Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
File: 5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa (raw, json)
Hash identifier: uTxkbT5FD+WKqsBYNqv78IGKneaLYx9VyfUZdWjzJ7o=
Subject key identifier: 0B:09:FE:84:E6:26:62:DF:4A:B5:66:5B:99:AC:A9:D3:73:FD:11:E2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 27E0881A62349B104FF06B43E3E229915E3F184B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e0:88:1a:62:34:9b:10:4f:f0:6b:43:e3:e2:29:91:5e:3f:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=2967c7ddc1e3c9be159e1c26601fb78d64257e433be5284f3afb13744315ab87, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:7f:ee:2a:f5:54:02:0d:14:bc:27:fe:b6:
01:2a:47:a1:37:41:5c:e6:db:83:4e:12:d2:c8:93:
ea:19:dd:d0:00:fc:5a:be:cf:ee:85:d5:6e:55:4d:
36:01:6c:d7:98:99:17:fa:e8:20:37:37:11:32:9e:
e3:52:9f:63:75:5f:69:e6:53:40:d4:72:fc:e8:85:
f5:cb:da:08:50:70:dd:b7:4b:44:1b:1d:08:1f:91:
cb:54:15:09:11:ab:b8:fd:1d:6c:02:78:7c:28:ae:
0c:52:a9:25:ba:b0:4d:d4:82:22:f4:28:20:09:32:
fe:04:87:b4:d3:2b:a0:09:6e:0d:ab:10:fa:19:96:
4a:ac:92:bb:ba:c3:64:e6:8a:2e:95:13:f5:10:1c:
e7:c7:32:d5:ce:d9:c3:1c:14:36:91:39:4e:28:a2:
25:7e:3d:82:d4:83:46:13:a4:98:cc:74:07:24:bd:
d7:6a:76:62:3d:73:5a:44:18:e4:3b:f0:a7:cb:2a:
5a:8c:17:b2:5e:43:5a:c3:cb:5e:40:2f:92:82:86:
7e:39:bb:f4:60:08:3c:ec:50:f6:56:46:bf:14:9a:
27:da:e9:8b:60:43:d7:0a:e6:b9:ad:d5:8b:4a:81:
c6:49:0f:78:91:38:e4:f8:df:b3:b5:63:f5:2b:c0:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:FE:84:E6:26:62:DF:4A:B5:66:5B:99:AC:A9:D3:73:FD:11:E2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:8d:39:b0:69:85:5d:d5:34:d6:c1:14:f6:a8:c5:4d:a1:f1:
38:1c:31:82:be:95:6a:14:03:75:41:67:eb:a1:f2:00:85:ee:
bf:a9:d7:44:fc:d2:f2:9e:0c:f1:38:83:02:3f:b2:c5:2e:e2:
0b:b0:05:d8:a7:6e:e7:4a:08:7d:1e:a2:7a:97:b7:db:e9:81:
15:68:51:02:19:15:2a:0d:91:e2:e7:56:11:a2:37:ce:ab:15:
81:a1:9c:43:af:21:9b:51:1a:7a:01:5a:2c:53:20:56:43:03:
71:de:13:9c:17:ee:46:4c:7f:da:a8:1d:1d:c9:93:d9:f4:fa:
8d:b0:1d:1a:92:50:4e:5c:94:10:1f:7c:3c:a2:46:7e:4e:b6:
5e:b7:6e:42:46:88:43:c9:44:c4:61:3c:94:12:fc:cb:e3:40:
4d:ea:7b:a1:6e:3a:c9:e6:06:7f:82:54:e7:6c:fe:75:43:59:
78:f5:5e:07:55:6e:f0:de:25:a5:e5:dd:0f:3d:cc:e8:a3:0e:
49:75:25:52:70:c4:40:77:45:ae:0c:f0:5f:75:02:04:0d:ef:
3e:28:9f:f4:4c:6b:8e:ca:5b:45:99:3c:b5:4d:ec:ce:3f:1b:
db:e6:71:c0:07:25:75:37:ac:68:ff:2f:ae:e4:05:7a:11:39:
43:a1:1a:18
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJ+CIGmI0mxBP8GtD4+IpkV4/GEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5NjdjN2RkYzFlM2M5YmUxNTllMWMyNjYwMWZiNzhkNjQyNTdlNDMzYmU1
Mjg0ZjNhZmIxMzc0NDMxNWFiODcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKkTf+4q9VQCDRS8J/62ASpHoTdBXObbg04S0siT6hnd0AD8Wr7P7oXVblVN
NgFs15iZF/roIDc3ETKe41KfY3VfaeZTQNRy/OiF9cvaCFBw3bdLRBsdCB+Ry1QV
CRGruP0dbAJ4fCiuDFKpJbqwTdSCIvQoIAky/gSHtNMroAluDasQ+hmWSqySu7rD
ZOaKLpUT9RAc58cy1c7ZwxwUNpE5TiiiJX49gtSDRhOkmMx0ByS912p2Yj1zWkQY
5Dvwp8sqWowXsl5DWsPLXkAvkoKGfjm79GAIPOxQ9lZGvxSaJ9rpi2BD1wrmua3V
i0qBxkkPeJE45Pjfs7Vj9SvAolUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQLCf6E
5iZi30q1ZluZrKnTc/0R4jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NWMxN2UzOWMtNWMwYS00ZjNmLWJiOGEtZjM1YTM2MzFhMTg1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNOMA0G
CSqGSIb3DQEBCwUAA4IBAQBijTmwaYVd1TTWwRT2qMVNofE4HDGCvpVqFAN1QWfr
ofIAhe6/qddE/NLyngzxOIMCP7LFLuILsAXYp27nSgh9HqJ6l7fb6YEVaFECGRUq
DZHi51YRojfOqxWBoZxDryGbURp6AVosUyBWQwNx3hOcF+5GTH/aqB0dyZPZ9PqN
sB0aklBOXJQQH3w8okZ+TrZet25CRohDyUTEYTyUEvzL40BN6nuhbjrJ5gZ/glTn
bP51Q1l49V4HVW7w3iWl5d0PPczoow5JdSVScMRAd0WuDPBfdQIEDe8+KJ/0TGuO
yltFmTy1TezOPxvb5nHAByV1N6xo/y+u5AV6ETlDoRoY
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org