Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2263d6fb-d708-464c-8617-9f36a9814ed5.roa
File: 2263d6fb-d708-464c-8617-9f36a9814ed5.roa (raw, json)
Hash identifier: kvd0XV/LaG09Xtzlxb79ujElZa1KDcMe7fCLyeQoOj4=
Subject key identifier: C2:55:71:7B:98:B8:C0:8B:CC:F7:70:0E:FB:36:F2:F5:1D:D4:D5:EA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0AE05E9C3A7E63032DC5CBC1FB064C695BFA0EA3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2263d6fb-d708-464c-8617-9f36a9814ed5.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.196.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e0:5e:9c:3a:7e:63:03:2d:c5:cb:c1:fb:06:4c:69:5b:fa:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=ad25d2bcd634fb56ca4aa4007f3340fb6ef3b19b6b79b52a7d2323c1fe8c7f6c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:43:54:af:0b:1c:80:48:12:5e:d5:50:ce:da:
c3:eb:d5:36:ac:35:1a:07:03:cd:96:02:02:62:bb:
33:f7:4a:78:bc:38:93:fa:15:1a:23:a8:70:26:49:
a8:14:81:ea:b6:96:2c:af:af:ea:6e:dc:37:aa:21:
77:ac:ae:53:bc:52:48:6f:21:2e:f1:a5:10:a0:b3:
cf:bb:3e:53:fc:cb:eb:65:2e:08:39:c4:4e:08:4b:
e1:af:08:ff:83:f3:d4:4a:55:4b:3d:ea:58:e1:b6:
d6:60:f4:b3:df:26:47:87:ef:f8:25:2d:6e:77:28:
62:19:b6:c7:d6:6f:cb:ca:1d:7a:93:86:a7:f7:c6:
c6:04:7a:2f:a4:56:15:44:7a:3c:69:ff:ba:14:59:
ba:d7:7f:48:d3:d5:6b:a0:49:11:1b:64:50:b0:40:
61:5e:aa:cc:34:8f:5a:c8:e8:42:f2:b6:29:48:55:
a0:e1:68:e4:49:8f:d8:c3:8a:87:8c:94:cf:f2:77:
0e:97:70:19:41:e7:cb:4c:d3:a3:4d:78:9c:07:f3:
94:66:dd:21:37:b1:31:1c:83:97:6a:3d:80:72:df:
fb:ff:37:86:04:4f:2e:92:bd:be:da:7d:10:6e:f3:
23:83:35:30:96:53:c6:14:eb:80:d8:98:39:0e:c8:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:71:7B:98:B8:C0:8B:CC:F7:70:0E:FB:36:F2:F5:1D:D4:D5:EA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2263d6fb-d708-464c-8617-9f36a9814ed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
15:70:eb:13:41:13:7f:2b:82:b1:30:f3:db:ec:0b:1e:de:8d:
e9:2a:a1:d2:54:b1:ce:f6:a8:32:6c:b8:7e:e7:94:0a:9f:06:
1d:56:13:ff:35:75:d2:0b:b9:e7:dd:81:df:16:ae:6b:8a:ef:
f6:8d:c9:27:eb:31:59:f2:4b:fd:52:66:53:cb:71:23:59:bb:
97:c3:e3:e6:5b:5e:3b:c6:2a:2f:bf:a1:16:c2:f2:0e:2f:45:
53:d0:fe:15:67:35:af:6f:41:3a:ed:d9:3f:74:e3:bb:16:0d:
ce:ff:b0:e9:56:78:66:ef:51:cb:89:7e:11:0f:27:d7:9a:db:
1a:a4:1f:77:f5:20:04:a0:f6:63:02:48:e8:73:b0:92:a3:fc:
8f:ee:33:66:28:ba:43:8e:7f:fc:55:20:d6:55:48:95:10:ea:
59:a9:1e:56:ed:8a:32:93:71:01:74:aa:b0:c7:68:04:a8:91:
3e:52:91:25:d8:74:74:ca:98:54:57:a8:74:98:c5:23:21:03:
4f:45:2a:d6:b9:84:4c:c4:f2:b2:a9:39:c3:35:54:e0:09:94:
ee:d2:7d:26:97:f4:b9:39:10:fd:b9:e0:c3:74:66:b4:b2:92:
1a:b5:83:1a:3d:6e:66:ef:3c:1c:c8:3f:c2:42:1d:d8:5f:dd:
9c:ee:2e:48
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUCuBenDp+YwMtxcvB+wZMaVv6DqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjYwMDAwMDBaFw0yNDA1MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkMjVkMmJjZDYzNGZiNTZjYTRhYTQwMDdmMzM0MGZiNmVmM2IxOWI2Yjc5
YjUyYTdkMjMyM2MxZmU4YzdmNmMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO9DVK8LHIBIEl7VUM7aw+vVNqw1GgcDzZYCAmK7M/dKeLw4k/oVGiOocCZJ
qBSB6raWLK+v6m7cN6ohd6yuU7xSSG8hLvGlEKCzz7s+U/zL62UuCDnETghL4a8I
/4Pz1EpVSz3qWOG21mD0s98mR4fv+CUtbncoYhm2x9Zvy8odepOGp/fGxgR6L6RW
FUR6PGn/uhRZutd/SNPVa6BJERtkULBAYV6qzDSPWsjoQvK2KUhVoOFo5EmP2MOK
h4yUz/J3DpdwGUHny0zTo014nAfzlGbdITexMRyDl2o9gHLf+/83hgRPLpK9vtp9
EG7zI4M1MJZTxhTrgNiYOQ7I7eMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTCVXF7
mLjAi8z3cA77NvL1HdTV6jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjI2M2Q2ZmItZDcwOC00NjRjLTg2MTctOWYzNmE5ODE0ZWQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPEMA0G
CSqGSIb3DQEBCwUAA4IBAQAVcOsTQRN/K4KxMPPb7Ase3o3pKqHSVLHO9qgybLh+
55QKnwYdVhP/NXXSC7nn3YHfFq5riu/2jckn6zFZ8kv9UmZTy3EjWbuXw+PmW147
xiovv6EWwvIOL0VT0P4VZzWvb0E67dk/dOO7Fg3O/7DpVnhm71HLiX4RDyfXmtsa
pB939SAEoPZjAkjoc7CSo/yP7jNmKLpDjn/8VSDWVUiVEOpZqR5W7Yoyk3EBdKqw
x2gEqJE+UpEl2HR0yphUV6h0mMUjIQNPRSrWuYRMxPKyqTnDNVTgCZTu0n0ml/S5
ORD9ueDDdGa0spIatYMaPW5m7zwcyD/CQh3YX92c7i5I
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org