Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
File: 286f881c-8fa0-4200-ada2-20a0cc49038e.roa (raw, json)
Hash identifier: 6RkymnqtZwDcx/8kLlam1dG4pz7zkjsMMotlXGsSOmg=
Subject key identifier: 2B:AC:D9:F0:73:7F:C3:82:D5:66:5F:72:01:45:CF:11:64:68:0E:B7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 25D55258C6F20565DF200FDB101859E542F205DF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d5:52:58:c6:f2:05:65:df:20:0f:db:10:18:59:e5:42:f2:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=b539881f0f67c3086f5c42306ebb9e1b2de12f5243f4000bc3bd8ec0b588c5b7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:4a:6b:a9:31:d7:3f:07:e1:92:a4:60:59:
7f:82:45:4e:fd:43:bf:91:18:b9:be:12:c7:2f:57:
2a:f7:38:76:10:ec:a0:df:af:1f:67:13:d3:89:43:
d9:1f:c3:86:96:34:a2:d7:0a:31:f1:94:c0:c6:8a:
5c:db:85:1f:71:c4:4c:39:ce:af:19:cb:6c:5d:95:
22:ca:06:48:9f:93:b1:36:32:7f:b8:b7:bd:d4:6c:
f7:b3:b1:26:99:cd:66:d0:52:91:21:3e:ed:9b:4f:
db:e4:08:4d:9c:22:3b:11:f1:14:11:70:a1:fc:a1:
03:85:8b:0a:9b:4d:b8:bb:db:bd:2e:bb:f0:26:d3:
59:13:a5:27:96:8b:6c:d4:c7:6d:7e:8a:50:d8:48:
7f:ff:cf:3b:46:b7:85:76:02:06:3b:91:77:fc:db:
d8:98:c6:ce:91:66:a5:bd:d3:19:ff:27:e5:57:6b:
e3:0a:b7:0d:54:0d:bc:e8:f5:c1:b1:8e:15:f9:81:
d4:30:9a:9c:e5:f3:0d:1c:c7:56:9c:ee:30:53:4d:
d7:97:20:11:b0:c4:08:c1:9f:b7:6e:f1:b5:dc:f4:
07:a4:09:12:51:74:00:18:e4:6b:7f:1f:c8:d8:d3:
fc:a4:76:88:1c:8f:80:2b:1d:24:2d:ad:46:3a:eb:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:D9:F0:73:7F:C3:82:D5:66:5F:72:01:45:CF:11:64:68:0E:B7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
48:8e:20:87:b3:c8:40:ed:cc:99:4a:c4:a0:90:74:f4:0b:55:
2d:72:2c:f0:43:33:5a:63:b4:7d:00:db:6e:26:62:48:46:cd:
cb:9b:be:0b:b0:c4:53:0d:1f:a0:ab:71:c2:45:e9:e5:18:89:
23:36:47:83:e2:6a:c3:6b:c0:74:d1:fc:bd:70:ce:0a:23:b3:
a1:79:99:40:9a:08:dc:b0:19:3e:75:64:c9:2f:45:15:80:93:
7a:b3:5a:21:a1:a8:e5:2c:91:cf:e0:92:8b:3b:e4:99:63:8d:
3b:43:ee:f6:8e:52:5e:97:dd:00:d7:1e:8b:2a:42:b7:96:91:
8e:5d:49:ad:ca:74:80:7e:e2:f9:1a:21:e7:de:16:ef:c5:e8:
66:de:25:98:85:9b:96:33:6d:36:b5:7f:02:4d:33:1c:75:7a:
c5:c9:7e:61:90:4f:ea:b8:0e:c7:ff:14:91:dc:42:82:f0:0d:
86:2d:f6:6e:28:06:c4:21:3b:19:8c:a0:e4:a1:6c:ea:2e:ed:
ce:cd:56:f5:d1:dc:ad:8e:b4:93:7e:ac:cc:28:da:5e:a4:38:
15:c4:9d:46:a8:27:f3:75:d7:24:08:89:6e:df:c0:c1:d8:81:
0f:5e:0b:37:7f:d7:56:4d:bf:4c:70:a2:d6:10:e3:71:38:8f:
df:b0:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org