Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
File: 2740a5f5-ec55-42ac-b7df-f4c863c83981.roa (raw, json)
Hash identifier: 9ailja7MYhwg+EXMhNF/+biSPsDvZvO1sShYQowpy30=
Subject key identifier: 85:57:A7:A9:D7:D4:B4:82:90:C3:8B:DC:E1:4F:63:1B:FC:4F:45:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 03893F81D5D684286C76AACE7614262B59BE57CF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:89:3f:81:d5:d6:84:28:6c:76:aa:ce:76:14:26:2b:59:be:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=91e2f2614a73eea916faddd369e40187cce274f669c134db1a31edc9ff69c8e2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:bc:66:86:c4:ba:13:09:88:83:5f:11:e9:
ce:24:02:0a:6d:99:bb:71:49:45:c6:5a:02:e7:fc:
86:7d:9d:45:87:6c:d1:5e:b6:06:ee:e3:d4:78:a3:
38:24:5b:65:9a:1e:65:09:f8:5f:e8:53:87:d2:40:
44:16:38:77:d2:c6:0b:3c:66:90:94:43:82:02:01:
60:b5:f1:38:4a:dd:bd:b4:a2:d4:3e:2e:b3:5d:58:
0d:3d:54:a5:59:51:e2:91:d3:77:c5:06:5e:d0:b0:
e5:41:cf:b4:bf:a1:dd:06:a7:55:f8:40:41:f1:fd:
32:44:d4:a0:7f:42:c0:4c:21:61:5e:34:d8:b3:fb:
c6:4b:d1:6e:33:10:28:c5:3f:e0:61:39:9d:62:f4:
03:5d:6c:5a:40:c6:c2:3e:91:ef:e5:f2:69:ab:c3:
9f:94:b8:3f:c0:1d:6b:0d:1e:0e:34:ad:b9:d7:5d:
fb:62:81:e8:7d:1a:9e:85:af:dd:10:dc:e3:24:84:
65:91:fd:af:a5:63:2d:ff:ce:0d:2d:fc:73:8e:37:
f3:b6:d1:28:85:05:f6:2f:14:ce:f4:40:d7:9f:43:
f8:4e:5b:97:87:84:1d:d2:fa:04:04:35:f5:b5:bb:
d4:67:94:30:81:f6:7d:12:dc:b3:ca:83:4c:29:f1:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:A7:A9:D7:D4:B4:82:90:C3:8B:DC:E1:4F:63:1B:FC:4F:45:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:42:61:5e:17:ca:da:11:3d:73:0f:19:27:b5:ea:cd:62:27:
d8:b1:fa:c3:a8:58:6e:8a:34:b3:5c:0e:0c:91:f1:63:b9:bc:
b3:85:51:2c:40:94:22:3b:54:82:fa:87:ca:03:b1:20:49:b6:
83:5a:9e:5f:7c:9b:50:91:8c:29:02:2f:20:c5:45:72:2d:17:
a9:66:fd:8f:33:af:99:9c:0f:6e:bb:d2:d8:48:9e:db:e5:24:
b1:ea:4c:f8:27:fe:63:48:93:a2:d6:08:1b:dd:9b:ca:77:26:
9d:b5:3f:1e:01:2a:94:41:5e:8b:44:4a:c2:db:01:81:95:c9:
04:3a:16:65:4d:ce:39:b1:82:26:08:85:33:f0:74:1d:7b:54:
17:f5:07:ac:3f:44:e3:79:54:86:1e:32:12:1a:9d:32:9e:28:
88:31:ba:56:83:41:c3:57:63:65:6c:e3:88:8f:46:7e:45:9a:
b5:61:c7:3b:41:ac:d6:ca:e3:3b:49:39:6d:38:c2:15:a9:f8:
99:04:a6:77:5e:ef:5f:27:9a:8e:ca:38:7a:05:77:e2:77:71:
a9:e8:0c:84:eb:b1:de:fb:7a:99:0c:95:96:10:86:1f:9f:b0:
9e:9d:5c:65:50:5b:24:f5:64:a4:35:f9:6e:e1:f3:2f:08:ca:
2b:22:1a:db
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUA4k/gdXWhChsdqrOdhQmK1m+V88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxZTJmMjYxNGE3M2VlYTkxNmZhZGRkMzY5ZTQwMTg3Y2NlMjc0ZjY2OWMx
MzRkYjFhMzFlZGM5ZmY2OWM4ZTIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOYVvGaGxLoTCYiDXxHpziQCCm2Zu3FJRcZaAuf8hn2dRYds0V62Bu7j1Hij
OCRbZZoeZQn4X+hTh9JARBY4d9LGCzxmkJRDggIBYLXxOErdvbSi1D4us11YDT1U
pVlR4pHTd8UGXtCw5UHPtL+h3QanVfhAQfH9MkTUoH9CwEwhYV402LP7xkvRbjMQ
KMU/4GE5nWL0A11sWkDGwj6R7+XyaavDn5S4P8Adaw0eDjStuddd+2KB6H0anoWv
3RDc4ySEZZH9r6VjLf/ODS38c44387bRKIUF9i8UzvRA159D+E5bl4eEHdL6BAQ1
9bW71GeUMIH2fRLcs8qDTCnxfqMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSFV6ep
19S0gpDDi9zhT2Mb/E9F1jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Mjc0MGE1ZjUtZWM1NS00MmFjLWI3ZGYtZjRjODYzYzgzOTgxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADN9MA0G
CSqGSIb3DQEBCwUAA4IBAQCmQmFeF8raET1zDxknterNYifYsfrDqFhuijSzXA4M
kfFjubyzhVEsQJQiO1SC+ofKA7EgSbaDWp5ffJtQkYwpAi8gxUVyLRepZv2PM6+Z
nA9uu9LYSJ7b5SSx6kz4J/5jSJOi1ggb3ZvKdyadtT8eASqUQV6LRErC2wGBlckE
OhZlTc45sYImCIUz8HQde1QX9QesP0TjeVSGHjISGp0yniiIMbpWg0HDV2NlbOOI
j0Z+RZq1Ycc7QazWyuM7STltOMIVqfiZBKZ3Xu9fJ5qOyjh6BXfid3Gp6AyE67He
+3qZDJWWEIYfn7CenVxlUFsk9WSkNflu4fMvCMorIhrb
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org