Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0c6b4210-6d33-4120-9b45-22888da2c0a8.roa
File: 0c6b4210-6d33-4120-9b45-22888da2c0a8.roa (raw, json)
Hash identifier: V0CcmcGNqnoo6k60Y3FAX/f9RrwxoDPMw2K+jZkYUQQ=
Subject key identifier: 51:16:07:D9:1E:B3:47:72:31:D5:DC:D6:6F:9E:6D:DD:AE:67:83:85
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5FB7577DCC3A2D12B2CD1CCC07921298370C163A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0c6b4210-6d33-4120-9b45-22888da2c0a8.roa
Signing time: Fri 03 May 2024 00:00:00 +0000
ROA not before: Fri 03 May 2024 00:00:00 +0000
ROA not after: Fri 07 Jun 2024 23:59:59 +0000
asID: 14618
IP address blocks: 212.173.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b7:57:7d:cc:3a:2d:12:b2:cd:1c:cc:07:92:12:98:37:0c:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 3 00:00:00 2024 GMT
Not After : Jun 7 23:59:59 2024 GMT
Subject: serialNumber=69dc6f19073e6541cf4696dcef218a425032a6b683a82c65ce98560e2fdbebf4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:a8:4b:3c:23:c2:ba:f6:51:2f:d5:cf:e4:
67:ab:18:d1:d7:ef:93:79:12:6d:98:28:93:4d:3d:
d5:8d:4d:bc:a4:ea:c7:44:b5:6f:87:7d:3c:3b:4d:
25:ee:86:27:80:a9:a8:82:46:83:d5:c0:12:83:d4:
d1:72:12:d5:49:46:16:14:9f:3e:78:32:02:a9:96:
95:fe:6d:44:2d:4b:13:c6:3e:ac:71:5d:f9:9c:8f:
75:fe:b4:3c:db:00:69:c6:6a:f9:5c:d9:bc:07:d8:
b3:a3:80:b2:9b:a5:b5:03:d1:88:1e:88:d2:81:a5:
1b:0e:58:f9:f4:e7:57:93:23:56:0e:c9:9f:e1:a7:
b0:3c:1f:a7:c3:cd:ec:6d:a4:5e:c9:fd:fb:98:f8:
46:40:22:e5:bc:a5:90:3d:17:97:47:d9:e2:24:05:
68:1e:af:3e:5d:92:b6:d5:12:27:65:3a:1a:da:24:
50:0f:a8:aa:5c:ea:f8:d1:92:e6:56:81:1a:22:7a:
c7:d9:c4:d9:47:d9:09:27:da:5e:f0:3d:1b:f7:aa:
32:8d:75:86:41:93:0f:d5:55:cc:22:95:a6:26:d8:
5f:0c:37:26:04:2b:e6:21:cd:14:f8:af:2a:b5:4d:
33:78:ae:42:6e:ff:2c:2c:4b:06:8b:1b:d6:4a:e4:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:07:D9:1E:B3:47:72:31:D5:DC:D6:6F:9E:6D:DD:AE:67:83:85
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0c6b4210-6d33-4120-9b45-22888da2c0a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.173.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:ae:c1:a3:4d:48:60:0e:d3:ff:43:8c:65:60:2b:62:37:e4:
98:2e:66:14:d2:a4:8b:f1:53:ad:a2:73:e2:d6:23:10:46:6e:
f0:a1:c6:eb:ba:c0:70:b8:7d:1a:61:cf:c9:ca:ec:95:ad:c1:
3d:98:f5:67:16:e7:ab:36:cc:27:2e:d8:a5:72:7a:95:8a:bf:
b2:9c:87:c7:c0:b1:27:72:ec:1e:70:95:04:c4:54:47:38:45:
ee:05:70:66:b6:18:2a:3d:e3:8f:e3:a8:a3:c4:3e:09:23:22:
23:4c:2d:5e:75:2b:d6:05:4e:b6:08:dc:91:78:f2:0b:fc:1a:
e3:4e:56:50:64:7d:bb:89:16:b4:ed:57:73:b7:43:31:8f:88:
6d:fe:27:05:48:28:8c:96:ba:6c:f5:53:1e:6b:10:57:55:d8:
2b:14:05:50:80:4e:1a:e6:65:49:91:00:6f:7b:19:13:49:fa:
35:db:bb:76:bc:15:6d:f7:58:de:00:73:d6:08:9d:e4:d9:28:
89:7a:f3:57:b8:98:63:5b:3b:87:06:03:26:00:ce:8c:6a:97:
d8:9d:67:31:3b:32:55:7a:a9:dd:f6:15:28:64:7e:97:48:8a:
26:3c:95:b6:c3:c5:de:53:82:c9:eb:5f:f8:d8:d6:59:15:d3:
37:93:27:e9
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUX7dXfcw6LRKyzRzMB5ISmDcMFjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MDMwMDAwMDBaFw0yNDA2MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDY5ZGM2ZjE5MDczZTY1NDFjZjQ2OTZkY2VmMjE4YTQyNTAzMmE2YjY4M2E4
MmM2NWNlOTg1NjBlMmZkYmViZjQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIXqEs8I8K69lEv1c/kZ6sY0dfvk3kSbZgok0091Y1NvKTqx0S1b4d9PDtN
Je6GJ4CpqIJGg9XAEoPU0XIS1UlGFhSfPngyAqmWlf5tRC1LE8Y+rHFd+ZyPdf60
PNsAacZq+VzZvAfYs6OAspultQPRiB6I0oGlGw5Y+fTnV5MjVg7Jn+GnsDwfp8PN
7G2kXsn9+5j4RkAi5bylkD0Xl0fZ4iQFaB6vPl2SttUSJ2U6GtokUA+oqlzq+NGS
5laBGiJ6x9nE2UfZCSfaXvA9G/eqMo11hkGTD9VVzCKVpibYXww3JgQr5iHNFPiv
KrVNM3iuQm7/LCxLBosb1krkik0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRRFgfZ
HrNHcjHV3NZvnm3drmeDhTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MGM2YjQyMTAtNmQzMy00MTIwLTliNDUtMjI4ODhkYTJjMGE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9StgDAN
BgkqhkiG9w0BAQsFAAOCAQEAK67Bo01IYA7T/0OMZWArYjfkmC5mFNKki/FTraJz
4tYjEEZu8KHG67rAcLh9GmHPycrsla3BPZj1ZxbnqzbMJy7YpXJ6lYq/spyHx8Cx
J3LsHnCVBMRURzhF7gVwZrYYKj3jj+Ooo8Q+CSMiI0wtXnUr1gVOtgjckXjyC/wa
405WUGR9u4kWtO1Xc7dDMY+Ibf4nBUgojJa6bPVTHmsQV1XYKxQFUIBOGuZlSZEA
b3sZE0n6Ndu7drwVbfdY3gBz1gid5NkoiXrzV7iYY1s7hwYDJgDOjGqX2J1nMTsy
VXqp3fYVKGR+l0iKJjyVtsPF3lOCyetf+NjWWRXTN5Mn6Q==
-----END CERTIFICATE-----
Generated at Sun May 5 22:04:21 2024 by rpki-client on console-fra.rpki-client.org