyecBH57OoVfxVjaGsySLEy7C3MlhJ1hL1KyauaB9lMPB7N9pnpQTX/a
qcvFTk8bHhdZCccYze0aNnBSd9iJs3faBZIvg/3n1I9Px3PFlTgmfsVAFbBmTSPU
HVLFvM9a/jr5vpe81pLTW8fbNi1YAGZ7HYHadaoOkg9nsA==
-----END CERTIFICATE-----
Generated at Sat Sep 9 00:26:30 2023 by rpki-client on console-fra.rpki-client.org