Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
File: 46b220b9-837f-4174-97e6-c711958273ea.roa (raw, json)
Hash identifier: LGMC2+EDiUlwDMrJUajQo+le8tk9u+ohaSV57k5LLog=
Subject key identifier: FA:4E:6B:08:7B:BA:64:04:7C:04:7A:74:1C:2A:9D:AA:03:91:3D:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F09A2BD97EFD589A6344147430E331C0D323FAE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:09:a2:bd:97:ef:d5:89:a6:34:41:47:43:0e:33:1c:0d:32:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=719acb7f64e876ccc731ccbc57b6510b9fbca0b9a64945afa29cc72ff9a72a8e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:fb:c6:a3:1d:97:1c:17:38:1c:6f:b1:9f:
09:08:7f:40:ec:7a:a8:6b:62:2c:ee:a4:70:92:c6:
ab:b8:73:d6:d6:dd:af:b4:4b:67:03:76:d1:c6:9b:
77:de:65:de:58:9b:8e:bb:4d:d9:0d:0a:4c:ce:f1:
77:d1:63:a2:ed:ea:6e:cc:ba:7f:17:31:75:15:1f:
d9:2e:9f:ac:1d:b3:f8:27:3b:b8:66:54:53:81:5a:
3c:04:2f:31:3a:f5:66:d0:20:7f:ec:23:33:54:d6:
54:f8:9b:9f:d0:e4:aa:f8:3a:d5:71:7e:1e:33:23:
b7:87:c7:7d:89:76:69:19:2b:83:2d:10:58:13:63:
61:c0:31:51:25:25:9a:5c:f2:f3:b5:7e:37:f6:c6:
1a:63:31:4c:38:84:4b:a7:ba:88:ab:7d:8d:3d:ab:
7f:8e:8f:69:38:7c:43:e2:ed:cd:b6:fc:62:bb:92:
45:7a:74:9e:84:30:2b:34:12:c0:2a:1f:f7:7e:2e:
53:e5:b7:54:bf:48:a4:d0:f3:68:a6:85:0c:46:70:
c7:29:77:8e:16:55:8d:13:9c:f7:57:99:66:5d:a3:
50:91:fc:ed:fe:d7:d3:aa:5c:a9:99:27:fc:76:70:
e1:11:56:ac:16:8e:15:5a:f3:5b:6f:68:c2:1b:0f:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:6B:08:7B:BA:64:04:7C:04:7A:74:1C:2A:9D:AA:03:91:3D:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:3b:5c:10:79:a4:4d:5e:f9:1e:40:5d:3a:31:a3:f7:4a:4e:
0f:e4:06:23:47:d3:3a:0d:ae:8c:07:0b:bb:c7:46:56:05:e0:
68:9d:99:46:da:1f:d5:2e:1a:27:29:5b:1f:cb:43:bc:dc:a0:
12:be:46:d9:99:fb:80:2a:0f:b7:87:e3:06:b1:c2:bb:45:a4:
77:0a:53:b8:8a:c5:bd:bd:d2:a6:1d:1c:da:7c:63:04:04:41:
7a:a9:38:3e:b9:a3:f9:75:62:c2:82:77:74:42:89:ae:68:e6:
f5:d4:00:60:73:6b:8b:c4:bb:71:65:e4:64:28:6d:a4:5f:a2:
83:e8:eb:b2:43:ef:55:a8:00:06:94:bc:c9:15:fc:42:c3:0d:
ad:48:d2:11:cc:9f:b0:96:b4:4a:f0:a7:44:8f:f9:34:dc:18:
c4:75:88:4b:86:e0:35:f7:db:78:f0:d8:15:d9:8a:1d:c9:38:
af:4a:7b:c1:87:f5:9b:4e:79:84:89:45:d5:b4:ca:9e:9a:d7:
3f:00:b7:b9:0f:7a:29:f9:e3:d1:96:1d:8d:d0:94:2c:75:82:
b9:be:56:3f:20:05:04:38:8a:99:1e:dd:dd:7e:57:ef:53:db:
5d:4a:93:2e:92:94:a4:a0:c2:c5:05:cc:63:69:3a:5c:a3:47:
b4:3a:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org