Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa
File: 0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa (raw, json)
Hash identifier: fk2BTal5RxuTOmQjiT7lbIdjbJQDBzeG5K4b5HJoPYQ=
Subject key identifier: BF:B4:D6:53:88:52:CF:8E:F9:79:AB:6A:F9:F6:00:5F:C8:CE:2C:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1DBC9A9E8446CA2A1EA48C23C1F3AEAE4AA450BC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa
Signing time: Tue 11 Jun 2024 00:00:00 +0000
ROA not before: Tue 11 Jun 2024 00:00:00 +0000
ROA not after: Tue 16 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bc:9a:9e:84:46:ca:2a:1e:a4:8c:23:c1:f3:ae:ae:4a:a4:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 11 00:00:00 2024 GMT
Not After : Jul 16 23:59:59 2024 GMT
Subject: serialNumber=01e29141a11cc8f175845ec2cbb6e17e4688e76134bd9320b13635b8ddee0eb7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:b8:98:35:f7:47:92:54:b6:96:d9:37:8d:
9f:b3:9d:db:48:ef:0e:27:44:85:12:60:70:22:ee:
b4:6c:e3:fb:b5:09:63:0c:db:4c:49:7c:83:35:6a:
3c:43:90:21:42:4a:df:d1:78:fb:44:64:cf:c2:b3:
be:18:60:00:9c:d3:d8:77:92:2f:5a:b6:ef:16:88:
82:49:09:6c:d3:5d:2d:6a:6d:57:b6:72:ba:30:bf:
b9:5c:14:bb:9f:a4:ef:10:d1:72:24:84:40:7b:7f:
4b:aa:de:27:bf:3d:13:50:c9:29:79:ee:f1:ce:b6:
5a:3c:c3:a8:80:5d:5d:1e:b1:8f:77:57:cd:5b:ea:
4c:97:d2:74:3e:93:5b:21:26:8a:77:43:66:75:f3:
1b:e8:c1:1e:69:75:cd:51:25:e7:50:5f:77:88:5a:
cb:12:4f:c1:3a:ef:8f:58:c1:ed:17:7f:a9:d1:30:
9b:2b:a9:69:aa:15:45:0c:f8:91:2a:0e:ba:d9:51:
c4:c8:90:c4:aa:e1:fc:58:cd:39:17:eb:b7:75:88:
36:21:21:e2:ea:f2:4d:73:9d:94:29:0c:4e:f3:c3:
84:b2:b2:9d:f9:37:62:c4:83:82:2b:3b:aa:e5:c6:
b7:ea:12:e7:65:47:86:f3:3d:f3:f2:e3:94:a8:37:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:D6:53:88:52:CF:8E:F9:79:AB:6A:F9:F6:00:5F:C8:CE:2C:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
60:14:82:cf:a8:9f:6d:88:a4:16:4d:a4:ff:17:fc:a4:44:0a:
7d:ae:2f:4c:3b:ee:a2:1b:8c:29:aa:95:78:93:89:17:48:a2:
3a:b6:ce:d6:93:25:a7:3d:60:da:c3:f1:b1:4f:d6:7a:f1:45:
0d:c8:31:c5:49:5e:62:a1:14:ac:81:5a:97:8d:26:53:23:ce:
6d:d7:4f:44:8d:b3:05:e3:6d:37:4e:cc:09:5a:79:c5:69:e4:
4d:8a:1c:d2:ce:ee:4e:1c:d6:71:61:fa:5e:43:67:16:8e:5d:
88:4e:dd:93:a2:ac:9a:23:2c:13:70:30:f9:f0:63:2c:97:84:
21:fb:5f:c6:a9:78:77:41:c5:b0:4b:f4:27:10:52:23:e6:29:
65:a7:36:9c:63:0e:01:d6:c4:07:2e:45:7d:e2:d4:ef:fe:56:
7d:9e:d1:52:c7:eb:51:ab:20:62:5b:2d:34:18:46:57:ae:84:
e7:07:27:f2:6e:94:f1:2b:50:ed:ba:f0:fc:80:02:d6:b8:1b:
ba:fb:3b:78:50:3f:80:cd:3a:ac:61:f2:44:cb:05:27:04:c4:
cc:d7:04:aa:2f:c9:86:d1:77:48:f8:fb:e0:0f:75:89:c9:1a:
53:b8:7f:86:4d:6c:aa:48:c3:90:43:c8:07:61:9a:2d:25:e4:
ad:29:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org