Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4291e769-5d4c-4010-818f-64c1716d6e54.roa
File: 4291e769-5d4c-4010-818f-64c1716d6e54.roa (raw, json)
Hash identifier: aLfctxtdhGNpZLlsKEKfb+4QUDvPMW+zAfx4vqeR3Mg=
Subject key identifier: 68:8B:B3:84:95:BB:FA:BA:60:FA:CA:4B:0F:38:68:F0:60:F9:D9:ED
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 447C8733B63B0D3F5C71A892CFFB14A1DCA9AEB7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4291e769-5d4c-4010-818f-64c1716d6e54.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7c:87:33:b6:3b:0d:3f:5c:71:a8:92:cf:fb:14:a1:dc:a9:ae:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=755d263e2e85bb39545ff1467e6a9ec3a62e860b838beece91818e7faf288934, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:f6:41:5f:f4:92:93:4b:03:5a:5a:49:30:
32:f8:af:5c:ae:5b:60:ad:ce:2b:18:ef:d3:ba:22:
e0:58:cd:b3:22:6f:25:bd:c4:9b:db:fe:e5:7f:51:
05:2f:72:a0:3b:d8:34:95:5c:40:4d:68:62:1f:32:
2b:94:a0:0c:86:8a:7c:3c:18:1c:b1:a4:e2:47:08:
e0:31:d5:a4:46:34:21:d0:2e:35:e8:13:d7:b0:ed:
0e:b0:30:a3:c0:bd:58:0a:9d:f9:2a:e5:55:50:74:
4a:29:e5:21:f6:dd:0d:7b:f6:5a:2d:ea:92:d2:38:
f4:ee:3a:ca:ed:77:b4:c2:bc:5e:ac:81:82:eb:e4:
38:bd:36:c4:08:96:b4:6a:08:ec:1d:60:85:74:ce:
84:70:cc:df:c7:53:bb:57:e3:25:c4:7c:33:9b:56:
d9:30:9a:19:67:b4:c6:f9:35:b0:8f:4f:93:b6:bc:
a7:61:f1:f9:b8:db:03:88:fa:47:6f:ab:00:81:4a:
62:46:48:2f:b5:f1:36:67:7e:fd:16:e4:b1:62:04:
15:5d:f2:4c:15:bf:84:4d:a5:de:d2:6e:be:69:18:
10:6a:2a:85:12:25:ec:07:11:67:6e:c0:6d:ab:29:
3b:d0:d4:ed:bd:04:55:f6:21:c3:d4:e0:6a:2e:62:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:B3:84:95:BB:FA:BA:60:FA:CA:4B:0F:38:68:F0:60:F9:D9:ED
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4291e769-5d4c-4010-818f-64c1716d6e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ce:7e:59:21:7f:5e:cd:21:44:2f:9e:c6:6d:00:33:2e:3a:63:
3b:c2:04:06:29:61:b1:93:d5:63:df:20:1c:8d:19:3d:b0:af:
29:31:b0:32:33:57:75:9d:9e:db:44:e8:31:04:33:d8:c2:39:
c8:ea:9c:3d:9e:bb:e3:8c:3c:5f:74:fc:79:6c:d0:8c:85:ee:
ce:1b:4e:c8:a8:35:73:e7:10:45:10:6a:a3:75:9d:b7:c9:7a:
da:db:b2:0e:8c:f5:37:92:e6:ea:80:1b:de:40:fb:47:9b:62:
f0:06:71:d3:34:c8:cc:8a:2a:f2:78:9b:a7:3a:0d:24:81:5c:
c3:55:70:ae:4e:8d:cd:81:7f:9a:d7:8e:f4:b0:09:88:b5:25:
86:d5:d0:54:1b:3a:aa:68:48:9e:ee:0b:cc:eb:e9:77:61:6a:
1c:71:6e:2d:61:2c:a7:f9:3c:37:a5:22:2a:d1:ad:da:2c:92:
79:d9:0d:27:e0:58:5f:da:42:a7:83:d2:d5:8c:dc:ce:43:c2:
b5:2e:58:8c:18:7f:84:1d:a0:aa:08:31:d1:8f:eb:27:94:69:
58:79:b1:7a:21:01:f2:8b:ee:23:c9:57:c1:ef:67:13:f9:0b:
ad:ef:ab:c8:80:d7:4e:06:3f:1d:93:aa:1f:44:71:6b:bd:7b:
88:30:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:21 2024 by rpki-client on console-fra.rpki-client.org