Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
File: 5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa (raw, json)
Hash identifier: j8dRZrjmjhX0xPnpxQ+nzcz4Qnc3soQU1k+pSHNqQIw=
Subject key identifier: 47:91:4A:27:B4:B9:49:18:0A:6F:3C:81:1B:7A:93:C9:A0:88:BF:DC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 40A564706C2345288B5C1BF2DA45B3C8AF5FD29C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 83.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a5:64:70:6c:23:45:28:8b:5c:1b:f2:da:45:b3:c8:af:5f:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=f8d8945fe2dc79424f5393c1ec50573e632d33a425de14ac1ad87c1db4ff9f56, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:80:39:93:fe:b7:55:59:48:78:73:b1:27:0b:
ec:60:94:2e:d2:45:af:69:2d:27:8b:23:c7:58:02:
59:ad:ce:56:57:dd:94:52:0b:a9:ba:4d:76:65:9f:
83:cf:db:46:06:96:64:70:61:e8:95:ec:3f:8c:e4:
e0:e5:8c:58:bf:6c:97:73:4a:0e:39:07:83:be:fb:
ef:a3:19:f9:be:74:af:af:fa:c1:63:d2:27:49:03:
3d:92:b8:57:b5:9e:1a:ca:04:67:25:11:a5:0a:13:
a0:26:23:18:22:7a:84:23:f1:4a:b6:77:76:e6:42:
d3:01:43:71:f7:4e:cd:75:48:63:9f:b7:41:b2:3b:
1b:2f:c8:56:63:6f:57:26:8c:39:38:ab:2c:1f:f4:
38:3c:be:7f:20:53:9f:7b:1f:b9:e5:fc:7b:5c:81:
af:67:17:7b:8d:5c:3a:a1:44:15:ff:b7:a4:8d:b5:
8d:6b:8a:ee:4f:27:3f:86:d6:8e:6a:77:83:3d:b7:
7c:1d:f8:73:d0:b5:06:e9:2f:f3:43:17:e0:68:0a:
91:15:5e:c2:36:5f:17:5c:66:0e:4f:36:ae:a6:88:
ef:17:9b:31:be:cd:d5:c3:32:0a:ca:8a:7e:18:b2:
9c:7a:c1:2c:02:23:18:d6:5d:df:87:e8:fe:0d:ab:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:4A:27:B4:B9:49:18:0A:6F:3C:81:1B:7A:93:C9:A0:88:BF:DC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:1e:eb:02:e9:10:37:09:02:5c:5b:26:56:d1:81:2f:76:b9:
5d:eb:ab:0a:f6:6c:75:76:ab:05:9f:5e:a1:6b:44:3d:a8:b9:
e1:66:19:6f:a6:aa:d8:fc:00:cc:52:d3:34:aa:e1:c3:5b:db:
94:ac:5c:d7:84:82:39:91:8d:c8:68:64:32:9e:fb:f4:7f:ec:
a0:f1:e2:d8:a3:1f:3f:f3:2d:44:6c:c2:ff:0a:48:4b:68:61:
3a:8b:b5:c2:2d:c1:ba:82:95:c7:6c:ff:3a:49:7d:5a:18:e3:
2f:84:5c:03:b7:36:08:a7:73:f2:e7:4f:21:83:4e:c1:f0:f7:
a6:b4:eb:a7:91:85:cb:f4:ba:47:2e:26:32:22:cb:77:06:b8:
d3:5f:9d:ae:10:a8:e3:5a:3d:7e:81:b4:71:fe:0f:42:8b:4c:
74:a8:73:27:62:bd:cf:b7:37:7e:64:d6:22:ba:e3:58:d1:19:
96:57:58:b7:8e:bf:93:45:c0:90:57:64:41:96:42:1e:2e:ce:
02:8b:b2:46:34:19:20:29:ce:45:d2:87:f6:12:03:3c:81:13:
52:d7:7e:b2:d1:9b:a8:c3:15:06:84:30:f5:8d:e4:54:27:a1:
e5:ef:09:7c:b9:2d:e0:1c:9d:50:dc:82:83:99:6b:49:8d:09:
ff:75:fc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:40 2024 by rpki-client on console-fra.rpki-client.org