Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f0149f0-c984-4579-a478-0c4e7147bcd1.roa
File: 2f0149f0-c984-4579-a478-0c4e7147bcd1.roa (raw, json)
Hash identifier: 2kx8YWzOHQ24ejJig/vNIdUQc8judAlgjF7Zw/9hPSk=
Subject key identifier: 2F:E1:FC:DF:6A:28:36:60:55:47:C0:5A:B1:50:70:EB:C7:AA:CB:7D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48238770F23AE3AC450F93C43A3752FDA6B2A8C6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f0149f0-c984-4579-a478-0c4e7147bcd1.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:23:87:70:f2:3a:e3:ac:45:0f:93:c4:3a:37:52:fd:a6:b2:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8cb31e076c489734bf13285553a00a6b209a8be9ac52d8a7449adb64560e55d0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:ff:62:f3:a0:57:ac:a9:61:bf:f2:2d:c3:
80:cb:71:94:af:b5:76:ae:ea:fa:d8:f5:d8:d9:f8:
be:7c:b9:db:b7:79:4c:ab:bf:a7:40:26:a2:c9:2f:
25:33:9e:c9:64:6e:0f:5a:5b:fc:85:56:26:ea:08:
d2:84:89:f4:a6:94:1a:5b:2a:60:a3:88:1b:5b:a5:
a4:50:4a:dc:fd:7a:ef:17:0c:f4:53:04:e8:97:e4:
b5:f4:54:f1:b5:0b:fb:67:af:0c:d7:28:7e:9d:48:
a8:8b:99:14:c8:da:23:84:77:d8:4a:9b:31:01:e0:
f5:06:cd:e2:67:8f:31:67:b6:30:90:89:d7:66:86:
54:ca:df:a2:67:13:83:a1:98:b3:75:5d:ee:a3:d7:
32:65:cc:7c:4c:46:9a:38:40:ea:e2:77:fd:46:8e:
b8:c1:aa:da:29:4e:29:eb:ba:47:e0:2e:a4:a1:5f:
a9:53:3f:5d:0b:5f:be:8c:74:40:21:2c:e2:a8:c8:
c0:bb:c5:a6:1c:f6:23:d9:25:7f:c0:83:9f:0e:3d:
5b:20:cb:80:5e:bd:41:69:dc:8b:e0:91:6a:1d:c5:
fc:43:0c:ad:74:ca:12:d6:92:89:88:78:78:24:9a:
9d:31:66:b9:64:13:d1:41:08:d5:33:73:e0:69:12:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:FC:DF:6A:28:36:60:55:47:C0:5A:B1:50:70:EB:C7:AA:CB:7D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f0149f0-c984-4579-a478-0c4e7147bcd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/17
Signature Algorithm: sha256WithRSAEncryption
16:50:a8:b8:0b:70:5b:6e:60:51:20:a1:98:64:b1:10:b3:5d:
b7:e1:8c:7b:56:f5:d8:6e:c7:e4:28:32:32:2c:7a:b5:5d:6c:
8d:70:69:55:ec:62:c4:d5:33:4b:85:d1:08:b6:d7:0d:1d:c1:
61:59:b9:d7:eb:56:2e:9c:de:4d:e4:93:5d:21:88:7d:9d:62:
35:c2:29:22:f4:c3:16:5a:1c:eb:2b:d7:8a:e7:7e:c6:77:07:
4a:40:83:d3:49:4a:2f:ab:7e:23:be:fe:fc:da:2c:41:00:2a:
75:8e:4d:0e:e0:17:50:1f:47:ae:fe:08:94:9e:44:88:a3:9d:
8e:eb:a2:2f:5a:09:3c:bf:24:0d:0d:91:61:8f:71:22:c1:4d:
27:5c:a0:45:f4:03:07:6f:d9:3f:05:ba:e7:02:6f:68:5b:91:
27:b5:59:59:96:8f:df:81:5a:96:c5:d7:be:73:75:46:d7:2e:
49:a8:55:f8:a5:ee:7e:2f:a5:c3:e7:a9:79:9a:d5:fc:5e:6c:
bc:d3:14:50:cc:0d:c6:3a:d8:26:fa:28:ee:1f:4e:5d:03:4d:
a5:b3:36:aa:da:c2:70:f8:36:1b:02:fa:11:9e:7e:b9:ff:ca:
eb:a7:05:45:71:e7:b7:6c:47:5b:ad:f1:11:3b:89:b1:6b:2f:
1e:85:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org