Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
File: 1e935d64-1d66-4e52-ada3-30f1ed26d564.roa (raw, json)
Hash identifier: jDBt47YGnviUlVfjY/C20A53Re3sPnQO1yTi1DQD7f4=
Subject key identifier: 21:24:6A:BF:EC:38:D8:1E:5B:AF:94:9E:76:7F:3E:CB:A7:EC:D2:07
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 59D5D3E406CAC16351638E7CB236C9FDCF2305AB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 145.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d5:d3:e4:06:ca:c1:63:51:63:8e:7c:b2:36:c9:fd:cf:23:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8b0326dfeddf207664373702d3ec1084d1c9e5456c59771c7526422082f7e5f7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:ca:bd:df:67:2c:06:fd:49:ec:14:d5:00:
ba:e8:90:06:12:d7:69:9b:6a:07:db:c7:e6:c2:e5:
63:46:1b:28:47:60:3e:09:50:c9:3a:f8:89:82:17:
21:cb:a3:d1:af:e3:47:6e:7c:aa:a5:2b:fb:02:b2:
bd:d3:dc:93:fc:40:59:c9:ee:cb:9d:e1:ec:e0:fb:
1d:48:bc:ed:51:b1:8a:08:8e:6a:c9:7a:6b:97:75:
7b:4e:28:51:3d:85:64:14:b0:51:18:5f:a9:30:dc:
42:71:34:49:ee:89:31:41:b7:16:73:f7:b3:a7:61:
6b:aa:0e:85:b4:9e:7e:a6:86:a7:65:8e:c7:c4:29:
c0:9b:e6:64:45:51:a5:82:1c:bc:c3:c4:9c:e0:76:
ec:66:22:c2:52:cd:be:02:66:8a:85:e4:85:70:c2:
fa:20:08:20:f8:c6:f3:d4:7f:76:e6:78:44:3b:c8:
b7:1e:88:42:20:7b:61:04:87:fc:0c:01:57:ed:cb:
39:5c:56:01:63:e8:04:8d:8d:a2:bd:b9:7f:8c:20:
aa:d1:8e:ab:6f:1c:d3:c4:31:fc:f2:fb:e1:ee:77:
c7:f4:97:95:ad:bf:2e:62:e8:19:80:e1:77:e6:08:
aa:e9:99:d2:65:a8:a7:ca:60:bc:82:b7:9e:6c:fd:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:6A:BF:EC:38:D8:1E:5B:AF:94:9E:76:7F:3E:CB:A7:EC:D2:07
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:c8:0b:7e:ea:d7:69:06:5c:51:b9:d2:2f:5f:dc:6a:10:82:
4a:b8:cb:8f:1c:7a:63:4b:0d:6a:23:3f:22:d5:2c:88:1b:d6:
63:fc:0a:ea:da:08:94:ff:58:54:cb:db:d4:ad:84:20:82:c2:
f8:a0:15:d8:b6:d6:d1:27:34:df:06:a1:0d:35:f9:81:8e:10:
6c:a4:1d:80:65:1b:16:cb:b4:91:97:ba:67:25:e2:6a:f3:f4:
d8:6c:17:02:0f:5b:97:08:45:44:5c:25:60:c5:00:6f:54:ca:
ee:e3:60:97:8f:ae:5b:bd:5a:47:69:3a:d4:62:70:5a:25:aa:
a3:12:b3:6a:69:33:4b:5f:e2:66:23:a6:7e:58:77:84:0d:31:
7d:f8:a5:f3:91:4a:55:dd:a6:28:10:6f:35:a1:50:d6:24:bc:
f5:15:e5:2b:63:a1:80:0a:0e:de:af:28:bd:0b:ed:4b:5a:f3:
56:40:01:74:53:17:1c:63:08:5c:da:ed:8b:88:f1:1c:8e:c0:
d0:f4:98:b7:15:55:9f:76:5f:65:bf:2e:0d:6b:ce:8c:81:31:
8b:6c:e8:54:c2:fd:3c:78:0e:bd:95:8d:47:bc:9d:1d:ae:47:
5c:92:25:1e:23:dc:f2:fe:6c:2f:ef:b2:a0:97:69:b7:71:24:
50:68:e6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org