Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
File: 0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa (raw, json)
Hash identifier: KkeqsSAODjSZ1wldRTe//SecWP0nuZNJhDUfJlT2TMY=
Subject key identifier: 80:CB:59:FE:22:36:28:56:30:82:EF:E8:CE:00:9E:BA:2B:5A:7D:63
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 351BD21162FAEE401D93799506C0E993080745D2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1b:d2:11:62:fa:ee:40:1d:93:79:95:06:c0:e9:93:08:07:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8f854c0d511224e32e1151400137d8d252cc4db2750d968705d77515ed3d2df9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:b3:a9:c0:f0:70:39:a9:a6:89:9b:1a:6d:
bb:b3:8d:db:6d:62:85:8d:f5:00:a8:10:95:d3:67:
6b:83:11:06:58:fc:2e:44:fb:4d:5c:74:8d:12:4c:
41:7c:5f:08:c4:a4:1f:80:98:82:92:05:96:cc:aa:
35:c9:de:24:74:4a:5a:a1:88:74:1c:a2:3d:f5:dd:
18:5a:39:11:54:20:07:c4:e0:73:c4:46:8c:ba:92:
2e:16:61:b2:97:db:15:7a:c7:1d:b4:df:1e:7f:cf:
75:a9:43:8d:a6:71:67:60:70:7a:6b:32:48:c2:4d:
8d:9f:99:d5:bb:55:b0:fd:d3:dd:f5:e4:fe:da:62:
a2:a4:30:ff:24:d5:f8:e3:1d:d7:b4:f1:d7:74:81:
99:ab:fd:20:87:c1:1e:9c:31:df:33:9c:cb:cc:b7:
4e:3a:81:7e:22:f7:2b:ba:66:d5:66:3e:51:6f:d0:
92:af:8c:1b:4a:a7:1b:11:22:19:39:c7:79:61:8a:
a3:4e:fb:c6:f4:43:77:6b:ba:fe:b8:16:00:73:1e:
fb:aa:dc:a3:19:8f:e9:64:3d:86:10:ab:e9:20:80:
5f:57:44:d1:89:e3:d9:dc:c3:4d:69:de:c4:39:ab:
4c:e3:d1:a6:c3:da:21:b0:8a:a7:69:fe:9d:f2:7d:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:59:FE:22:36:28:56:30:82:EF:E8:CE:00:9E:BA:2B:5A:7D:63
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:26:e6:8d:8f:5b:55:8a:dc:cd:f0:4d:a1:0e:46:91:a5:44:
0c:af:6a:9d:f0:e7:85:2d:92:aa:4b:bd:44:f2:a6:34:b9:18:
a8:c4:01:0c:dd:1e:61:e3:27:81:95:d1:1e:f0:23:5e:06:ef:
f2:2d:19:4f:34:16:6c:97:e8:5f:51:30:5d:b3:b6:67:f9:f7:
84:91:3e:77:d0:67:00:6d:d2:76:9e:63:9e:75:47:ef:a9:f3:
4c:f2:a9:2f:51:83:64:77:f6:02:4f:11:ce:d4:0c:b6:af:5e:
03:89:b3:43:99:d5:b4:29:00:fe:24:7e:d1:c0:1a:d4:dd:71:
42:ea:53:98:0c:00:9f:8e:d2:a6:ab:06:23:4e:61:c2:13:1d:
bf:96:3e:06:08:19:c4:37:5a:e4:01:8a:4d:0e:e8:3a:4d:89:
ec:23:40:2f:a0:ba:25:63:20:92:a8:22:4d:1c:67:0e:74:0f:
6e:15:ea:8f:ef:66:3d:be:ce:64:31:d7:47:ce:95:52:2b:cc:
3b:38:86:79:45:f2:0f:7c:04:15:63:e4:1f:ac:e3:64:b3:b4:
ec:42:3c:7c:26:2a:61:e2:d9:db:df:a3:14:b2:d1:cd:4d:e1:
3a:33:d9:79:88:14:92:ac:54:8a:ff:e9:77:09:2c:41:0e:2a:
50:a8:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org