Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa
File: 4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa (raw, json)
Hash identifier: FWKyUtgC8Ikq5xpfjOpJTNzkuFx82UIisNJmuuOSocs=
Subject key identifier: 33:FF:02:A8:63:8F:E2:33:F5:5B:BC:B1:52:69:3E:D4:0A:09:3B:4E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6456529B656F61845356537204C99BA07CA28B20
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 193.57.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:56:52:9b:65:6f:61:84:53:56:53:72:04:c9:9b:a0:7c:a2:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=46d9be92a60d371f06d5e15870210c8d2aa4af7e2ff8e3f0276b7474c9cf51c9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:7f:ab:75:87:c1:08:dd:de:98:e1:c7:bf:
a9:16:5a:00:05:76:cb:39:09:15:cd:76:f6:e9:cb:
57:fc:f3:90:8a:87:81:ca:dd:f8:be:0c:78:79:5a:
fa:56:ce:3f:da:40:5b:ab:ac:14:1c:ba:ba:df:1f:
7b:5a:48:8b:57:ca:08:96:17:ff:25:91:ad:fe:9a:
de:6d:7b:24:cf:be:46:09:80:c2:e1:f3:cd:27:56:
ad:e7:86:c8:5a:99:fb:d5:68:ec:15:72:ba:15:70:
b3:93:99:ec:06:cd:42:ef:fd:3d:3a:a0:8d:6d:71:
19:88:fe:4a:7a:96:0a:e5:a7:5e:cf:02:a6:dd:24:
ae:f7:c3:ad:77:ab:98:8c:d1:42:51:f8:4c:1d:b2:
a0:ed:0d:14:f0:97:76:86:75:b5:07:38:94:39:a6:
28:11:c3:d3:e2:ed:78:cb:dd:23:7b:26:7a:69:d7:
cf:4d:bf:18:f8:0f:7a:7b:ce:9f:d3:92:04:03:dc:
38:53:3d:f3:e9:49:75:92:fd:2e:3e:51:6b:7f:94:
91:e2:de:3f:9c:75:00:52:fc:07:1e:99:66:d6:b5:
c2:2c:49:44:34:82:4d:85:e6:68:68:9e:6f:21:69:
1b:6d:9b:47:77:06:47:88:e8:0e:7a:01:fb:e6:2a:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:02:A8:63:8F:E2:33:F5:5B:BC:B1:52:69:3E:D4:0A:09:3B:4E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:28:7e:66:a9:ea:5b:70:28:46:94:51:8b:88:95:9d:ad:42:
9b:9f:48:8f:0f:cb:4d:ce:cc:36:83:eb:fd:00:96:b8:f5:15:
b4:82:05:02:f3:0d:5f:5c:9c:87:79:08:cf:6d:46:29:74:c7:
0a:e0:8a:9a:fb:5d:ae:fd:ec:fc:f3:7e:02:97:c2:4f:e7:40:
f7:a1:76:4b:aa:3c:0a:1f:0f:31:1b:2a:8d:11:18:b6:05:17:
4c:e3:0c:c0:31:40:f0:00:7d:5b:dc:8e:67:f2:95:ad:ae:4a:
da:f2:58:9f:f7:54:c4:3a:f8:48:21:80:23:77:82:bf:c8:4f:
47:78:a0:d5:91:09:2e:60:8d:2e:63:5d:f2:40:59:48:ff:c6:
46:7e:7e:e6:9c:94:87:e2:d9:5a:cf:ff:fd:00:a8:25:ca:76:
12:ee:fe:14:ba:2e:c7:55:46:2d:cd:77:ef:8f:45:97:b8:2c:
7e:d0:4c:9e:b2:5d:3a:33:d7:e0:fb:d9:23:28:0e:53:20:c4:
2c:7d:c0:38:5f:ab:2e:87:d0:3d:b8:38:ac:3d:5d:a2:e1:8c:
23:65:20:6a:d1:00:02:43:c3:f0:e0:e8:fd:1e:a6:bc:f4:f6:
9a:e2:f3:02:c3:0b:13:de:9a:99:c4:86:43:af:e8:2c:4d:3b:
f7:c5:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org