Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4911793e-4031-4d2f-be54-a38fc617b3c5.roa
File: 4911793e-4031-4d2f-be54-a38fc617b3c5.roa (raw, json)
Hash identifier: gZHnxVAi1PFVyUitshy6DHjOZ8eqc7oiEC7mWMx5ngw=
Subject key identifier: 38:54:F6:21:59:DE:7A:A3:E6:16:5A:03:B8:C5:06:AD:3F:56:52:F6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 77F9DCD4AB48B4B7449A5E552A5ED15BAC7E8CA4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4911793e-4031-4d2f-be54-a38fc617b3c5.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.114.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f9:dc:d4:ab:48:b4:b7:44:9a:5e:55:2a:5e:d1:5b:ac:7e:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=f851a1a3b23ebb6159f793f55293ed3fdb6b13bc041ef36d910edb9143d299db, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:7e:40:d8:8d:73:f5:32:44:88:3e:82:c9:
e1:89:a9:bd:31:dc:9d:ff:db:54:1f:1c:e5:dc:ff:
75:59:93:cf:9e:0d:b7:9a:f0:41:6a:bf:7c:17:04:
a3:b2:47:b0:e3:c3:7c:39:c3:e3:31:bc:de:fb:d4:
4b:48:19:c5:f6:77:d4:91:c0:6a:47:9c:af:25:8a:
40:16:6c:1d:e5:6a:68:39:e9:9e:e1:b6:41:e2:c8:
07:41:2b:b1:36:4b:3d:56:28:4d:3a:7d:78:86:6f:
6f:76:dd:f6:2c:e9:cb:79:fb:0e:4c:0e:74:31:a0:
35:fc:fd:28:86:61:10:2b:6b:46:f4:61:8f:f4:af:
ab:07:34:85:ab:26:7b:c8:25:e6:25:5f:5d:9f:56:
30:55:dd:14:4e:05:f6:dc:a1:5d:51:fa:bc:71:78:
c7:da:33:00:39:7a:7e:c6:9f:6d:25:6b:c1:4a:ac:
fd:53:12:05:a1:0b:73:1c:4a:d4:33:71:b8:55:4b:
5c:08:eb:f0:2b:78:2d:8a:b2:86:ed:81:3b:48:a6:
64:74:44:5c:ca:b5:82:05:d6:bf:3a:12:b9:ea:5f:
9e:11:c8:8c:2c:de:b2:a7:da:65:03:a0:3a:be:54:
a5:9c:53:ef:c3:d7:c2:7d:1c:21:06:4f:1c:4e:67:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:F6:21:59:DE:7A:A3:E6:16:5A:03:B8:C5:06:AD:3F:56:52:F6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4911793e-4031-4d2f-be54-a38fc617b3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:60:fd:4f:39:1e:2e:8d:ce:6f:e1:af:21:9b:3c:4a:42:57:
98:71:58:04:f1:d5:31:10:3c:0a:e7:3c:eb:e9:95:d1:21:0a:
f3:55:f9:2a:19:bf:6e:e6:4a:9f:c0:61:8c:d8:b6:e7:3b:53:
cf:19:7b:b3:64:a6:03:a2:cc:cf:16:6a:4e:f3:83:30:22:a9:
8d:59:0c:8e:ed:3b:86:e1:66:25:ec:12:b2:ec:89:04:ae:e3:
af:10:6c:55:2c:ba:1d:7e:da:a3:13:f2:03:cc:68:69:9a:47:
c9:5c:f5:63:70:84:2c:9a:19:86:26:a4:6a:00:6a:e3:a4:d9:
0d:dd:ee:35:e4:cc:dd:93:55:5a:c2:fb:68:4d:5f:59:47:72:
88:ce:df:32:74:be:ac:32:8c:d3:55:85:2b:1f:da:42:0b:56:
96:7e:8b:e3:75:a2:07:8b:ee:fb:78:ea:f4:0e:cc:3d:55:63:
57:63:5c:b1:61:bc:26:b0:52:bf:f1:95:78:be:4e:60:1a:56:
be:d8:92:e8:53:8a:d2:ab:c1:26:f7:07:f4:02:a7:7b:24:a7:
22:97:41:3e:bf:d0:7c:ea:65:c9:df:03:e0:ef:36:85:bc:97:
dd:32:9a:07:63:81:0e:f8:3c:47:33:c3:17:f0:20:52:a7:58:
06:4c:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org