Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
File: 3558ad32-215e-47a4-9f5b-477ec71e940f.roa (raw, json)
Hash identifier: qvAdxhhddtrtHRJmYUMTasfZezzNXaGez8pdE+TjvJI=
Subject key identifier: F1:99:42:AB:AC:2E:F8:25:59:C0:E0:6A:23:A8:D0:69:3C:BD:77:B3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3109680C43DC34A17809959101028076C17062A4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:09:68:0c:43:dc:34:a1:78:09:95:91:01:02:80:76:c1:70:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=800794a8dbdb55f09c4c7d9e51ad7053528abd96c98f8bb0348be0763ff19f42, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:d4:92:3f:eb:0b:c5:aa:58:aa:02:28:68:
81:a4:f7:7a:19:e8:7f:e0:4f:de:e9:f7:f8:7e:d0:
c9:ba:03:1e:4c:d4:66:1e:e6:93:74:ee:0f:68:43:
e0:52:7e:54:d7:28:0a:f1:45:95:0c:b4:bb:6e:b4:
93:03:c4:68:aa:f9:a3:ab:ed:16:8c:1a:ef:91:9d:
b1:3a:4c:c5:62:45:a1:aa:63:96:15:1e:a6:c1:1d:
bc:b8:d6:71:e5:8e:84:7c:db:79:91:09:a1:b2:3f:
99:9e:d5:2d:16:af:9b:9a:8e:41:04:91:1f:98:3b:
f7:29:01:64:5d:3d:b6:aa:ff:40:b7:e9:c7:22:3a:
c5:e3:e6:ed:5d:85:21:7b:f6:54:9c:3b:7d:68:6f:
f9:51:10:51:ac:ef:10:c2:b9:59:76:40:73:ec:1e:
c6:bc:26:99:de:46:9b:96:e6:99:34:3c:85:70:b6:
e5:1a:ce:c4:18:4c:dc:38:01:db:f2:c2:f4:aa:73:
a2:f4:16:f1:b3:a5:6d:b6:18:b1:cd:80:73:c7:86:
e4:32:c6:c5:0f:02:28:d0:78:22:3a:0c:dd:56:63:
b3:de:63:0d:19:16:cf:ac:9f:59:de:91:05:af:5c:
02:1f:ab:01:6b:ba:58:df:fc:ab:bc:08:93:cd:ac:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:42:AB:AC:2E:F8:25:59:C0:E0:6A:23:A8:D0:69:3C:BD:77:B3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:3::/48
Signature Algorithm: sha256WithRSAEncryption
4e:30:32:37:e2:30:2b:33:77:25:0e:96:7b:bc:96:30:a3:71:
18:a2:08:4c:52:7d:4b:c7:59:5c:91:44:44:b9:02:0b:5c:13:
33:2e:8c:1d:ff:17:54:21:95:91:ff:46:df:dc:00:be:27:8a:
7c:8a:00:8b:f0:ac:b8:82:d3:21:f1:70:44:b4:a9:65:32:68:
1b:06:ac:b4:4b:38:4d:ff:e3:21:94:d4:fe:9c:28:9c:2a:ba:
45:d1:32:b6:9a:71:98:a0:e1:a0:18:87:b4:ab:d9:91:a6:58:
eb:96:c0:82:88:b8:77:3c:b1:69:88:1f:ee:e8:45:3a:01:56:
7d:db:a9:d0:84:2f:04:66:08:5e:cb:59:5a:5e:16:fd:7e:e0:
94:ba:25:a1:86:3b:29:67:b3:c4:23:a8:64:9b:dc:f6:49:d7:
40:fa:41:12:20:9f:6e:41:12:f0:75:73:31:0d:da:2a:31:8a:
e1:e0:a4:b3:5f:e7:c0:bb:11:41:22:0d:3e:62:6c:ce:d8:6a:
0d:29:6a:20:ef:95:55:34:2e:bc:f4:a2:23:2c:8d:fe:0a:ea:
51:7f:a4:0e:bf:64:86:22:f1:25:89:d8:8e:a2:0e:a3:cd:c3:
fb:4e:d4:f8:fb:9b:1b:5b:a6:52:90:12:c3:86:3a:d9:ae:93:
21:66:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org