Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
File: cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa (raw, json)
Hash identifier: 0jSR0o5uJTIIr7SqwDc8WHTUZfvuYLHU6QP0aKyA0Fw=
Subject key identifier: 73:0D:33:AB:DC:33:5C:5E:7B:36:52:35:E4:A9:37:31:05:78:66:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A4137126753FC0327F7258A6DCA0ED347E477C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:41:37:12:67:53:fc:03:27:f7:25:8a:6d:ca:0e:d3:47:e4:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=6a66409be24f68327f10eadd346094c1a977ea234436d80d50d2f1e541c003c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:b3:17:c2:31:21:ba:53:6f:ca:40:cd:84:
1a:4c:d1:1f:ad:f1:7b:5e:46:60:f4:63:f6:24:a8:
4b:0e:88:15:8a:1a:0b:74:ad:96:c3:70:b9:df:22:
75:b6:af:ef:24:e4:2d:38:1f:c1:f2:c1:f9:77:af:
6c:68:2c:52:ff:57:cd:9a:0c:fd:66:ca:ae:3a:ea:
9f:12:f9:9f:60:b1:6a:6e:0a:0f:0c:02:a4:4b:1b:
d1:d1:f0:bc:d7:b1:0a:15:3b:96:47:9c:fe:dd:a0:
0d:04:23:a1:6f:13:2d:4b:b9:cf:f4:b7:f0:7c:d4:
d9:f9:cc:a6:e6:5d:fd:a0:e7:da:00:2e:8b:86:6b:
68:65:e4:10:64:69:92:9d:06:17:90:d9:83:2d:5d:
32:66:98:0e:4b:0d:63:41:cc:da:3e:e7:15:38:68:
08:f0:14:7e:6c:29:69:33:4d:43:c3:75:d4:59:86:
69:0f:62:61:8b:33:29:2e:9d:0e:11:d8:7c:cc:9c:
41:2f:23:04:00:75:72:15:bb:62:0d:fc:b1:ec:e3:
03:d1:94:e4:6e:f9:0e:8b:96:c1:d7:b2:c7:cb:48:
e2:46:cc:59:af:94:fe:21:5f:af:96:12:fd:96:4b:
ef:7b:2c:72:4d:2e:93:8d:8e:5a:3f:0f:ea:15:84:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:33:AB:DC:33:5C:5E:7B:36:52:35:E4:A9:37:31:05:78:66:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc6c9ef3-9bc2-4d6b-adf2-71f95d7a7acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:e2:51:b7:3b:e3:8f:02:13:30:ed:05:a6:a3:6f:d7:8e:cc:
fb:c7:db:ee:49:6e:bb:43:99:8f:db:e7:35:b8:13:87:ab:e4:
0f:d2:f0:bd:0a:c1:1a:10:5b:dc:8d:a7:77:97:d9:92:4e:73:
10:a0:a1:8e:8b:c3:14:1e:78:4b:75:4e:13:d0:df:90:40:95:
fb:01:44:f1:3f:6e:ba:5a:c0:b9:eb:bc:3c:53:20:1f:49:c3:
4d:6a:e8:31:85:46:f0:24:ae:8b:7d:58:4f:61:a9:a0:6d:c7:
27:d0:3b:16:83:9a:4e:1d:1e:1d:14:1f:f1:0f:2f:00:7f:20:
c6:bd:52:cc:56:f6:79:d1:4e:32:87:f5:9c:4b:73:60:38:3f:
f4:86:84:0a:ab:7b:cd:6b:2b:db:6a:cd:85:0a:7c:60:d7:50:
a6:4f:8a:93:08:e4:9b:9e:02:9c:2a:81:9e:29:9c:34:32:32:
1d:ff:e4:fd:80:ce:38:5a:f7:4b:0e:22:db:f1:95:ce:bf:1a:
90:e1:3d:c0:14:3d:aa:d6:a6:ed:1c:72:c9:a2:cd:4f:3c:47:
51:47:f4:c0:13:4d:a9:e3:42:92:96:f1:ef:11:65:e7:75:15:
8e:8b:b4:67:70:8b:e4:c4:c5:dc:d6:f9:3d:f6:57:18:f7:6d:
44:15:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:41 2024 by rpki-client on console-fra.rpki-client.org