Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
File: 51429a37-e3fd-4b49-a184-1e07ed522f97.roa (raw, json)
Hash identifier: aowd9zzFMF5ihXY5kFeTUNiTHES1+g16JPYSeZwh6/8=
Subject key identifier: 4D:48:09:52:C1:DF:B3:93:09:E7:98:FE:0C:1B:C1:4A:32:AB:59:94
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6821E68FBD66B7D571B713180E3228FED6D01EB8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
Signing time: Fri 14 Jun 2024 00:00:00 +0000
ROA not before: Fri 14 Jun 2024 00:00:00 +0000
ROA not after: Fri 19 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:21:e6:8f:bd:66:b7:d5:71:b7:13:18:0e:32:28:fe:d6:d0:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 14 00:00:00 2024 GMT
Not After : Jul 19 23:59:59 2024 GMT
Subject: serialNumber=31f4316d4a70c4e24603c80db4c6e379f6a40c1847276f975b53881b65ac2f22, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:37:a0:2c:e4:4d:82:bd:08:c5:9a:be:82:
dc:d7:d8:40:d0:25:4a:dd:7d:cd:24:85:d2:bb:bc:
f7:6c:bc:5c:b2:f8:df:17:dd:fa:ae:7d:a9:4e:92:
a2:cf:eb:ea:44:89:90:7a:60:83:a3:24:f0:da:d2:
08:d4:ab:ab:8d:34:b8:d3:41:7f:a3:b6:98:61:18:
41:89:62:a3:24:98:2b:b8:2b:64:fe:9c:54:cc:b6:
8e:62:9f:c4:23:2c:3d:6b:45:5b:29:21:de:5e:8a:
05:af:9e:23:e6:c1:91:61:51:8e:b4:f6:af:06:1c:
6a:bc:25:da:f4:67:6e:42:00:da:3d:ee:26:2b:d5:
d9:d4:16:b3:c1:c4:e1:0c:83:63:fe:3b:9d:c5:12:
d9:49:1a:ff:e7:6e:70:e9:a6:61:8f:e6:8c:97:be:
3a:86:c9:b9:65:33:1a:25:7c:41:02:9c:a0:9a:f3:
0f:4a:bf:ed:92:67:4b:db:97:b3:52:a7:9e:5b:c7:
99:4b:11:20:36:a3:d8:b2:68:51:54:7b:90:71:6d:
45:27:91:3e:5a:24:76:3a:b9:2e:ad:2f:bf:ba:d8:
00:6e:a8:bd:c6:b2:2c:ef:9d:77:ab:ca:01:ec:83:
1f:c3:ab:99:ff:87:d1:64:17:0d:ce:58:77:df:b1:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:09:52:C1:DF:B3:93:09:E7:98:FE:0C:1B:C1:4A:32:AB:59:94
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:df:c4:c9:48:bd:a1:3d:07:f6:0d:be:5d:4b:41:3d:73:1a:
5d:20:fa:8e:cf:87:92:54:c2:b1:7d:ce:f3:9a:63:f7:d3:9b:
8f:14:9c:3f:f2:ba:a5:c7:60:db:47:1a:ca:2f:28:bd:27:53:
3c:5e:c0:4a:8e:91:db:06:62:41:b8:9a:52:0f:26:54:0d:a0:
08:c3:49:1b:69:06:9b:70:bd:03:80:d1:ff:69:d9:54:ce:1a:
b1:2a:fe:d4:f0:b3:06:17:10:de:eb:93:70:cd:51:2a:26:60:
3c:dd:eb:df:62:4d:82:fe:6f:70:1c:c7:e3:c8:59:86:3a:a9:
42:64:c4:54:1c:74:ea:38:1e:e2:e3:b7:6b:80:6a:b0:54:79:
2a:42:37:ff:a3:5a:9a:b6:a5:61:b3:70:72:b0:e3:82:f2:1e:
25:40:94:5b:ee:bc:90:ec:01:c4:0d:e8:38:37:b6:2b:01:4d:
50:39:ce:1d:ae:8d:39:b8:aa:ca:bc:97:72:58:f9:b7:c1:bd:
71:eb:26:bc:b1:7c:a8:38:7e:26:bf:2d:01:ad:d4:fb:65:bf:
9d:08:11:fb:e8:d0:88:67:dc:6d:fd:73:09:3f:e7:db:65:b6:
21:55:cd:32:5c:9b:80:8d:8d:f1:7e:37:85:b3:cb:f7:42:4b:
09:ed:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org