Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
File: 09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa (raw, json)
Hash identifier: bOICRJDvaNk4NWgapYQfkoChYDHQHcPExbl98ulSWPw=
Subject key identifier: C4:8D:93:D6:FC:58:DF:82:A8:4E:72:12:6D:98:4D:F9:24:6E:B7:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1D1A469C2EF07D97D45FB92C9405195CF1F535F1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.122.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1a:46:9c:2e:f0:7d:97:d4:5f:b9:2c:94:05:19:5c:f1:f5:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8720e628fdfa938fb1bb8abcaf5ed6425ada09aa941a6cf4e871eec1e244cc94, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:d2:c0:36:0a:14:22:11:92:44:8e:24:ae:
6b:7b:e1:e3:66:57:db:10:3e:33:ff:fa:ff:2e:1e:
2a:8b:c5:d1:36:04:fe:65:30:ad:5a:85:f0:22:e8:
de:1c:20:9e:83:d6:b1:a4:06:a5:73:89:de:27:b1:
a7:c7:89:85:4c:22:dc:3d:4f:c8:98:12:ad:bd:52:
02:f0:d4:ee:45:d0:1f:07:0c:bf:5a:4c:84:bc:ec:
0c:97:0b:92:b0:dd:11:e4:4f:62:37:d1:1d:e1:f3:
98:3d:20:50:74:e2:12:7d:84:d0:02:bf:e6:c1:72:
7c:6f:7b:94:1a:23:3d:45:86:ea:5f:95:91:22:79:
99:84:c3:13:e0:36:fd:d4:84:a6:c8:50:6d:dd:01:
f4:26:18:94:06:d3:f3:31:9c:81:ef:66:9c:a1:31:
3c:9e:03:f0:39:23:be:4c:36:18:79:10:e0:66:4f:
bd:b3:36:85:a5:e4:71:25:33:df:a0:6d:f4:5c:d2:
bd:67:ed:47:38:8d:76:b8:e0:ef:e6:a8:43:cb:43:
e8:4d:04:b5:ad:ed:18:eb:32:71:69:90:55:bf:ad:
da:1b:44:9e:56:32:25:08:e9:1f:26:64:f0:2a:79:
98:3d:e8:7c:17:1b:13:f3:34:fb:6f:17:b6:71:d7:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:93:D6:FC:58:DF:82:A8:4E:72:12:6D:98:4D:F9:24:6E:B7:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4f:0c:4d:ea:e3:45:dc:a2:c5:15:8f:d7:a0:8f:8f:c8:81:93:
12:ae:ec:8c:49:27:71:f3:57:00:53:ad:41:67:e3:59:3e:ee:
19:88:c5:22:78:7a:92:ad:45:70:ef:4e:59:8c:17:c3:8f:d2:
ba:84:01:6d:d8:98:d3:c4:06:2d:bc:41:55:92:93:fd:73:e3:
93:cb:17:62:39:5b:24:dc:21:8a:7f:81:e8:8d:af:38:0d:ac:
e8:03:19:01:c2:16:9c:e6:79:ee:c0:e0:cc:da:e7:1a:25:d0:
21:bf:9f:49:6d:90:e2:3d:f2:f3:d6:4b:85:c8:8d:e8:f0:f2:
68:40:f1:9b:0a:3b:65:df:44:43:9a:01:e8:f0:29:1f:4b:3d:
64:9b:21:f1:13:36:7c:04:37:aa:07:8b:cf:14:1d:41:67:73:
4c:c4:dc:a3:45:13:f8:49:3a:ba:52:ad:a9:d5:ec:dd:3f:24:
0e:73:da:73:80:94:71:02:84:bc:1c:ce:9b:e2:9d:63:f2:14:
60:d0:94:6a:d0:47:bb:c1:a9:2d:07:bd:70:33:93:75:b7:99:
a2:67:2e:8a:74:02:62:4f:18:d3:ba:26:8a:92:92:ee:6c:17:
ca:ae:63:f7:d2:92:08:73:11:c8:76:27:1f:62:86:f4:b7:e7:
58:7c:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org