Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json)
Hash identifier: BqyXx84lSCcjte0iAIfIbcNK3yuUG9ODVQmoSLD56KA=
Subject key identifier: 6A:60:39:05:8A:3D:96:DD:4E:74:F7:7D:52:8D:81:1D:89:D9:AA:94
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 268D88F4160EBBD5A96050B69C34FC56264664A0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8d:88:f4:16:0e:bb:d5:a9:60:50:b6:9c:34:fc:56:26:46:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=a5bcbf1d62ca13873e98372cc8cea3ba3448406a33c81bde0acb72f56f29e9af, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:99:7c:ff:77:5b:ec:37:06:b5:dd:6b:c0:
18:3a:b0:f8:d6:bc:cf:6d:ab:b6:4f:07:26:72:78:
c9:ec:f4:2d:ab:95:53:c6:cd:2f:9b:d1:4f:25:22:
c5:18:3d:5a:71:f6:5e:9d:50:c7:64:85:3b:b9:2c:
a2:62:f2:89:32:51:4c:ed:b8:9c:19:b5:f6:22:fc:
ca:c5:20:d4:84:c7:52:47:13:9a:a7:03:a8:fc:08:
c6:20:16:0d:66:b8:10:63:cd:40:8f:c5:fe:06:bc:
c4:e2:bc:fb:de:b1:33:f5:5a:a0:e3:27:f5:31:7d:
13:b0:2f:fa:ef:98:da:5e:53:6d:0d:b1:47:98:4f:
9d:b8:cb:92:56:70:c3:ad:94:73:b7:ea:02:24:90:
7d:08:45:20:18:18:05:f8:90:03:1a:38:6f:61:54:
dc:b2:6a:c3:27:91:f8:be:32:13:7a:5f:b1:2e:33:
d5:6a:b6:8b:2f:b5:ee:f1:88:3f:25:63:c5:bd:f2:
54:a2:73:8e:15:9a:ca:ba:40:12:de:32:6d:1d:85:
56:49:48:f0:e8:f3:35:99:5a:f4:2f:8c:ac:20:61:
e1:a2:6f:bb:46:27:17:8e:3b:b7:a2:91:6e:2c:06:
60:f4:78:d1:6c:77:0e:77:52:67:eb:6f:33:d4:7b:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:39:05:8A:3D:96:DD:4E:74:F7:7D:52:8D:81:1D:89:D9:AA:94
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:7a:2c:94:e7:b6:22:08:49:81:87:1b:5a:65:46:7b:4f:7d:
b0:5a:71:ce:95:4b:e5:95:5e:c3:19:7f:03:6f:f3:fd:8f:6c:
c7:62:8c:24:af:f2:e8:d4:1d:b1:e6:11:2d:41:94:85:c6:bc:
dd:b7:35:1d:ce:2a:43:d1:f6:77:f7:25:e2:11:c9:17:ca:4d:
c4:54:8f:8a:68:7b:82:a7:cd:b3:f4:f6:5d:4a:a1:b1:7e:49:
1a:73:cb:cf:cc:25:3b:79:46:65:38:2b:19:f6:bd:cc:91:64:
32:c1:67:a2:d3:58:55:d6:26:80:61:be:8c:3f:a2:9c:63:57:
5d:9b:77:85:0a:47:50:ad:d6:b4:81:73:48:90:c6:c5:8b:c7:
d6:56:0c:71:dc:37:f0:97:72:a7:dc:f3:74:3f:ae:34:35:3f:
09:01:df:35:b5:1b:d5:34:7f:66:83:57:09:69:eb:7d:42:54:
c7:8a:a2:6a:70:8e:89:ce:69:bb:4d:16:75:b0:98:af:e6:3a:
16:df:8b:2f:d1:2b:e1:85:8e:ae:78:5d:25:9a:54:9c:84:93:
f6:06:ad:2a:b4:21:b0:bb:df:44:57:b3:d3:3f:ac:d2:02:09:
ae:14:a6:ec:e1:7f:74:6a:09:43:b0:0d:a4:4a:44:3e:8a:59:
8c:82:70:5d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJo2I9BYOu9WpYFC2nDT8ViZGZKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGE1YmNiZjFkNjJjYTEzODczZTk4MzcyY2M4Y2VhM2JhMzQ0ODQwNmEzM2M4
MWJkZTBhY2I3MmY1NmYyOWU5YWYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO81mXz/d1vsNwa13WvAGDqw+Na8z22rtk8HJnJ4yez0LauVU8bNL5vRTyUi
xRg9WnH2Xp1Qx2SFO7ksomLyiTJRTO24nBm19iL8ysUg1ITHUkcTmqcDqPwIxiAW
DWa4EGPNQI/F/ga8xOK8+96xM/VaoOMn9TF9E7Av+u+Y2l5TbQ2xR5hPnbjLklZw
w62Uc7fqAiSQfQhFIBgYBfiQAxo4b2FU3LJqwyeR+L4yE3pfsS4z1Wq2iy+17vGI
PyVjxb3yVKJzjhWayrpAEt4ybR2FVklI8OjzNZla9C+MrCBh4aJvu0YnF447t6KR
biwGYPR40Wx3DndSZ+tvM9R7WeMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRqYDkF
ij2W3U50931SjYEdidmqlDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MWU4NjhlNTUtYjFiNi00N2YyLWIxZDItNmRhZjY0NDYxZmZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMKFMA0G
CSqGSIb3DQEBCwUAA4IBAQCWeiyU57YiCEmBhxtaZUZ7T32wWnHOlUvllV7DGX8D
b/P9j2zHYowkr/Lo1B2x5hEtQZSFxrzdtzUdzipD0fZ39yXiEckXyk3EVI+KaHuC
p82z9PZdSqGxfkkac8vPzCU7eUZlOCsZ9r3MkWQywWei01hV1iaAYb6MP6KcY1dd
m3eFCkdQrda0gXNIkMbFi8fWVgxx3Dfwl3Kn3PN0P640NT8JAd81tRvVNH9mg1cJ
aet9QlTHiqJqcI6Jzmm7TRZ1sJiv5joW34sv0SvhhY6ueF0lmlSchJP2Bq0qtCGw
u99EV7PTP6zSAgmuFKbs4X90aglDsA2kSkQ+ilmMgnBd
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org