Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa
File: 07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa (raw, json)
Hash identifier: XL+0oez2dom1LNATPZIY1HXtr55Xh8ydUx9jjW762jo=
Subject key identifier: B3:FD:41:6B:85:A9:6A:8A:28:B8:63:A4:69:2A:FC:25:E6:68:6B:AB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 236623A74CFC2ACB9EE8969C4F03962EA17285BF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 83.119.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:66:23:a7:4c:fc:2a:cb:9e:e8:96:9c:4f:03:96:2e:a1:72:85:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=831cfadb7b2cdef5967ad9000f967a7bd353bdf40f7a841660303dca89d0bc3d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:a9:71:9a:ae:25:63:6d:21:35:55:7b:d4:
54:1c:87:7e:84:b1:c1:ee:ad:da:18:1a:10:62:68:
eb:d3:03:11:db:3f:28:5b:8a:0f:6e:e8:91:6b:75:
da:dc:86:97:f3:64:a0:2a:e3:70:a3:14:6b:62:1f:
e0:75:27:19:6b:b7:d5:29:30:96:bd:25:e3:53:df:
84:43:58:31:e3:ec:70:7b:e1:f4:3e:5e:1f:14:87:
d0:40:e7:92:02:54:e5:a9:d3:c8:a7:47:88:e7:93:
45:dd:14:b6:4f:d2:1c:6f:07:22:6a:8a:59:d4:f8:
da:1e:e1:53:0d:74:87:7c:12:84:7b:f2:31:14:8f:
e1:bf:b5:25:32:5e:f7:f1:53:2d:a5:0c:8e:1e:87:
aa:c0:37:33:47:1c:67:c7:de:40:3d:f8:b0:a9:32:
43:6b:6d:00:b0:de:4a:e5:b9:30:20:ef:71:b2:3a:
cd:15:69:f0:e2:fe:09:1c:a7:c8:30:3a:d6:0f:c1:
09:17:de:23:95:57:be:f6:55:a5:a6:6c:6a:7d:1d:
3d:6a:a3:1b:1c:60:ea:8b:42:02:02:1a:3e:07:28:
55:02:b2:2f:17:10:cf:37:bc:f4:d8:f5:42:9d:89:
22:25:2a:7f:d1:a2:2f:b3:c8:3b:7a:cf:e1:9b:5c:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:41:6B:85:A9:6A:8A:28:B8:63:A4:69:2A:FC:25:E6:68:6B:AB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
d0:73:52:a1:f3:c2:3d:39:9b:45:68:9e:34:29:88:8a:dc:fa:
e6:7a:0c:8c:4f:49:98:24:ab:c9:97:5c:4f:41:a4:8c:43:29:
81:59:4b:4c:cf:14:79:c1:cb:4f:49:04:6f:c1:f9:c3:ea:c6:
c5:05:77:be:49:06:3c:08:41:57:ae:e3:49:85:80:e8:4a:01:
64:7c:a6:04:9a:7c:64:48:54:d1:48:d4:de:4b:ff:65:32:db:
3e:19:1b:c0:b2:55:a4:cc:98:d9:8a:3d:d8:26:e2:62:95:d2:
05:8d:c4:03:bd:cf:a2:17:d3:9c:d6:0a:f2:b4:97:29:c1:97:
8b:d9:17:cf:8d:1f:0d:e7:05:87:c5:97:ca:e9:82:40:c0:9c:
f2:e2:b6:b7:66:79:8a:ab:9a:25:1d:94:ca:04:0c:82:b2:15:
66:7a:eb:f6:25:6d:c2:be:a6:51:fb:bd:44:7d:f6:5e:52:ac:
d2:e7:d3:0c:8f:fa:0d:db:48:00:98:e8:4f:b2:42:d9:74:f3:
61:d9:a3:5b:38:30:a2:34:c2:fa:b3:7f:64:c8:e8:65:58:0b:
91:1c:2f:19:e7:3b:0a:f9:2f:9a:8a:35:64:a7:c0:7a:64:5f:
50:4a:6a:e5:17:9a:03:04:e1:f8:2e:7e:63:48:7d:6d:a3:a5:
65:59:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org