Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
File: 179c664b-afae-4c21-9c97-2a2a3985d5b0.roa (raw, json)
Hash identifier: gxfwMzHzvTtSW+bCyHwFgxmYWmGkYFAInb6XLGIV4aQ=
Subject key identifier: 8F:E8:58:DD:1E:24:30:D7:31:7D:7F:A9:71:D4:C0:DF:89:83:27:CD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 60AF2C00E94146461C249153D8E7995D0D0FC5F9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:af:2c:00:e9:41:46:46:1c:24:91:53:d8:e7:99:5d:0d:0f:c5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=2853e5daa910b52115d90021bfa5073eae32683681aa1f2f1f999273ce501b2e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:79:93:8c:66:f8:bf:71:e1:ec:11:5c:f6:
8d:84:02:6f:72:4d:b9:65:11:aa:eb:dc:d3:64:03:
5b:1d:02:f6:da:83:36:97:7b:5f:e0:22:ed:dd:a0:
e8:1f:8f:28:62:5c:98:79:aa:44:c2:be:26:0d:93:
89:5c:a5:0d:76:69:7f:18:71:bd:e3:e3:ce:91:54:
0a:1f:43:6f:11:ba:4f:47:78:4e:bf:c8:a6:c6:b1:
17:e7:66:3d:6f:56:ca:ad:a4:a7:ee:a1:82:f2:bd:
1d:0a:d8:bd:71:32:fd:94:5a:96:00:b5:f5:fe:e8:
54:eb:4b:ea:c4:4a:d2:1c:01:a3:9f:8f:89:c6:7c:
66:36:eb:64:b4:4b:0a:86:38:f6:15:1d:5c:b5:53:
3f:33:bd:9a:67:a1:98:a4:4b:25:a1:62:e0:b8:0a:
8b:2c:e2:99:bb:d5:d0:82:d9:23:7f:4a:99:19:a3:
18:7f:60:0b:b5:f1:a5:75:06:07:8e:30:0c:02:d6:
5c:54:53:73:f7:08:4a:e4:5d:82:df:cd:76:f8:29:
4f:f0:94:8d:e3:b1:b5:a0:40:7d:15:de:64:a4:76:
08:77:6d:5c:77:fb:14:ee:ed:2c:fa:43:78:b4:66:
c9:76:a0:39:dd:ac:d8:3d:d5:fb:52:f2:15:c0:cb:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:58:DD:1E:24:30:D7:31:7D:7F:A9:71:D4:C0:DF:89:83:27:CD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:12:fc:80:7e:fd:60:63:15:3d:00:f1:28:84:1c:7a:4d:ad:
03:5e:e2:c5:48:b7:e8:ea:02:96:af:3b:ad:c7:6c:98:c0:57:
af:eb:0f:80:3a:96:65:07:ec:b7:fe:bc:e7:f5:7e:d9:8c:22:
2f:69:83:42:40:5d:c3:53:f1:a4:99:52:3d:84:67:c2:53:60:
67:6d:ef:6b:df:3b:18:62:4f:0e:82:61:5e:f8:26:e5:c7:33:
47:81:95:bd:b7:43:de:33:83:1b:9f:5e:bc:a5:1b:07:97:8d:
f5:6a:91:b3:34:a4:19:af:3a:3a:61:e8:9d:49:ed:50:87:b1:
0b:50:37:20:61:77:31:76:79:39:7f:b6:5f:e2:1f:7b:23:0b:
e6:9c:cd:26:c5:c6:4b:47:9d:c8:4e:b2:86:f7:e4:28:80:62:
dc:cf:c4:d2:f4:08:61:36:5a:1e:2b:dd:b0:57:75:6b:5f:ec:
f8:18:17:47:40:fc:a8:6f:23:cf:12:02:7d:27:6d:6d:63:65:
6b:5e:cf:73:8e:ce:5e:d3:ef:e5:1e:2d:b4:9a:84:a6:25:63:
85:30:09:de:ed:e4:31:a0:8e:16:6e:99:14:a1:9f:d6:92:c2:
a6:34:d9:45:36:f6:62:6c:ba:dd:e7:29:bd:af:75:e7:fa:03:
05:91:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org