Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/01305f95-02db-46f4-a135-5ff585346b72.roa
File: 01305f95-02db-46f4-a135-5ff585346b72.roa (raw, json)
Hash identifier: HnZQXr1540gGj0CFWr48da4jxLwbdx6R01aPx/IdnPI=
Subject key identifier: DF:37:03:1C:96:8D:39:6A:BC:77:2B:58:03:97:74:9A:EB:FF:9F:0D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 666DBA0835C41481BF2227658CACA7328E711CDD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/01305f95-02db-46f4-a135-5ff585346b72.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.204.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6d:ba:08:35:c4:14:81:bf:22:27:65:8c:ac:a7:32:8e:71:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=0ab5caaf0456d5188433a0f6f47a8314bb2b46c8551349261b46443fdf00b80e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:9c:9f:9a:18:64:5a:52:54:a2:01:44:47:
96:4a:87:39:37:3c:b6:de:88:f9:21:80:41:31:80:
c6:a6:97:93:3c:9e:58:3a:09:01:f9:02:62:c1:85:
1e:11:6a:bc:24:b9:1d:80:d1:5b:34:a4:2a:c4:b5:
6e:fc:e7:33:60:4c:1b:24:7c:64:fa:f3:26:07:12:
e9:c1:4c:c6:81:67:df:a7:bc:b2:80:b0:01:4d:19:
2c:bc:19:11:3c:e8:9b:55:29:0d:57:cd:ec:7a:17:
b7:4c:3a:38:71:ce:b6:a4:97:2e:be:d6:11:28:4b:
7a:61:88:5e:a8:5f:a6:5e:d0:c7:36:99:90:cd:cc:
b7:dd:a6:5f:2a:95:94:4c:7a:5e:d4:11:5f:b0:23:
ed:d2:43:d8:ac:5f:b1:b5:67:07:b3:02:c2:d8:6b:
39:5e:d8:b7:2c:c3:06:73:e9:4c:1a:a3:f7:70:84:
58:44:39:87:7f:03:e3:38:fd:6a:fb:af:6d:12:0b:
d4:35:e5:5c:1c:ab:aa:7a:5f:70:ae:56:e1:7f:75:
2d:6b:ca:98:92:fb:78:8a:ca:eb:6d:04:1f:f1:a1:
fb:48:8f:6c:8f:30:aa:cd:c2:2e:8c:cf:08:f8:d7:
67:4a:fd:0a:50:ae:91:d6:08:16:47:22:af:1a:f2:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:03:1C:96:8D:39:6A:BC:77:2B:58:03:97:74:9A:EB:FF:9F:0D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/01305f95-02db-46f4-a135-5ff585346b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
58:ad:b9:8c:21:1f:78:bb:40:b2:c9:fb:b7:cd:74:ff:16:bc:
7d:07:f4:c6:d5:3f:1f:51:7f:ab:73:e5:67:3c:7b:41:3b:a1:
d8:43:3a:47:38:4b:80:e8:0b:19:16:16:58:b3:1d:d7:3d:85:
02:17:d6:1b:55:b7:1e:e5:a8:2e:c4:1d:48:c7:c2:9e:9b:17:
d2:db:57:21:23:d1:38:49:3e:5f:18:54:c5:97:e9:f6:d0:0b:
1a:4b:7a:38:26:4a:71:f6:fa:41:16:de:7f:15:bc:00:0a:a6:
93:3a:9d:b3:90:93:e2:51:e6:1e:4e:59:8e:d6:14:15:b4:7b:
23:a6:31:76:b3:0e:4f:cb:8c:c1:d7:ae:e6:a3:a0:09:c1:67:
d1:58:16:42:e0:6e:84:b1:84:c4:54:99:4b:99:6f:df:18:b0:
da:33:db:9f:13:10:6d:59:7e:76:8d:5d:82:6c:95:7f:39:4f:
91:b6:22:a3:e6:33:a0:59:0a:9a:6a:e1:30:4e:55:01:15:ed:
06:fc:5a:93:a9:3e:df:65:03:f9:d5:d2:c5:8e:02:9c:a5:0d:
e4:d4:81:58:51:e7:13:19:44:ce:c1:94:ee:f6:c8:37:12:0e:
e4:0d:fc:dc:91:0d:47:08:3d:d6:2f:bc:35:86:48:23:3a:8a:
8a:0f:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:37 2024 by rpki-client on console-ams.rpki-client.org