Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
File: cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa (raw, json)
Hash identifier: 7qDjt/IOEsAO5ZWyhinrA6bW3YG/oMy+uQX47hmgOMI=
Subject key identifier: EC:54:F4:72:DA:46:87:76:85:FE:5D:26:B2:27:D7:85:2D:6A:F3:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 092CC4664B3EE551A480C7714C0D4D3866AFB352
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Sep 2023 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2c:c4:66:4b:3e:e5:51:a4:80:c7:71:4c:0d:4d:38:66:af:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=316e458b897676640535903d2c8ad59d20e8b64695cc3672a8a4f33726d0283a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:65:37:00:88:cb:50:86:a3:3a:df:c5:02:
72:f7:3d:ba:4c:4b:4f:54:99:8e:61:d1:c1:fe:c4:
9a:9f:6c:b5:3d:76:57:61:bc:ea:1c:2d:f7:85:cf:
45:6c:c5:36:6b:61:9d:4f:32:00:46:cb:4b:bb:5b:
7e:8f:7c:9a:6b:b3:56:21:dd:64:77:fc:dd:c5:3b:
f6:6b:e1:1c:6a:ef:6d:e2:1f:b8:92:84:25:b9:22:
8e:e9:e0:6a:a9:89:78:e6:46:68:ed:42:d6:d2:ec:
00:e2:17:9e:6b:3c:7b:3c:e2:83:1f:a9:91:31:b7:
91:d8:b1:cb:5b:c8:bc:9c:e9:7f:8d:50:93:3b:56:
79:98:45:1b:15:0d:d2:34:a7:ba:43:a8:3b:98:d2:
d3:d6:c9:bb:ae:b2:21:46:54:c1:3c:b7:83:e2:d2:
3c:5d:d7:04:23:38:3e:22:7a:cd:4c:9b:0a:e3:db:
3e:1c:40:88:8c:b2:4e:0e:0c:5d:3f:45:10:9e:7c:
31:e4:7c:63:c5:54:1f:21:a3:82:61:0f:ad:00:bc:
ba:60:b4:b0:fa:1c:a7:3d:ba:64:69:53:b0:6f:8e:
ea:8e:da:c7:64:09:b1:cc:bf:ad:3b:ff:0a:7e:0c:
fe:fb:2f:77:fb:4b:b6:c8:f7:77:09:0b:99:39:92:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:F4:72:DA:46:87:76:85:FE:5D:26:B2:27:D7:85:2D:6A:F3:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.128.0/18
Signature Algorithm: sha256WithRSAEncryption
15:b0:80:8e:bc:40:22:86:ee:e7:6f:a8:e6:06:87:aa:f5:f4:
99:21:ed:f8:bd:8f:19:8f:da:40:bc:58:9d:50:46:1b:e0:f5:
b1:7a:0c:14:ca:26:ec:a7:14:3b:fd:2d:1a:ae:35:7c:f9:b0:
b4:71:3c:d3:20:ac:45:63:ae:77:d4:7f:93:35:c4:00:e5:17:
cc:9f:91:79:d9:e9:05:1d:eb:ea:d3:23:69:d6:5c:2b:ab:5d:
83:21:55:50:56:49:84:5c:9f:c4:35:a4:6d:67:bf:93:4b:36:
d5:e9:4c:b9:b4:2d:d2:04:75:16:63:f7:8f:8e:e9:f2:6c:11:
88:f9:bf:f0:67:d2:e6:67:b4:62:c7:dd:19:13:4b:d8:c1:41:
ea:89:8f:c9:ed:57:3e:41:b2:ba:ea:73:4e:14:2b:e1:fd:0d:
ec:cc:f8:70:80:75:74:44:c9:2b:21:a0:d3:8b:6c:dd:f4:a6:
76:b0:c2:e2:98:20:49:3a:76:5e:7c:b0:cc:be:e4:3b:04:06:
5c:82:b2:8c:d1:fd:43:10:51:7c:2f:bd:8f:ee:84:6f:1b:fc:
5a:7e:af:22:f8:9c:1b:21:d6:04:00:d9:90:48:c7:da:2d:19:
d5:84:28:52:54:ec:4f:8d:44:af:ae:86:46:97:c7:e4:93:5b:
14:70:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 00:26:30 2023 by rpki-client on console-fra.rpki-client.org