Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
File: 2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa (raw, json)
Hash identifier: RQUsEjT9t+GSxT2vATvXWAiydHKAMyF54qqTCDOAKdE=
Subject key identifier: FC:FC:63:32:A3:06:0C:C5:81:CF:F9:54:54:5D:84:C4:CB:8D:B3:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F7EC2F3E439728F066A5AD1715D1075FCD50906
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:1080::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7e:c2:f3:e4:39:72:8f:06:6a:5a:d1:71:5d:10:75:fc:d5:09:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=a56c63a5a622cee9af00c1df8ff9cfeb2eda3d2e4dc9af8e216e1fc7992ee714, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:46:91:08:7c:bb:9e:bb:24:a0:5f:3e:77:
e9:ff:d4:29:e8:81:9a:b6:61:68:47:44:d8:d3:89:
fc:eb:b5:ca:15:27:7e:28:4e:b6:c6:74:93:6a:6a:
95:62:b2:1d:a5:e5:4f:4a:c6:1b:52:cc:73:db:e0:
3d:ca:30:3d:4e:3e:2c:d5:dd:2c:ee:6c:a6:2e:79:
61:29:ac:28:2d:65:a5:a6:c5:b0:34:45:8b:13:04:
ec:12:b2:02:f8:d9:82:b2:10:7d:0b:92:ca:f2:6b:
29:b9:18:fd:1d:18:ba:c3:ea:fc:71:62:e6:64:28:
50:8d:06:3c:ab:e1:9c:73:a4:04:f3:d8:69:f1:1c:
b9:d8:62:bb:7b:c4:9b:b7:9f:22:d6:80:7c:ec:cb:
d2:f6:51:3d:82:e8:d5:00:d7:a5:05:40:48:7a:76:
f0:95:53:52:e3:5b:ac:54:6d:2f:e8:72:93:32:4d:
4e:7c:b4:66:71:44:e4:d7:8d:8e:7f:52:d4:64:0f:
86:c3:8a:9e:a2:c2:8d:73:89:21:c2:db:ad:90:de:
1d:12:97:10:e8:bd:65:ed:f8:d9:82:80:70:13:c7:
6e:9b:c5:0f:b6:6a:65:5c:3d:c5:3f:64:33:e3:1a:
59:07:ad:98:aa:da:e7:01:b6:36:a8:a9:d1:38:f9:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:63:32:A3:06:0C:C5:81:CF:F9:54:54:5D:84:C4:CB:8D:B3:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1080::/41
Signature Algorithm: sha256WithRSAEncryption
d2:ed:79:32:2d:cc:35:8d:f3:3a:14:e9:64:ea:9e:89:e5:c5:
5d:d8:d2:9d:cd:2b:bf:56:6e:b9:b9:f9:05:5f:8b:43:f3:8b:
bd:b6:85:fa:0e:52:7d:56:ed:0c:a9:41:21:d9:7e:4f:89:74:
bc:f3:72:6f:90:26:59:06:8c:1d:58:0f:d0:b0:1a:63:3a:96:
6f:0b:45:b6:33:7e:87:a0:3b:7f:15:03:f9:8d:30:b4:91:38:
40:5d:f0:7b:97:6b:9f:7e:e1:c3:40:fe:d1:b4:5d:bd:d5:14:
95:b2:a0:90:35:56:24:eb:ea:d2:e4:37:2d:cf:c8:84:03:1f:
d3:46:26:6a:d8:b4:a3:80:77:7d:bc:c0:e8:e5:8b:02:90:36:
69:a0:45:e1:5d:1b:92:b2:eb:21:28:0c:62:a0:aa:b3:c3:eb:
b7:59:91:a0:e8:8a:f0:e6:6d:ba:41:a3:5c:c9:3f:ab:14:8c:
aa:84:c4:0a:b9:c6:f6:43:a6:0d:a0:5b:ef:ca:be:d4:34:5c:
1d:28:51:34:52:4d:5e:30:c1:04:18:77:39:09:33:26:d5:c6:
d0:0a:de:53:b8:a8:2f:f6:96:75:95:04:a4:f0:cc:9d:1b:f0:
d8:e6:53:88:48:81:be:14:9b:93:c1:66:e5:f5:fd:24:63:37:
e9:0f:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org