Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
File: 3113975a-2f82-4201-a061-176481f88265.roa (raw, json)
Hash identifier: B/4nu5dui2HwTUUyEK6kuFWsIVr/vHwaHa35aE8ML7k=
Subject key identifier: AF:AD:5B:F8:5C:FE:18:89:7A:51:96:50:BE:28:54:21:3F:64:6B:F1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 79B729F08E735525A7201D1F9699E98DF47DD387
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b7:29:f0:8e:73:55:25:a7:20:1d:1f:96:99:e9:8d:f4:7d:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=199e3a73a3a97e241e43770193d043bead03951c15e3fc15d3f09d2e833e9bf0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:4d:27:dc:67:e7:fe:33:d9:b9:44:5c:27:
e1:bb:cb:c0:d4:a1:0b:00:3b:20:6a:14:05:f8:ca:
65:33:6b:05:42:c1:c1:bb:36:99:5b:eb:c1:a1:f6:
12:ea:9a:62:cf:87:b1:2b:59:ee:60:ef:3b:f8:e9:
98:bd:3e:6f:f4:f8:22:bc:06:27:bf:13:70:ad:a3:
bf:22:bc:02:cd:16:14:e6:69:69:17:b5:08:e5:4a:
74:83:bc:a3:d1:1e:0a:8f:b8:d2:d8:38:33:ef:f4:
94:00:81:cf:f8:37:4c:99:fd:08:e0:77:f3:2d:ce:
51:40:62:27:02:0e:ac:5b:88:45:e3:04:8b:ea:38:
22:34:e9:5d:d1:5c:a2:90:17:23:74:76:82:b3:9e:
b9:dc:79:9a:bf:30:8f:00:9a:14:36:3c:a9:84:0b:
21:2d:55:0f:75:98:38:ea:2a:0f:57:44:8d:5b:e9:
42:96:cd:55:70:70:3b:f3:d7:cc:c9:f1:0a:b3:c9:
92:10:23:24:32:7a:2f:ce:88:15:54:5c:10:e7:a0:
9a:42:cf:15:e8:c3:48:0b:db:7f:a0:24:99:e0:4c:
48:27:84:13:f1:30:3f:e9:3e:76:7e:15:33:77:18:
45:3c:50:46:83:21:dd:54:0c:8c:4a:0c:82:f7:28:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:5B:F8:5C:FE:18:89:7A:51:96:50:BE:28:54:21:3F:64:6B:F1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b0:e3:42:5d:64:ef:70:4e:8b:60:b5:b4:ea:48:36:7c:04:30:
90:a4:a8:f6:a5:2d:4e:71:48:b7:18:2f:9d:ac:fb:99:7e:8d:
43:0a:9d:23:9a:9c:bc:7e:f5:23:07:1d:86:cf:6f:f4:27:80:
8b:f3:8c:14:72:43:96:21:08:4c:3d:4f:13:08:68:52:9f:8d:
29:23:d1:90:a5:5f:c1:37:d2:35:15:f1:e5:36:a4:e6:a2:6f:
a1:6a:d7:1a:29:f8:05:44:04:6f:ec:94:fc:31:32:ba:3a:ee:
69:11:d0:04:30:df:4e:75:d6:fa:0d:a7:25:3f:51:05:a1:90:
d3:f1:32:e1:a9:fd:c9:69:cd:c4:e8:db:f3:58:17:63:23:f0:
47:ab:dc:cb:c4:93:52:0c:0e:0d:9d:21:0f:f7:a7:42:97:84:
44:2b:48:55:d2:ef:d1:ea:37:03:7b:09:c3:d5:e6:32:65:69:
0a:3c:25:28:f9:27:ab:c9:27:74:4f:77:5e:06:cb:4f:16:cc:
75:9b:c7:62:ca:71:4d:c1:15:44:a2:35:02:9e:3e:00:e5:bf:
c6:70:28:40:b4:91:17:2f:0d:58:ab:c1:69:e9:1a:01:39:61:
97:c4:61:3b:45:04:29:23:39:79:be:28:c2:b2:7d:87:ca:a4:
c6:3d:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org