Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
File: cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa (raw, json)
Hash identifier: 8kKwf54Qaor28/rWxiA/2XLaACvl+5nggXknvltnBYk=
Subject key identifier: 02:98:E8:04:53:2E:8B:E4:DC:D2:B9:28:A0:69:6A:A2:89:45:5C:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E52CFFFBE2436AF1FCACBA3D3848073B4FEAEF5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:52:cf:ff:be:24:36:af:1f:ca:cb:a3:d3:84:80:73:b4:fe:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=09544949c7f99c4efe82cb3393e950dac668ed2e79e4f3228a1e59bfd8f66087, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:c4:2a:b5:a2:43:d7:c5:f0:b1:ed:4a:c8:
a7:a7:38:c3:5c:28:1a:84:7f:de:0d:2b:3f:f0:bc:
ef:e2:63:35:d2:3e:fa:32:c5:66:53:e0:6e:26:e2:
38:1a:d0:f7:5c:30:91:95:6f:e7:1e:a4:ff:c7:64:
d8:42:13:e7:5f:b2:fc:2d:14:fa:df:e3:73:a7:4b:
8b:94:4f:d9:af:6e:66:bc:c1:8a:c2:3e:c7:d1:5a:
3f:a5:ef:15:24:8e:0b:b0:12:13:64:55:04:de:5a:
47:18:c8:c8:2e:6e:d9:f5:09:37:a6:f2:5c:f0:5a:
38:85:cc:70:ef:74:13:52:53:fd:bd:67:2b:d2:79:
9a:78:98:1d:c0:e8:4b:15:34:ee:3a:19:80:f0:bb:
3d:e3:60:70:95:63:e6:d3:0b:b2:13:cf:cd:33:ef:
2a:24:16:f5:a3:cc:4b:9c:f4:88:f7:3d:58:67:b3:
1c:c8:21:7e:b0:d4:e6:95:cf:ba:dd:ff:70:83:11:
7a:0f:d2:58:92:87:43:bb:d0:f4:76:28:b8:86:2c:
75:d7:28:88:b3:bb:83:4d:7e:2d:d3:09:9f:7b:96:
6c:f5:8f:3f:db:7e:2b:2e:ba:e7:a2:27:3c:1f:f5:
20:8c:11:54:91:e9:6c:db:56:12:2c:d3:11:21:a7:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:E8:04:53:2E:8B:E4:DC:D2:B9:28:A0:69:6A:A2:89:45:5C:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.128.0/18
Signature Algorithm: sha256WithRSAEncryption
56:6d:4e:69:3d:f1:c7:d1:ff:d4:90:12:6f:0b:b2:d5:de:7e:
bc:4b:19:ab:37:bd:16:f8:94:54:fa:dd:c3:a0:00:b9:8d:b5:
96:2a:6c:27:97:af:ba:a4:46:2d:40:db:f0:80:02:74:2c:82:
6c:41:59:8c:c1:c6:3f:e4:87:95:f3:5a:ca:99:2f:10:f9:51:
75:24:00:bc:dc:1f:e3:c5:84:7a:df:99:34:e2:fe:b9:ad:f9:
65:6c:07:6d:2e:09:38:25:00:b3:c9:b8:15:1c:93:47:c9:80:
2b:36:81:1c:d7:5e:12:ae:09:20:0f:14:61:9f:60:5a:2d:51:
de:09:64:5f:ef:4e:6d:15:dc:04:5e:94:44:0e:85:f0:fa:e4:
e4:9b:1f:b9:4e:54:16:41:01:35:ab:28:7b:77:09:83:ab:58:
71:c1:b0:86:a2:ae:67:a4:5c:78:a5:a2:a8:85:0d:ed:53:82:
4a:af:bf:a6:96:d8:04:db:41:b0:d3:ff:0b:70:5e:0a:59:e1:
36:8b:dd:e6:46:05:47:38:28:06:18:a4:32:52:4c:b2:6c:b6:
fe:b1:b0:a3:fd:b7:d4:fd:da:ac:33:89:03:11:3b:ee:67:26:
a0:47:01:81:65:28:0e:ad:93:fb:32:dc:7e:d2:6c:74:50:d6:
65:fa:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:58 2024 by rpki-client on console-ams.rpki-client.org