Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
File: 34e19faa-5cf1-4226-b61a-b6161eba0791.roa (raw, json)
Hash identifier: m0zQThiXO28kVam0OT3x3X07AqrrsjGZy+LcjVXlHWI=
Subject key identifier: AC:0F:A1:45:7C:40:A4:B8:40:0A:C8:1B:DC:5D:B0:7C:F1:27:C7:56
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 261368A393086D95DBC10054BE3983E47B26F4D0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
Signing time: Tue 11 Jun 2024 00:00:00 +0000
ROA not before: Tue 11 Jun 2024 00:00:00 +0000
ROA not after: Tue 16 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:13:68:a3:93:08:6d:95:db:c1:00:54:be:39:83:e4:7b:26:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 11 00:00:00 2024 GMT
Not After : Jul 16 23:59:59 2024 GMT
Subject: serialNumber=e0e0cb44e9f055550f6a4998db88243ac19b2469e0467583a65e12e3a43ee453, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:e7:2f:21:94:78:75:df:7b:3a:db:ed:e4:
9c:f5:3d:02:ad:c8:36:9d:22:86:a3:51:c5:0e:5f:
21:f4:4b:6d:19:28:8e:bb:9b:f2:84:39:4e:a5:59:
5b:5c:8f:38:e1:71:7a:20:02:78:ac:de:b7:9c:fc:
03:70:bd:31:64:22:97:75:14:58:0a:f3:73:93:86:
b1:af:ad:7c:af:d5:17:45:86:b1:ca:c5:a4:8a:5e:
6e:22:40:0d:87:b6:ee:86:d4:3f:a3:12:7a:51:db:
1d:5c:58:75:c4:bd:3f:62:4b:d8:ca:5c:d2:fd:05:
63:ca:b4:82:2c:2b:29:77:28:20:a3:fc:50:b6:a3:
21:c4:b8:37:ef:2d:63:50:e5:57:fb:ec:84:62:4b:
c7:58:ef:55:fc:46:e1:a1:b1:fa:8a:07:93:8a:ff:
8b:d9:ca:46:e6:cc:da:42:5b:21:82:82:c7:ec:cc:
84:89:96:92:71:96:4f:97:61:c2:de:0b:ff:97:74:
70:22:c2:28:03:4d:e2:3e:52:86:87:2a:8f:f0:d6:
ae:4b:39:3c:39:61:63:88:39:e8:2a:44:09:d5:2e:
87:b4:e3:46:94:d1:5f:37:8a:18:14:1e:b1:98:db:
00:ce:86:b0:0a:cc:d0:47:1a:77:8e:08:4d:c9:74:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:A1:45:7C:40:A4:B8:40:0A:C8:1B:DC:5D:B0:7C:F1:27:C7:56
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:0c:26:a1:1f:ba:12:ad:63:e3:aa:d9:87:0f:86:6d:f5:6e:
ae:be:34:f6:30:2e:b3:d1:5e:bd:08:aa:d4:de:bf:dc:31:bc:
db:90:65:78:bd:38:0e:56:14:07:bb:88:64:73:85:2f:60:86:
cc:0f:5d:74:dc:1e:4d:a8:76:27:4d:4e:36:34:00:d0:43:67:
3f:1e:8c:57:5d:bc:91:40:64:44:7e:5c:fb:cc:72:1c:f5:b8:
00:71:4c:4c:7a:40:69:be:59:20:44:46:b9:fa:54:63:7a:e5:
86:5b:27:23:53:f9:01:74:01:a7:c6:58:9c:0b:08:67:53:0e:
1c:0e:f6:6b:ff:02:0f:d2:dd:a1:da:10:84:21:f1:8d:24:e9:
9e:ae:63:12:10:f4:76:72:0f:58:60:7f:bf:31:a3:fb:e5:d9:
d1:d5:f4:2e:70:41:96:f5:b1:cc:5e:49:5d:d8:32:d8:b7:5d:
d6:28:a9:27:34:90:2e:08:9a:c1:05:66:a6:11:60:17:a4:38:
23:02:29:4b:26:b8:3d:4c:ad:fc:46:73:27:91:02:8c:23:c0:
c1:57:b0:ad:94:e6:38:43:52:8f:6a:3e:26:20:5f:a9:f7:fc:
bf:aa:bd:eb:12:a9:b6:48:27:fe:4b:c5:8e:46:d8:7f:a4:7b:
72:39:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:38 2024 by rpki-client on console-ams.rpki-client.org