Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
File: 21ed4032-a4d1-486a-97f8-a4eed91bb627.roa (raw, json)
Hash identifier: 1yjnPTY/pKAON8xfOFovpUmJkV4Sotc3AnesYq/Xo2M=
Subject key identifier: 39:24:7C:56:B9:11:D6:6D:2B:DA:BB:72:9D:8B:35:33:EA:DB:F8:5A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6A91224419F211C3D9007E9EC5774B76D77A8EC2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:91:22:44:19:f2:11:c3:d9:00:7e:9e:c5:77:4b:76:d7:7a:8e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=716cd6f9df67b183c5e4ffe46be44c213aa297a52eb5352360eb84c1b1154bf0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:49:85:18:cc:80:8a:e4:aa:01:28:58:f7:
8a:e4:04:c2:02:c1:94:f2:e1:ec:4f:03:66:c2:0b:
19:2a:e5:29:d3:d7:3d:e6:9e:31:d5:57:e3:f5:de:
75:5b:fe:a1:58:c7:47:ae:42:66:d3:8b:af:5e:2d:
96:ce:d8:3c:c0:e9:5d:97:7f:75:d3:62:aa:6c:bc:
12:bf:03:56:3f:40:d8:48:47:bc:7b:e6:b6:2e:45:
1d:e6:ef:c6:8e:a2:77:6b:d4:32:34:0e:62:f2:cb:
26:ff:96:8d:74:f4:f4:9e:f9:aa:ee:98:51:b9:50:
84:4d:0f:2c:3d:9d:a6:f9:7b:6c:b8:5b:48:0c:7b:
4b:b8:0c:3b:a3:07:35:d7:b6:12:a7:b0:31:f8:c6:
30:86:cf:35:23:22:47:75:70:11:0a:d5:01:0e:74:
6d:e2:84:a1:20:a3:f4:84:c5:36:45:7c:0b:ff:ab:
b7:cf:7b:9a:0c:b1:7f:e5:35:ba:ce:6d:de:27:26:
6b:bb:70:a9:66:af:16:80:df:e8:5b:60:ac:bc:09:
8c:97:cd:65:d7:66:ce:d2:3b:97:de:45:2f:b3:7e:
75:15:bb:07:64:90:5c:2e:76:a9:e1:72:3d:66:31:
4a:e2:73:68:4f:2b:42:3a:c1:d5:03:f4:b3:46:1b:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:7C:56:B9:11:D6:6D:2B:DA:BB:72:9D:8B:35:33:EA:DB:F8:5A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:a7:06:dd:72:fd:8d:a4:ec:0b:bc:59:56:c4:32:e0:59:7a:
26:a8:4c:37:6b:d6:12:b3:1e:7f:de:bc:11:cd:96:38:39:b4:
27:15:b8:88:8c:7d:78:2e:9c:03:45:0f:5f:20:dd:91:fb:bb:
41:fc:a4:7c:c9:30:3a:45:10:e1:aa:28:6b:c5:de:4f:26:06:
35:de:00:7f:c8:cd:98:16:57:a7:cc:cf:03:c2:09:2a:60:9c:
14:54:bf:b1:5a:02:5d:40:21:0a:02:fc:7f:9c:e6:dd:34:75:
31:69:d6:50:79:3e:96:ca:f8:85:78:db:e1:f3:88:59:cb:2e:
75:cc:dc:32:db:f7:98:36:8d:5d:73:16:51:95:62:11:58:84:
3f:0a:33:d3:4b:f2:21:b7:82:19:68:01:3a:77:88:ee:44:d3:
14:01:67:1c:77:d7:52:d3:28:1d:32:0b:80:57:93:13:38:67:
5e:96:18:b3:27:2d:ba:80:ac:e5:fd:7c:a8:58:9e:d8:42:e7:
cb:58:f9:0f:6b:bc:4d:34:b6:60:ee:50:f9:93:6f:12:29:9a:
dc:eb:81:ea:1e:19:80:05:04:69:11:73:0c:70:60:b7:58:7d:
fe:47:de:94:88:bc:1a:aa:49:77:c9:a2:7e:d2:d0:2c:df:f6:
6e:f3:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org