Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
File: 2d24b638-b951-4333-ac88-4886c7af230f.roa (raw, json)
Hash identifier: 1Y2uCbASrvyXj+XnlY0JpfHWairHJbCrMmDb2eEFbb4=
Subject key identifier: 84:68:A4:20:B1:21:1C:B5:C9:8E:CD:99:98:59:F7:3D:B2:60:C8:89
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0EC4E1A4E7B66970493D4C1D47D6128A382B17E5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.82.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c4:e1:a4:e7:b6:69:70:49:3d:4c:1d:47:d6:12:8a:38:2b:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=7a6c1412e733493015fdba3fe44b0770cfdab8c9029dc3b5c49e0d836b07cb2d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:1b:84:49:b4:c1:89:bc:e2:72:11:02:0b:
1b:64:2c:7b:b6:61:b3:a3:38:ef:5a:f8:f7:94:0f:
46:5c:4f:de:0b:0f:64:54:9b:48:98:d8:7c:d2:07:
e8:25:26:7b:f7:c9:73:ab:27:ea:c5:9d:ba:61:4e:
d6:d3:5c:a1:3b:b8:73:fa:40:37:3a:55:00:1c:e5:
69:02:3b:99:3a:a7:b5:2f:b9:14:66:41:1b:b3:4a:
20:48:b1:7b:57:5b:36:52:83:b7:03:ff:f3:9e:3d:
08:4f:36:15:66:21:4a:5d:4d:4e:d4:d0:9a:37:15:
87:f9:8e:ee:77:1c:15:a5:90:e4:b7:19:c9:88:32:
ee:bb:12:be:02:74:8a:f3:47:ae:b0:f9:09:1d:fd:
7b:bf:c3:4b:75:7d:fa:8f:da:31:b8:82:c9:60:93:
c5:e3:58:87:39:98:fe:f5:24:36:f2:f9:a9:28:7a:
e6:f8:38:96:5b:28:8f:a3:3b:da:21:64:56:6c:76:
21:df:66:da:e7:3d:e8:a7:de:d8:92:5e:d6:df:79:
b2:dc:b9:19:6a:6a:36:61:6e:f0:96:d8:01:b5:fd:
27:60:7a:b8:01:89:21:9c:6a:62:1c:33:fa:39:e3:
ed:59:d8:b7:cf:d3:87:f7:8b:1a:4c:b4:6a:51:89:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:A4:20:B1:21:1C:B5:C9:8E:CD:99:98:59:F7:3D:B2:60:C8:89
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:1d:eb:75:5b:99:9d:a2:1b:b1:3f:17:0c:ed:ce:c8:80:76:
6c:7d:c7:4a:38:7e:b1:e4:94:f4:09:fc:9d:bd:f7:55:64:98:
7d:30:fc:20:f2:6b:8f:93:a4:dd:b4:5a:1e:c6:59:8f:bd:3a:
d4:76:24:5b:5f:a9:ed:ea:9b:94:77:84:65:84:e4:2f:74:9e:
bc:fb:95:f2:6a:11:89:2b:01:5d:bd:eb:e6:20:98:73:b9:1a:
07:12:ec:51:f4:89:15:6a:0b:c6:12:0b:a3:66:3a:33:d1:6d:
d0:83:fd:85:93:2f:4f:a1:70:be:2a:c2:8a:43:0f:a1:d2:b3:
1c:95:dd:3f:9a:48:26:08:f4:d8:16:58:e5:50:b9:7d:02:72:
f9:71:0f:0c:08:d7:a6:2e:d1:9c:68:83:40:6f:b8:6f:a8:39:
3e:8e:2e:4b:dd:e8:72:e3:bc:7e:f2:1d:ec:d4:d0:6d:c8:65:
d0:bf:56:c6:15:96:14:c8:d0:0b:2f:d1:d7:3f:ab:25:93:a0:
17:d9:6f:c0:64:30:67:fe:3d:9c:99:99:75:97:ee:3a:23:85:
f0:65:06:75:1c:30:5b:34:50:cd:42:62:f2:6e:7b:cb:3c:5d:
24:42:74:9d:8a:e3:ef:74:54:61:ac:24:ee:7b:a5:7f:42:df:
a7:9b:ec:41
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUDsThpOe2aXBJPUwdR9YSijgrF+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDdhNmMxNDEyZTczMzQ5MzAxNWZkYmEzZmU0NGIwNzcwY2ZkYWI4YzkwMjlk
YzNiNWM0OWUwZDgzNmIwN2NiMmQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALOeG4RJtMGJvOJyEQILG2Qse7Zhs6M471r495QPRlxP3gsPZFSbSJjYfNIH
6CUme/fJc6sn6sWdumFO1tNcoTu4c/pANzpVABzlaQI7mTqntS+5FGZBG7NKIEix
e1dbNlKDtwP/8549CE82FWYhSl1NTtTQmjcVh/mO7nccFaWQ5LcZyYgy7rsSvgJ0
ivNHrrD5CR39e7/DS3V9+o/aMbiCyWCTxeNYhzmY/vUkNvL5qSh65vg4llsoj6M7
2iFkVmx2Id9m2uc96Kfe2JJe1t95sty5GWpqNmFu8JbYAbX9J2B6uAGJIZxqYhwz
+jnj7VnYt8/Th/eLGky0alGJFpUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSEaKQg
sSEctcmOzZmYWfc9smDIiTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MmQyNGI2MzgtYjk1MS00MzMzLWFjODgtNDg4NmM3YWYyMzBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNSMA0G
CSqGSIb3DQEBCwUAA4IBAQC9Het1W5mdohuxPxcM7c7IgHZsfcdKOH6x5JT0Cfyd
vfdVZJh9MPwg8muPk6TdtFoexlmPvTrUdiRbX6nt6puUd4RlhOQvdJ68+5XyahGJ
KwFdvevmIJhzuRoHEuxR9IkVagvGEgujZjoz0W3Qg/2Fky9PoXC+KsKKQw+h0rMc
ld0/mkgmCPTYFljlULl9AnL5cQ8MCNemLtGcaINAb7hvqDk+ji5L3ehy47x+8h3s
1NBtyGXQv1bGFZYUyNALL9HXP6slk6AX2W/AZDBn/j2cmZl1l+46I4XwZQZ1HDBb
NFDNQmLybnvLPF0kQnSdiuPvdFRhrCTue6V/Qt+nm+xB
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org