Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f648163-e886-4951-999f-6a050d9c305f.roa
File: 0f648163-e886-4951-999f-6a050d9c305f.roa (raw, json)
Hash identifier: QxvYWhj7pAn7IjRC0IXybcdsXNz5xSfwSucmA4Z2ovM=
Subject key identifier: DF:F4:0A:1A:7D:F7:0C:AC:7B:E3:51:EB:92:40:6F:83:BA:AF:A6:26
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 706004409E92AA582CEF6AD0A77B2168092B83BD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f648163-e886-4951-999f-6a050d9c305f.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:60:04:40:9e:92:aa:58:2c:ef:6a:d0:a7:7b:21:68:09:2b:83:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8fcd10f0a5d3252b04ef2faf567f84be7d537c3caee0bd198c1f6e3494f6bf64, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:57:35:21:93:89:33:1f:ef:7e:16:88:44:
b8:d2:ec:c9:1f:94:67:cc:f6:76:4c:27:f1:12:b4:
49:09:1c:a4:29:aa:f7:4a:36:0b:89:3d:33:d4:ad:
94:da:1e:29:0f:75:55:19:4c:2c:e9:20:9d:05:d4:
ed:7e:4f:2b:de:2f:5a:ee:4b:ac:32:01:be:bc:e1:
51:bd:d5:95:b6:68:b0:2a:b8:1d:33:1e:bd:f5:4d:
04:7c:7c:85:7e:24:cf:95:d0:3f:82:c8:db:20:71:
74:30:64:30:a8:71:98:a2:a9:f2:ec:88:bd:7e:8a:
69:30:77:ab:af:5c:0d:69:f0:ad:83:e5:20:65:39:
f0:f9:36:e9:e2:49:88:71:95:42:cc:3d:a3:75:82:
f7:81:90:f6:9c:5f:a4:af:e9:0a:3b:66:21:9b:cc:
94:dd:d9:a6:2e:13:3a:73:cc:0e:1e:9f:20:a2:ab:
23:01:94:80:40:f1:d5:a7:ef:0e:46:12:31:8f:8b:
cc:ef:38:ac:85:b8:37:35:f1:84:c6:91:2a:e6:2c:
10:5e:b2:4e:1c:0a:b1:82:a7:b9:73:47:df:47:ed:
b9:77:3f:8a:e5:54:22:78:24:d6:d3:de:33:4a:ee:
d9:eb:b0:b7:a4:36:8b:ff:75:18:27:d3:69:72:f4:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:0A:1A:7D:F7:0C:AC:7B:E3:51:EB:92:40:6F:83:BA:AF:A6:26
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f648163-e886-4951-999f-6a050d9c305f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:56:ce:8f:cc:78:d9:f9:74:b3:6d:c9:05:c7:87:f5:4f:85:
d5:44:f3:00:4d:c9:2c:9c:e8:02:3f:e0:9a:85:f3:9a:72:4e:
ff:86:4a:1c:a4:76:44:51:4b:d8:f7:af:f1:1e:f0:39:5a:09:
d7:e5:ad:0d:6d:36:f0:92:e8:39:f5:2d:24:1f:96:8f:cb:d8:
1f:1b:ac:b5:12:da:3c:e8:a8:c7:a9:10:b6:17:ec:06:8d:18:
da:cb:d5:ee:aa:1b:69:46:a3:6a:86:1c:40:a2:5c:2e:f2:4c:
1c:a8:f2:bd:5d:46:4b:a7:20:83:03:23:8d:88:6d:ef:82:87:
23:1e:6b:75:16:17:0e:8a:b2:56:ee:d4:31:81:c1:54:25:77:
53:d8:05:36:95:2c:dc:28:7c:06:53:86:f3:97:a8:f3:3c:c5:
27:df:d9:27:b9:7a:e5:3d:e2:76:91:6f:02:0f:2b:24:4c:7c:
32:00:2c:40:76:88:8a:27:e2:83:bb:71:bd:ae:1b:34:11:b2:
67:b2:55:14:a4:e8:8c:ba:0f:f1:a3:b1:b0:cc:a8:d9:46:ff:
86:03:16:f7:32:af:cb:fd:10:0d:20:7a:f0:d1:e1:a7:1a:36:
3a:7f:04:fc:d4:2c:e8:4d:6f:2f:95:7a:99:21:ad:51:27:7e:
4f:9c:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org