Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4357bcd8-5973-4f9d-968f-660b17590f0e.roa
File: 4357bcd8-5973-4f9d-968f-660b17590f0e.roa (raw, json)
Hash identifier: Y1o+NJRx0rLihpLmy48m1KiUeHZ4IIFrqn3ZNRP79/0=
Subject key identifier: B0:D8:5E:DD:A7:A6:A4:CB:35:FF:3B:16:5B:C2:9C:D1:AC:9A:51:14
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 681FAE39AA1465636D4F726717997D2279447648
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4357bcd8-5973-4f9d-968f-660b17590f0e.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 185.72.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1f:ae:39:aa:14:65:63:6d:4f:72:67:17:99:7d:22:79:44:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=e23d1e0717619d28b54641766ee1609bffe9653641af4a774b2d2cd49e531bd1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:5f:44:fe:85:33:f5:ef:37:90:37:54:19:
c4:78:6d:d6:b4:31:de:6e:83:f7:99:b8:0b:82:ea:
60:ed:67:2a:64:82:5a:23:c2:1f:fe:ff:19:74:cf:
dc:c0:83:11:4c:0e:96:df:49:d9:71:f7:81:4e:c1:
c3:a6:dd:f0:28:75:8d:ed:b7:6a:4a:b9:c3:aa:8f:
c5:d4:18:21:1f:45:3e:a5:e2:d1:78:46:d5:1a:25:
4a:a5:5d:92:dd:0b:a1:63:d0:1b:03:bc:27:10:97:
d1:87:b1:22:01:5c:a9:e0:ee:93:a1:32:1d:d5:6c:
27:54:48:fa:ba:91:8e:51:d0:f4:48:88:9d:f4:25:
cc:3e:36:6b:33:16:0a:07:b1:de:ef:36:b4:96:81:
a4:6a:b8:d9:7a:ac:f6:bf:f1:f0:de:e6:4c:d6:60:
b4:26:3f:5f:2d:a4:8a:8d:24:ee:03:25:33:b3:35:
48:ef:37:83:38:7d:00:65:fd:5e:78:6f:93:84:fd:
ea:1f:47:73:d8:d6:e5:7c:1c:3d:0f:e0:1f:72:e9:
de:74:1c:c5:ab:cc:5d:8f:c0:e1:b3:80:be:47:ba:
20:dc:29:9e:a5:34:bc:3c:3c:fe:f4:ac:a4:63:a3:
41:8f:50:e2:2a:96:95:30:97:25:13:a6:e3:72:bc:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:5E:DD:A7:A6:A4:CB:35:FF:3B:16:5B:C2:9C:D1:AC:9A:51:14
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4357bcd8-5973-4f9d-968f-660b17590f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:0b:44:6b:be:a5:41:81:f2:42:42:38:a2:9b:48:93:bf:64:
8b:0f:09:cd:1d:00:24:3a:4c:6a:7e:ef:5d:b8:d1:c8:cb:08:
e9:8d:3d:88:80:43:de:c1:ad:b4:bc:2e:42:e0:03:84:c7:3e:
3f:50:e8:15:18:aa:3a:57:6c:e1:65:57:af:1d:81:b2:7c:4a:
15:ba:b7:75:83:c3:2c:16:3f:6d:2a:12:81:ae:7f:1b:29:09:
ea:27:c0:ab:92:b3:ab:c6:a1:c1:39:3d:cc:65:b1:21:b7:93:
84:0f:4f:97:5c:4d:9f:27:ad:16:eb:3f:ea:e5:68:73:a7:4e:
80:c3:ee:89:4c:44:f1:e3:a2:bb:5e:9f:da:9c:4b:08:5d:ca:
21:b5:48:99:17:5e:25:80:44:15:3a:99:40:ea:c7:99:fe:9d:
8c:3a:2e:b9:a4:ce:48:56:66:e7:a2:dc:87:a0:15:48:2c:d5:
77:3e:97:ea:8c:d8:04:98:03:99:d3:32:8d:0c:e5:92:e9:3a:
6c:f2:e2:ad:7b:e0:d1:13:0c:b0:07:63:0b:a3:11:4f:86:81:
77:d6:4c:7a:22:40:d2:28:fd:c2:ad:12:08:3f:0e:98:b8:10:
aa:2b:8d:28:a9:ab:ae:df:9c:32:d0:cd:27:b3:1e:b3:96:7d:
76:69:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org