Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
File: 3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa (raw, json)
Hash identifier: 3KJ5bIFaLABawKuDPU2PvVo+3/hrzBYlnN5lXRDRIEY=
Subject key identifier: CF:2E:4F:0C:1B:C4:5F:5E:F7:C3:99:43:E5:51:E6:4F:65:DC:80:2F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 080628E8D88A87F158BBCC5137BEA9C27FB5EEFC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
Signing time: Sat 01 Jun 2024 00:00:00 +0000
ROA not before: Sat 01 Jun 2024 00:00:00 +0000
ROA not after: Sat 06 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:06:28:e8:d8:8a:87:f1:58:bb:cc:51:37:be:a9:c2:7f:b5:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 1 00:00:00 2024 GMT
Not After : Jul 6 23:59:59 2024 GMT
Subject: serialNumber=2bb40b82757060f0ca54a7527d2926fd6a32fa7ab39e3695f4999b563d6040ae, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:f4:b0:71:73:23:4d:87:1b:87:54:7e:38:
ec:5e:15:19:bd:02:a6:e7:b3:6d:40:57:f2:0e:52:
2a:77:ef:f0:22:f3:97:1f:37:56:80:8b:75:dd:c6:
02:b2:0e:cd:dc:94:db:65:bd:6f:92:51:02:fa:c9:
4e:76:90:df:54:4a:05:b1:4e:0c:aa:8d:b9:15:58:
06:85:dc:9d:84:e8:88:4a:86:dd:af:c3:b1:6e:ff:
38:c0:15:03:9f:98:bc:6e:14:40:10:8b:9f:7e:94:
fc:d6:90:6a:1c:2b:04:85:c3:56:4e:23:63:b9:9c:
72:9d:7d:9c:72:69:0b:3c:a1:f8:12:f1:e6:7a:c7:
fd:96:3d:4d:ee:a0:82:11:74:1e:4d:7b:1b:7d:c8:
86:ca:34:92:9f:16:a5:be:17:b0:05:7b:64:da:dc:
a2:bb:95:72:f4:bb:3f:57:be:95:04:a7:99:e4:00:
a4:fd:ed:59:3b:eb:d8:46:bc:b9:dd:dd:9b:ad:35:
67:5b:f1:40:01:8f:97:68:aa:b4:c9:bc:e7:52:a3:
59:35:d4:3e:29:38:36:ac:59:c2:3b:65:06:ab:9f:
ec:ab:36:07:78:cf:9e:97:c6:95:f7:b2:35:93:f9:
f2:c4:d0:0d:5c:e7:2e:a2:e4:d1:45:47:3b:05:44:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:4F:0C:1B:C4:5F:5E:F7:C3:99:43:E5:51:E6:4F:65:DC:80:2F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:a7:d4:2a:05:ba:8e:5c:ec:1f:f7:66:b0:f9:db:40:c3:62:
95:6c:c7:c9:45:b5:22:17:e0:c4:06:9b:5f:20:70:c1:58:31:
8c:86:6b:f0:14:ec:07:a3:99:f1:82:41:c2:c5:24:56:2c:70:
7e:44:bd:d2:79:82:be:d9:e3:28:9c:c5:97:46:7f:b9:ca:51:
a8:20:61:92:4a:c5:eb:a9:37:3b:b6:40:ea:f2:24:ff:7e:0b:
bf:6e:8e:e0:ac:d4:67:b3:e6:34:5a:0d:23:28:8a:cb:db:c7:
17:bc:ae:17:03:5b:bf:73:91:c7:a1:8c:7a:14:d9:31:fe:ab:
d6:84:ed:2b:ad:06:dd:c2:0c:9c:d4:27:1c:55:c9:5c:0f:da:
ea:c1:da:81:a6:77:8a:a6:a6:06:63:2d:59:1d:9b:2f:b4:2c:
5c:21:c0:02:20:f1:04:c0:0c:8c:9f:b6:ac:67:df:d4:ab:df:
48:8e:6d:76:1f:18:fc:0d:39:3d:1a:bc:f5:66:2c:9e:0e:2e:
cb:bb:1c:d0:48:75:3f:a9:3a:01:a5:f7:04:fe:ad:3d:2f:63:
37:91:f7:e7:5b:fe:72:ce:d5:ec:2f:f8:c9:1a:36:62:7c:0c:
46:9e:64:f1:c0:63:12:05:cf:01:4f:17:e5:ce:69:66:f3:f2:
88:41:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org