Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/197a8641-5e8c-47f5-b202-941d73190653.roa
File: 197a8641-5e8c-47f5-b202-941d73190653.roa (raw, json)
Hash identifier: fuaLUdPalTuk+Sa56ZJIrSpj5s0+KsgdyS5+PB64Qw0=
Subject key identifier: 63:91:D0:2F:DC:69:5D:54:C4:58:10:5F:84:F5:C3:84:8E:E3:0D:C8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4D1B1F0104126A6A3F160C76728F98B22A5C32D7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/197a8641-5e8c-47f5-b202-941d73190653.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1b:1f:01:04:12:6a:6a:3f:16:0c:76:72:8f:98:b2:2a:5c:32:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=3b01eea90780ad0f27b1bea0fc8dcca6073fb6820183529760cd93574779439f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:bb:46:82:97:0c:98:85:f3:de:a6:c5:95:
78:93:4a:9e:b5:c2:22:56:b6:c1:ce:31:24:ff:24:
37:e6:47:b4:63:e1:bf:2a:1d:a3:95:06:26:f1:53:
67:30:cd:b8:8f:35:1a:fe:bf:e5:c3:66:5d:5e:4c:
8f:5b:2e:9d:b3:78:f6:2a:fa:a7:97:4d:f3:47:a6:
1a:24:0b:63:29:3d:23:34:c4:12:d7:86:02:3c:3f:
5e:aa:1c:10:1b:c1:d7:9e:89:08:90:c7:f7:5d:73:
58:e9:58:57:05:ce:0d:6a:8a:e7:98:cb:b9:41:53:
44:ef:44:ab:c9:3e:79:a8:c0:50:14:5c:56:0c:35:
c8:16:a7:75:e9:66:c4:8d:d6:dc:fe:29:39:0a:0e:
43:2e:51:31:eb:b8:b0:52:88:6b:07:c0:52:c0:ce:
4f:eb:46:0d:e1:75:20:ab:7d:f3:64:9f:c8:46:d6:
bd:a5:f5:4d:27:03:60:de:05:20:fb:0a:67:34:8d:
80:18:aa:8d:9a:16:01:e3:c8:78:3d:99:8a:d1:2f:
25:c9:26:39:b2:91:8c:27:3d:8e:a4:a1:be:0e:03:
8d:23:79:75:06:fc:9e:78:bb:b8:65:dd:cd:3d:a9:
a0:fc:19:a9:1c:a8:5f:8b:06:a0:ab:70:b6:81:ab:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:D0:2F:DC:69:5D:54:C4:58:10:5F:84:F5:C3:84:8E:E3:0D:C8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/197a8641-5e8c-47f5-b202-941d73190653.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:c6:68:29:2f:9e:42:02:95:94:e7:b6:c5:4b:94:c9:99:2a:
a1:eb:09:38:15:43:97:13:8b:fd:16:19:22:0f:7c:6c:0e:52:
1f:27:38:4a:24:72:37:f7:94:4d:2a:fa:b3:94:89:8f:81:4f:
f1:84:bb:3c:98:69:c2:22:55:42:e5:3d:d1:ce:18:ab:d6:55:
61:bb:f9:94:ce:58:85:a2:de:1e:cb:25:9f:23:14:87:4d:a3:
64:e4:22:a5:20:4a:85:64:1a:85:67:ff:9c:f1:3a:8a:51:ef:
d4:98:26:47:7e:0e:04:62:4b:e0:0b:76:45:a7:38:2c:7c:80:
0a:a5:18:d6:78:91:fc:99:28:e7:61:a5:a3:79:0c:1a:5b:14:
87:92:51:2d:5c:b1:c0:3f:04:d5:75:7d:a9:69:87:6c:30:a2:
46:39:f8:58:60:72:30:c6:2b:83:57:ab:dd:9a:eb:a8:ea:17:
67:1f:28:5b:ab:e9:02:dd:2a:f1:59:59:2b:7f:ab:d0:71:ad:
30:e5:31:fe:f6:47:cc:73:30:2c:4c:b6:68:07:0d:21:f7:fa:
5b:24:08:e1:ff:2f:dd:00:05:2d:c7:ef:d0:d6:1f:5a:2d:cd:
d0:5a:cc:55:21:93:d1:a6:25:d9:fb:d2:1d:44:96:35:37:05:
1b:a7:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org