Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa
File: 49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa (raw, json)
Hash identifier: K4LvcKt18wG3P/6KIpzMaugKcRqx0HQ8Z21HOiydDnY=
Subject key identifier: 2B:98:56:E7:8B:0B:10:4A:49:84:2B:52:A5:E5:50:80:D8:6F:D7:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 592B50007C39A3CD90139F67C2B4B3CB292E5657
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa
Signing time: Tue 11 Jun 2024 00:00:00 +0000
ROA not before: Tue 11 Jun 2024 00:00:00 +0000
ROA not after: Tue 16 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 195.119.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2b:50:00:7c:39:a3:cd:90:13:9f:67:c2:b4:b3:cb:29:2e:56:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 11 00:00:00 2024 GMT
Not After : Jul 16 23:59:59 2024 GMT
Subject: serialNumber=28a4ea72260c6236ef26710738d92a84554f65aa5ae21483307b1f6bd912fa06, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:75:80:8c:79:0d:ee:ed:27:08:a8:69:01:
ce:6c:0e:96:03:74:c7:b0:00:53:84:68:61:38:87:
67:ab:39:5c:7d:3a:dd:b5:0a:54:5c:63:86:09:45:
10:64:75:41:cd:b4:74:1f:99:61:a6:91:25:b4:38:
cb:eb:b8:f0:7f:8e:91:9b:db:16:73:65:89:41:5a:
d1:9d:3d:dc:83:6d:e8:70:97:a6:62:68:e7:7e:47:
19:20:0a:b2:e2:e2:ca:20:bf:85:11:4f:89:15:bf:
82:50:e1:fe:ab:77:83:fb:73:82:25:3a:26:47:48:
cf:e7:6d:dd:2a:07:58:6d:a4:4a:6a:93:9f:11:9c:
a0:69:5a:b5:40:7b:b5:36:0e:bc:0f:fd:d1:b2:28:
8e:2a:80:f6:73:89:b2:8f:66:a5:75:fd:9c:d4:4c:
df:d4:e1:da:59:04:27:ca:a1:3e:ef:4c:5c:c7:09:
3a:77:94:d2:4b:0f:33:58:38:5a:13:3a:01:ba:be:
cb:1b:6f:12:a9:31:22:89:d7:c6:d8:c2:11:64:00:
cf:5b:4f:8a:77:75:4d:ea:4e:3c:72:a4:1e:2c:21:
11:b8:65:81:e7:11:0c:8e:dd:ac:78:9a:48:f3:f7:
33:ec:9e:d8:bd:ed:db:3f:b1:49:db:55:48:e5:a8:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:56:E7:8B:0B:10:4A:49:84:2B:52:A5:E5:50:80:D8:6F:D7:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:5c:2f:0d:6b:0f:66:c7:e0:31:c7:99:af:40:6b:56:94:d2:
c8:b9:80:f1:b9:69:cb:c2:0b:a6:e2:21:1a:54:42:99:30:d8:
0a:ba:13:fd:fc:7e:4f:92:ec:15:73:fc:f7:03:6f:c6:92:e0:
5e:54:f5:9a:29:bd:a8:76:5f:cd:07:3f:4d:f8:72:74:90:55:
58:14:51:fe:25:2d:75:bb:31:81:a4:2c:76:c4:99:6c:a2:e3:
9b:2e:0a:ba:ff:a8:c0:34:9b:2a:49:b4:01:18:18:37:c0:9d:
e2:fc:d7:55:a7:c2:e1:7a:f5:0e:f4:a5:82:23:03:7e:34:ce:
6c:ac:ba:4f:ed:69:e2:80:91:e4:a0:30:b2:3a:fb:71:fc:2b:
8c:85:c5:70:36:3f:fe:67:d3:f9:f8:e8:03:84:5d:b1:da:b0:
33:6a:78:67:5a:4e:96:5c:93:43:07:de:e0:e3:19:fc:ef:4e:
e9:19:c7:fd:b5:1a:b2:89:01:30:a3:e8:70:e2:76:60:e4:95:
aa:76:c4:19:de:f4:85:fb:f7:ae:e9:6f:e2:50:6a:e9:cb:0d:
cc:e1:c6:f5:d5:26:88:e4:b6:dd:cf:6f:b6:4b:2c:d7:27:d1:
75:23:2b:86:16:c7:87:53:1b:f3:b2:d5:c5:81:58:f2:bd:15:
17:d1:72:7c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUWStQAHw5o82QE59nwrSzyykuVlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA2MTEwMDAwMDBaFw0yNDA3MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDI4YTRlYTcyMjYwYzYyMzZlZjI2NzEwNzM4ZDkyYTg0NTU0ZjY1YWE1YWUy
MTQ4MzMwN2IxZjZiZDkxMmZhMDYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKbVdYCMeQ3u7ScIqGkBzmwOlgN0x7AAU4RoYTiHZ6s5XH063bUKVFxjhglF
EGR1Qc20dB+ZYaaRJbQ4y+u48H+OkZvbFnNliUFa0Z093INt6HCXpmJo535HGSAK
suLiyiC/hRFPiRW/glDh/qt3g/tzgiU6JkdIz+dt3SoHWG2kSmqTnxGcoGlatUB7
tTYOvA/90bIojiqA9nOJso9mpXX9nNRM39Th2lkEJ8qhPu9MXMcJOneU0ksPM1g4
WhM6Abq+yxtvEqkxIonXxtjCEWQAz1tPind1TepOPHKkHiwhEbhlgecRDI7drHia
SPP3M+ye2L3t2z+xSdtVSOWo2BUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQrmFbn
iwsQSkmEK1Kl5VCA2G/XGDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDkwMTZjZjMtMjNjNS00YjE3LWIzZTktMWMzNmU2Y2FjMWUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMN3MA0G
CSqGSIb3DQEBCwUAA4IBAQDPXC8Naw9mx+Axx5mvQGtWlNLIuYDxuWnLwgum4iEa
VEKZMNgKuhP9/H5PkuwVc/z3A2/GkuBeVPWaKb2odl/NBz9N+HJ0kFVYFFH+JS11
uzGBpCx2xJlsouObLgq6/6jANJsqSbQBGBg3wJ3i/NdVp8LhevUO9KWCIwN+NM5s
rLpP7WnigJHkoDCyOvtx/CuMhcVwNj/+Z9P5+OgDhF2x2rAzanhnWk6WXJNDB97g
4xn8707pGcf9tRqyiQEwo+hw4nZg5JWqdsQZ3vSF+/eu6W/iUGrpyw3M4cb11SaI
5Lbdz2+2SyzXJ9F1IyuGFseHUxvzstXFgVjyvRUX0XJ8
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org