Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/621fb82e-99a7-4d33-a646-877fafc69f46.roa
File: 621fb82e-99a7-4d33-a646-877fafc69f46.roa (raw, json)
Hash identifier: /LRj7i8GuD+wQ5XFKsZ6Rc0cc06ZIRFSGc2XTWuqi/w=
Subject key identifier: 0D:E2:DB:AB:87:2D:D6:ED:76:BE:9F:24:F0:B0:59:B4:0C:CF:67:08
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 28C0194D25ABC86934164B7A84925851B927FDE5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/621fb82e-99a7-4d33-a646-877fafc69f46.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c0:19:4d:25:ab:c8:69:34:16:4b:7a:84:92:58:51:b9:27:fd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=9dc27df976443fbf934cde5d1c9b0e675a597a886689d0184209b9a0f2bf978a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:3a:3b:93:a7:2e:6f:bb:df:b4:e8:05:e8:
41:84:b8:58:8a:40:a7:0e:ed:51:a5:b2:c2:f6:59:
85:37:75:83:a7:fe:85:87:c9:d9:e6:37:a0:42:6c:
74:e4:90:88:23:71:5d:06:57:95:d4:93:c2:19:60:
f1:01:f9:bc:1a:27:f9:19:8a:43:62:4f:86:da:ea:
1a:a1:70:6e:4c:bd:83:81:cc:ae:3c:ea:8a:9f:08:
e1:10:9c:48:44:bf:92:c0:b8:24:38:cd:91:40:19:
91:b5:f6:c1:d0:0c:77:06:8c:1c:1c:40:4c:e1:2b:
f5:9c:e5:e1:7c:62:66:81:a2:2e:60:ae:52:f9:73:
90:79:a6:71:7a:30:9c:8d:13:bd:e6:87:3e:fa:62:
0f:89:39:70:c8:a1:00:02:d5:b0:30:ed:f7:f0:e5:
f0:7a:56:c5:f9:dc:c2:01:c3:ad:d9:67:fd:9d:e1:
e9:39:b7:8f:f2:b8:14:e3:af:17:dd:30:69:6e:84:
55:e1:9e:50:dd:c1:06:ac:06:ec:e8:e8:dd:3b:de:
6e:72:ac:da:fa:40:9c:1b:39:a0:72:4b:90:66:95:
17:b1:d8:72:a4:8e:36:2e:a2:60:9f:06:5d:a7:58:
46:50:39:11:10:64:49:ff:54:62:82:f0:fd:76:cc:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:DB:AB:87:2D:D6:ED:76:BE:9F:24:F0:B0:59:B4:0C:CF:67:08
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/621fb82e-99a7-4d33-a646-877fafc69f46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6f:92:b5:fe:fa:2f:b8:35:90:84:69:84:16:0e:6f:eb:01:48:
8d:38:b8:88:0b:d3:e4:68:d4:b0:1e:37:fe:b2:bc:2a:f6:57:
2b:24:f6:1b:c2:13:0d:e1:a8:8d:fa:00:c7:c8:4e:69:f1:d3:
3c:f8:b5:fe:7a:2a:d5:cf:b4:bc:c2:5c:0c:3a:75:9c:47:e9:
c3:b6:3b:c4:9c:38:8e:b0:4e:64:d4:04:6c:f3:b2:7d:82:17:
ec:73:d0:01:5b:60:51:a3:62:96:d7:e1:97:ab:1a:e7:1a:ca:
59:52:6f:6e:b5:05:a4:b9:88:36:b3:b8:fa:8a:a4:c0:17:c0:
1b:0a:34:8e:8c:f5:33:5d:88:f5:70:91:2f:2a:32:c1:58:5e:
13:43:a5:f3:18:de:ba:e1:35:07:9d:8d:d3:4e:4c:a2:e7:7f:
3f:cf:b2:12:55:44:fe:4b:84:08:31:e7:79:88:bb:1b:37:f0:
c5:b2:5b:0a:7c:0f:2e:16:ed:73:f9:41:97:d6:57:8e:ad:5e:
89:0e:80:24:6c:d7:d9:cd:41:2d:6f:e8:b9:8f:cf:be:0a:1e:
63:e4:4e:b5:e0:9c:d9:02:25:8d:74:c1:79:fc:68:ba:fd:65:
32:b8:f0:c4:9c:8f:dc:80:e0:ba:c7:5a:f6:fb:5d:8d:95:84:
ce:19:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org