Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
File: 248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa (raw, json)
Hash identifier: +TGinQQ0i65JY0gIn3QiZfLP+557mFzOYex5wPMMhXs=
Subject key identifier: B9:D5:AE:BF:A7:F9:C5:06:B7:B3:53:71:02:AD:88:38:5B:63:16:65
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 18C46F7B39E70132046AF3BE4740C52C65ACE76D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c4:6f:7b:39:e7:01:32:04:6a:f3:be:47:40:c5:2c:65:ac:e7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=e6e6f971ae290be7e2293c101ce8d8fde29015a8fa1eed14e4acd85edff1e865, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:ff:80:84:28:85:f3:df:f3:f1:d4:14:2f:
49:a8:56:e3:c8:81:c0:4a:68:bd:48:00:3b:94:e1:
68:0d:3e:7c:c1:56:66:a7:0a:f2:68:b3:df:20:78:
c3:2b:db:73:78:ff:95:70:93:3f:fd:c6:61:d7:16:
7c:aa:dd:1f:c6:10:ab:7c:1d:26:d8:8a:f8:bf:5c:
bf:2c:0a:63:9c:0b:6a:c9:bb:d9:92:ea:a9:bf:e3:
bb:01:07:aa:02:fb:ef:61:c1:ac:d8:e9:1c:75:33:
86:32:5f:af:05:ec:b8:d1:82:87:a2:45:4c:33:81:
4f:b1:5e:e8:4e:0d:a7:5e:59:95:f2:fa:49:80:2a:
00:1b:6e:e5:84:e8:80:83:c3:7f:45:76:c3:3d:47:
be:2f:73:fe:89:28:99:b8:ed:70:c7:62:53:86:83:
bd:51:83:28:6b:e9:fb:e3:82:82:1b:bd:0e:dd:d6:
d0:41:98:7f:4e:48:96:92:4d:68:04:f6:cb:4c:94:
d1:77:68:4d:64:ec:c0:17:72:1c:21:3a:1d:7c:ae:
b4:1c:fc:26:6f:67:86:e1:1d:ee:5e:80:b8:c3:bd:
20:8a:09:6c:17:4a:98:74:a9:60:fb:0f:12:15:2d:
b4:35:19:df:57:bb:14:b4:b8:a8:77:7d:c9:55:bc:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:AE:BF:A7:F9:C5:06:B7:B3:53:71:02:AD:88:38:5B:63:16:65
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c3:96:31:41:2c:4a:e2:c1:ce:96:f7:2e:c3:4a:8d:f1:15:2f:
f4:51:10:2c:68:d4:88:e8:56:c8:0a:5a:c2:e7:b3:12:36:8a:
c0:45:27:c8:25:1c:c1:fa:48:5d:4e:e3:55:50:49:a1:f7:b0:
51:36:52:11:36:02:c6:f7:44:44:3c:6b:f9:b3:9a:45:44:76:
41:b3:74:2a:b5:d1:05:c8:c6:2b:38:e5:31:88:ec:3c:52:01:
a7:25:0b:a2:28:e2:84:79:e9:96:c5:e0:bb:65:56:a7:80:e2:
c5:af:91:33:d3:4f:db:39:c9:cb:81:6c:4f:10:27:78:ee:42:
5d:95:63:0b:a4:48:45:a8:10:aa:e7:de:d0:6f:3b:d1:68:d4:
71:e0:17:20:33:cf:f6:7e:d8:c3:d1:09:97:13:10:27:c6:7d:
13:2e:9e:83:f2:26:fe:13:a2:f6:85:4b:b7:af:1e:56:2a:70:
86:5a:54:34:9f:71:70:56:f3:70:f4:fa:82:b8:6e:1b:71:e1:
fe:f4:8b:b8:a1:70:e5:94:65:0d:f2:34:b8:c5:a0:ef:3c:68:
1a:b4:4b:5b:ae:e4:f2:4f:00:b4:28:7b:79:a5:60:aa:b8:e3:
6a:a5:a1:17:2f:c0:ed:a9:84:ab:12:08:4d:18:ea:bd:6e:20:
e0:07:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:21 2024 by rpki-client on console-fra.rpki-client.org