Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
File: 0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa (raw, json)
Hash identifier: pFpwSR1yUcZLC/66CUjmtUAXhnP0NIq2ouVaC8xQQhs=
Subject key identifier: D1:51:C7:5A:4E:30:04:84:DE:D0:96:A5:0D:D5:E6:2E:8B:FE:23:F5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 556A51D32347D0D907FD700F208D11EC039F077A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6a:51:d3:23:47:d0:d9:07:fd:70:0f:20:8d:11:ec:03:9f:07:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=af0e2b5bb488a99500a3132a4e856c436f1523173ce3241d6a300c524a1f559e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:e1:db:87:04:a4:31:62:c2:39:39:61:22:
df:c5:0f:1b:7a:94:6c:af:90:67:23:ad:ac:06:bb:
75:1b:f2:54:48:cd:00:43:fd:8f:43:81:5c:fa:e7:
12:0f:ea:e7:ed:b3:5c:e7:25:54:17:9b:8a:e5:ce:
0e:eb:8a:94:e8:ff:78:bc:36:1e:7b:1c:7f:46:3f:
92:27:8f:c6:a0:d0:93:0e:bd:19:17:bf:1a:87:c0:
35:74:3d:3d:26:15:94:f9:89:0f:c6:17:5d:9c:55:
93:12:88:72:c8:74:55:b9:74:51:8a:14:6e:c5:ea:
1b:57:6e:fb:c8:15:51:b0:18:c6:4c:bf:d8:ae:84:
af:a7:ae:27:bf:c6:6f:e2:02:f8:c1:16:39:51:9f:
01:8a:ed:8b:c9:46:36:3a:f3:ca:df:8d:6d:df:80:
0d:3a:d4:49:ed:70:84:3c:4e:9b:25:f4:21:bd:f0:
50:89:05:1d:0c:91:57:41:3e:37:d6:e3:c0:98:8c:
f6:b2:62:17:e6:ab:a3:a0:af:14:8d:4c:75:f8:56:
92:e4:0f:da:97:04:c5:19:67:69:47:1d:8b:d5:dd:
bd:83:c4:00:0f:7f:fe:f1:57:4a:c1:86:f9:f3:de:
03:67:f4:20:50:3c:27:b2:cd:e5:3b:e4:a4:f6:6a:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:51:C7:5A:4E:30:04:84:DE:D0:96:A5:0D:D5:E6:2E:8B:FE:23:F5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9f:54:7e:e0:c5:b9:96:48:63:c2:f6:10:eb:6c:74:a2:0f:ba:
88:aa:ff:6b:1a:a2:26:4f:2e:2b:b7:b5:74:b3:ae:1a:d4:bf:
90:4c:11:67:0d:da:58:f2:cb:4c:6a:f4:b5:af:08:27:28:66:
21:70:ec:30:4d:4b:1c:0e:f8:8e:d6:ae:aa:9f:d5:de:87:5f:
86:63:0a:95:ee:da:ef:73:4c:5c:4a:ed:28:3f:36:73:c4:57:
b3:5e:18:1f:a3:55:01:54:ab:43:1e:e4:d7:84:4c:8c:16:23:
df:50:e0:4a:20:01:ea:fe:58:a3:00:ed:73:8e:5e:19:09:0e:
ba:36:6a:a7:f8:c9:87:21:99:59:87:da:91:53:85:c8:c6:b9:
23:56:c8:e3:35:8d:b5:f2:80:b7:f0:54:d5:6d:d2:a3:5d:e7:
83:cf:17:ed:e0:b5:e8:95:f4:46:ec:52:47:ad:fe:9c:1a:af:
a5:81:14:4f:3a:dc:6d:f6:b2:11:09:77:cc:eb:54:e3:82:37:
7c:5c:a4:d2:01:0e:93:a8:db:ab:e1:d5:03:00:e6:db:67:b2:
86:13:5e:53:ba:78:30:8e:89:6a:40:7c:bd:65:2d:95:24:65:
ad:46:64:71:6f:f9:77:20:49:91:25:31:36:d2:fb:ab:16:44:
5d:f5:d6:2c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUVWpR0yNH0NkH/XAPII0R7AOfB3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGFmMGUyYjViYjQ4OGE5OTUwMGEzMTMyYTRlODU2YzQzNmYxNTIzMTczY2Uz
MjQxZDZhMzAwYzUyNGExZjU1OWUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKi4duHBKQxYsI5OWEi38UPG3qUbK+QZyOtrAa7dRvyVEjNAEP9j0OBXPrn
Eg/q5+2zXOclVBebiuXODuuKlOj/eLw2Hnscf0Y/kiePxqDQkw69GRe/GofANXQ9
PSYVlPmJD8YXXZxVkxKIcsh0Vbl0UYoUbsXqG1du+8gVUbAYxky/2K6Er6euJ7/G
b+IC+MEWOVGfAYrti8lGNjrzyt+Nbd+ADTrUSe1whDxOmyX0Ib3wUIkFHQyRV0E+
N9bjwJiM9rJiF+aro6CvFI1MdfhWkuQP2pcExRlnaUcdi9XdvYPEAA9//vFXSsGG
+fPeA2f0IFA8J7LN5TvkpPZqjfECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTRUcda
TjAEhN7QlqUN1eYui/4j9TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MGJmYTI1ZGQtMzE5Zi00ZjJkLWI3ODYtOGFiMTlkNThlODExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNkMA0G
CSqGSIb3DQEBCwUAA4IBAQCfVH7gxbmWSGPC9hDrbHSiD7qIqv9rGqImTy4rt7V0
s64a1L+QTBFnDdpY8stMavS1rwgnKGYhcOwwTUscDviO1q6qn9Xeh1+GYwqV7trv
c0xcSu0oPzZzxFezXhgfo1UBVKtDHuTXhEyMFiPfUOBKIAHq/lijAO1zjl4ZCQ66
Nmqn+MmHIZlZh9qRU4XIxrkjVsjjNY218oC38FTVbdKjXeeDzxft4LXolfRG7FJH
rf6cGq+lgRRPOtxt9rIRCXfM61Tjgjd8XKTSAQ6TqNur4dUDAObbZ7KGE15Tungw
jolqQHy9ZS2VJGWtRmRxb/l3IEmRJTE20vurFkRd9dYs
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org