Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/501dbaae-8f4c-4119-bba2-497c304add44.roa
File: 501dbaae-8f4c-4119-bba2-497c304add44.roa (raw, json)
Hash identifier: 3hk6z3x9D7RjUJEEVoYBThcahtOO0D3fRhT7Lg9GH4A=
Subject key identifier: 7C:C7:DF:60:5D:F2:50:23:83:F0:7D:CE:72:1C:E6:98:F4:38:83:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2C47E8A9D1672B101D44FC1AC110135E4F48FF40
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/501dbaae-8f4c-4119-bba2-497c304add44.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.0.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:47:e8:a9:d1:67:2b:10:1d:44:fc:1a:c1:10:13:5e:4f:48:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=0da4bda44d0c738edf3feb9a0e10d00eb1ebe9ce59ce682fc0fa6fed976c36f3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:c3:3c:0c:40:fd:a6:5a:f4:11:5f:ed:ac:
63:ea:08:32:33:2a:27:3b:da:68:e2:8f:c1:eb:1b:
15:7b:81:6f:ff:35:65:95:b4:b9:77:1b:3f:58:79:
b3:9a:47:90:dc:8c:1e:f1:d9:71:bb:4d:3f:59:b5:
26:20:17:36:1e:ec:0e:88:01:81:ba:dd:10:ce:c3:
41:a2:5f:f3:85:62:06:0e:d7:07:48:6b:10:9c:17:
88:0b:ed:78:e4:8f:e7:5d:da:c6:cf:4b:67:a0:bc:
d9:4b:51:97:e7:d0:f3:62:d2:57:cd:ca:ba:94:07:
c7:1b:36:d6:c9:6b:01:04:2e:8b:13:1b:6a:23:68:
b9:ee:09:49:5b:b9:53:36:df:b8:36:0d:e2:fd:a8:
ce:3e:26:27:d6:d5:e8:0e:f1:fd:bd:dc:8e:c4:67:
16:85:ad:b3:c6:6b:b9:a4:df:1d:9e:ff:5d:ef:60:
35:a7:26:0c:b0:14:b2:c3:dc:33:d8:42:58:79:de:
c8:d6:b7:0b:59:90:7c:2b:5e:5b:c8:a2:68:3b:15:
f1:20:ac:b2:db:98:4b:4a:38:1b:d0:20:33:6a:77:
cc:93:12:a5:80:82:00:72:3d:13:00:81:11:24:ec:
40:d2:26:88:ff:9f:9c:68:2f:2f:a9:73:aa:6e:76:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:DF:60:5D:F2:50:23:83:F0:7D:CE:72:1C:E6:98:F4:38:83:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/501dbaae-8f4c-4119-bba2-497c304add44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c5:15:81:f0:1c:f8:ce:7f:22:b0:ec:41:83:dd:6a:94:86:44:
dd:4e:ee:4d:99:a1:c6:72:6c:14:47:73:f9:b2:72:30:4d:c6:
8b:7a:9c:fb:33:90:5f:7c:cb:f5:87:bd:a1:e0:42:07:49:a0:
2d:6d:95:a7:e0:12:af:e1:6c:8a:07:09:b8:71:77:0f:2c:5e:
a0:f4:b0:49:2d:8c:d2:8f:00:a5:8a:95:97:4d:e1:19:06:3a:
df:ca:10:d4:74:a6:64:99:b5:e0:6c:d8:81:a7:49:9b:a1:01:
5f:04:38:36:a7:02:ca:22:6a:48:75:c3:0e:33:66:af:1b:a3:
57:c1:8c:b0:f8:46:ac:bf:1a:f7:86:8c:24:3d:e5:6b:b1:e1:
5c:60:5c:1a:4b:43:bb:fd:da:c3:18:0e:57:bf:cf:53:f8:2c:
58:25:23:5d:f3:4e:27:a3:d0:4d:e9:76:c7:b9:74:a9:87:7b:
b6:61:e2:36:9d:04:f5:14:e8:b7:40:da:6c:a3:b7:0d:1c:e8:
24:bd:8d:0e:98:49:55:c0:b7:10:29:30:4b:a9:6c:90:83:7a:
ec:67:01:55:fc:21:5e:be:45:5f:84:2a:b2:30:29:85:4c:1b:
0c:90:a3:4c:d2:27:01:c4:f8:78:8b:b4:33:05:88:5f:5b:62:
36:35:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org