Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa
File: 1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa (raw, json)
Hash identifier: u+WFjIMTz0DgM3jsBMydMKUi7nw1irMYL02/sCaOqBg=
Subject key identifier: 9C:F1:98:63:17:06:25:A6:99:84:5F:3A:46:A2:FC:88:96:E3:48:EF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 23E908A95B45A6B4D6A38D74FC88A318964362B0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.206.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e9:08:a9:5b:45:a6:b4:d6:a3:8d:74:fc:88:a3:18:96:43:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=1d94cbae9dfb0d82086de2ed0ae565d4da62908ad72d88cb1860888a998d0800, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:96:1e:db:21:d9:91:17:43:92:f8:1a:ff:
25:ce:61:2f:1d:c6:69:53:2e:23:52:43:e3:02:13:
df:08:96:2c:21:43:b2:92:a5:ec:fa:01:d7:ab:38:
70:86:8f:ad:80:cb:16:2e:6f:29:b4:f0:7a:3f:08:
92:87:96:81:d6:a6:a9:66:4f:1c:95:0e:d1:6b:e4:
aa:0e:ec:ca:a3:0c:1f:12:17:3d:15:26:91:82:c7:
7a:a7:3b:76:21:ba:a9:80:fa:a2:c2:7f:ac:e6:05:
8d:34:69:3a:32:5c:a8:81:3d:8b:72:2b:ad:89:19:
ec:95:7f:fc:9b:4e:13:c2:c0:1a:5d:ab:a0:5c:fa:
c8:37:22:59:c2:c5:7b:c5:b6:b5:33:dc:c4:08:0c:
6a:e7:4e:a3:65:33:c8:9f:1a:83:5c:70:d1:cc:33:
cc:61:74:53:ca:4a:c8:df:67:4c:a2:56:c9:c4:1e:
94:58:b5:d2:ed:e5:f9:5a:35:a4:c7:d9:1f:77:11:
57:fd:ab:7d:f5:1d:e9:d5:10:ed:09:47:8c:6f:2f:
0b:97:6f:42:97:3e:a3:7c:fb:a7:7e:1a:80:c4:39:
ac:31:6e:69:2c:36:9c:d0:dc:ef:49:46:dd:e3:70:
2a:c1:62:3f:7c:65:85:4f:f2:a3:0d:50:66:28:9d:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:98:63:17:06:25:A6:99:84:5F:3A:46:A2:FC:88:96:E3:48:EF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b9:74:38:a4:5d:42:04:78:50:e6:f7:2e:17:77:a6:78:33:b6:
71:03:75:77:a2:d4:ad:8a:7f:27:9d:95:19:b2:34:dd:67:54:
4d:01:7f:a3:0f:85:f1:5f:67:09:b5:1f:d0:84:04:cf:dc:ce:
28:d3:dd:cf:6d:69:c6:01:4e:06:f0:aa:35:cb:04:e6:bd:f3:
66:db:d4:b8:7b:ae:f5:e4:18:57:da:35:f0:00:70:0b:ae:fe:
5c:ec:0c:9b:41:ec:7f:db:4a:f1:02:57:e6:63:37:b1:ed:9b:
1c:92:be:8e:e8:fa:18:60:23:38:c1:4f:74:c1:8e:a2:65:c3:
1a:76:8d:6d:e4:e2:29:75:8a:7a:29:13:17:aa:12:a1:fa:39:
37:ff:79:88:33:06:a3:3f:97:7f:a5:5e:7b:a4:dd:44:81:9f:
e6:39:0d:af:8d:b0:cb:a6:44:f1:09:30:ac:fb:cc:08:c5:18:
f9:24:6d:a2:a2:c7:ad:4f:d8:5a:27:71:4e:f3:4d:8f:48:dd:
3f:60:ab:f7:2f:1a:49:08:e9:03:b7:c5:14:d3:e1:0f:2d:bd:
67:78:5c:02:35:56:d7:06:4b:4a:2a:da:a9:34:b4:bf:82:ed:
c6:01:d0:26:c0:a1:10:c1:6b:d0:60:72:41:e1:e8:93:eb:41:
7d:ff:3b:a1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUI+kIqVtFprTWo410/IijGJZDYrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjIwMDAwMDBaFw0yNDA1MjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkOTRjYmFlOWRmYjBkODIwODZkZTJlZDBhZTU2NWQ0ZGE2MjkwOGFkNzJk
ODhjYjE4NjA4ODhhOTk4ZDA4MDAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJjclh7bIdmRF0OS+Br/Jc5hLx3GaVMuI1JD4wIT3wiWLCFDspKl7PoB16s4
cIaPrYDLFi5vKbTwej8IkoeWgdamqWZPHJUO0Wvkqg7syqMMHxIXPRUmkYLHeqc7
diG6qYD6osJ/rOYFjTRpOjJcqIE9i3IrrYkZ7JV//JtOE8LAGl2roFz6yDciWcLF
e8W2tTPcxAgMaudOo2UzyJ8ag1xw0cwzzGF0U8pKyN9nTKJWycQelFi10u3l+Vo1
pMfZH3cRV/2rffUd6dUQ7QlHjG8vC5dvQpc+o3z7p34agMQ5rDFuaSw2nNDc70lG
3eNwKsFiP3xlhU/yow1QZiid9kECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSc8Zhj
FwYlppmEXzpGovyIluNI7zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MWM2YTExNjctYzExMC00YTQzLTkyNGUtN2VkYmMxZjQ5ZTJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPOMA0G
CSqGSIb3DQEBCwUAA4IBAQC5dDikXUIEeFDm9y4Xd6Z4M7ZxA3V3otStin8nnZUZ
sjTdZ1RNAX+jD4XxX2cJtR/QhATP3M4o093PbWnGAU4G8Ko1ywTmvfNm29S4e671
5BhX2jXwAHALrv5c7AybQex/20rxAlfmYzex7Zsckr6O6PoYYCM4wU90wY6iZcMa
do1t5OIpdYp6KRMXqhKh+jk3/3mIMwajP5d/pV57pN1EgZ/mOQ2vjbDLpkTxCTCs
+8wIxRj5JG2iosetT9haJ3FO802PSN0/YKv3LxpJCOkDt8UU0+EPLb1neFwCNVbX
BktKKtqpNLS/gu3GAdAmwKEQwWvQYHJB4eiT60F9/zuh
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org