Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0fed6a9b-dfef-4f11-831b-8067302411ff.roa
File: 0fed6a9b-dfef-4f11-831b-8067302411ff.roa (raw, json)
Hash identifier: ECQu5JtsP8BylSugSQQ0GhJ7sO2FS9JSfLGCHSzFmvg=
Subject key identifier: 35:8E:A5:25:0C:50:B7:6B:8A:14:02:DC:05:77:DA:94:4A:15:95:9D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 221F8648684EEDA2C69F6C40D9905DE0BB6B60D1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0fed6a9b-dfef-4f11-831b-8067302411ff.roa
Signing time: Tue 28 May 2024 00:00:00 +0000
ROA not before: Tue 28 May 2024 00:00:00 +0000
ROA not after: Tue 02 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 83.118.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1f:86:48:68:4e:ed:a2:c6:9f:6c:40:d9:90:5d:e0:bb:6b:60:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 28 00:00:00 2024 GMT
Not After : Jul 2 23:59:59 2024 GMT
Subject: serialNumber=b0c9dfbb278a96639b42dd2e6c6c325788125962814025423b4fbc70379dd63a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:ce:1b:39:62:22:dd:d4:07:42:0d:06:ff:
e4:d6:98:dd:39:42:52:ec:77:12:07:3c:f1:b7:6f:
c1:2f:41:c2:85:6b:9a:d3:cd:37:d6:78:88:a0:61:
ba:12:18:de:6e:79:d7:38:5e:eb:68:85:02:df:e4:
7b:d0:d1:70:e4:d5:a6:3f:6b:f8:07:51:92:c4:56:
5c:80:fa:a8:ed:66:d6:c7:52:18:93:27:f4:cf:72:
2e:8e:f6:50:09:b6:6d:52:48:35:e2:aa:ca:61:45:
4e:f1:7c:8b:9c:2d:59:4c:ac:29:b8:3a:c6:5a:6c:
d4:c0:6d:59:56:3a:6d:0c:41:dc:ea:29:10:38:6d:
e6:55:18:5d:8a:3b:e9:be:75:a1:2c:3f:41:86:62:
0e:dd:d5:01:b9:4c:c7:cd:51:0b:9e:8c:dd:b9:7c:
83:0f:63:ad:3b:ee:1e:d4:dd:ca:d7:fc:23:a1:9f:
08:94:f0:a7:4e:f5:68:e5:44:77:c7:dd:fc:5a:76:
92:87:6c:c0:fa:ad:5b:ed:60:a3:54:f9:df:ea:d2:
1f:56:95:a9:59:a0:43:8f:12:51:50:39:eb:35:d9:
c6:23:a8:ae:c6:2b:5b:61:77:1c:6a:d3:f2:0f:d0:
2b:a8:d9:69:4b:c3:ee:c0:09:70:27:6b:97:1a:a3:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:A5:25:0C:50:B7:6B:8A:14:02:DC:05:77:DA:94:4A:15:95:9D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0fed6a9b-dfef-4f11-831b-8067302411ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
51:2e:76:82:ac:c8:eb:78:d5:eb:ae:d0:20:4a:7a:54:24:c4:
4d:85:97:44:6d:98:33:9f:ba:78:32:b6:b3:5d:25:76:b1:7c:
de:ee:77:41:8a:b7:e6:24:4c:d0:91:59:ba:93:96:33:59:97:
4c:2c:a0:17:0f:9e:40:ab:bf:30:9e:75:2c:19:97:1f:94:7a:
a9:b9:fa:8d:07:a2:a5:72:1a:5d:96:88:64:e9:70:31:c9:ee:
b2:02:9c:42:e2:cb:33:8e:18:79:a7:f4:44:f6:c9:22:07:40:
95:2c:c0:42:14:51:9c:7b:59:eb:a0:df:8e:d0:ab:66:77:e7:
c8:71:f0:dd:4c:7e:fe:16:fd:73:64:2d:26:a9:e7:3e:32:bf:
78:09:97:7b:1d:37:e6:a4:40:d4:9c:c0:b5:21:6d:ae:f6:b7:
1c:f3:82:57:29:2e:15:b7:bc:c2:f9:2e:e7:12:85:44:7f:df:
a9:f2:65:be:3b:94:22:7f:5d:8c:18:5f:e6:3c:84:a7:89:5d:
2d:5e:a5:57:03:c7:22:35:0d:39:78:c4:ed:2d:bf:2f:a3:ae:
f3:c1:3e:26:24:1c:95:b3:27:b8:ab:df:b4:01:e6:3b:d2:21:
0e:f3:3d:9f:18:41:32:a8:92:90:c5:89:38:b5:44:4f:ce:ea:
b2:88:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org