Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/645140ca-ded9-48d5-91a3-42aec1941dcf.roa
File: 645140ca-ded9-48d5-91a3-42aec1941dcf.roa (raw, json)
Hash identifier: +pCZpwqQJA/jmzpYiiq8SYpYJiix/Yo6uVl2patifuk=
Subject key identifier: 85:AD:5F:60:A0:F0:8E:55:2F:1D:B4:D5:FB:49:2F:0B:2F:AD:65:15
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E55592779DDF612AD75816FA961641D49AE549B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/645140ca-ded9-48d5-91a3-42aec1941dcf.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:55:59:27:79:dd:f6:12:ad:75:81:6f:a9:61:64:1d:49:ae:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=e9492052a9fc8c16f4e01b00359aa8cbfadd1eefac21465a3c1ccb11c08036fc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:04:99:60:c3:e6:3b:96:d5:f7:52:bf:ea:
41:69:cc:42:69:1c:19:86:38:35:1f:43:df:a5:de:
f2:32:81:29:28:61:93:70:df:e9:5e:96:95:74:17:
23:cf:5a:38:28:f1:6e:9b:b8:89:25:66:55:5e:98:
6f:5d:92:aa:85:0d:01:c7:c8:55:85:7a:56:11:a3:
c4:7e:d3:07:55:35:7b:75:8b:9d:fd:59:92:a4:22:
10:d2:eb:c8:2c:3e:b0:4b:a8:82:36:0d:4e:5f:89:
54:be:51:38:68:9b:40:0b:fb:50:fc:70:9e:62:52:
dd:f6:dd:54:3f:cd:4e:84:f5:ed:7a:58:d3:d5:d0:
24:a4:5a:7d:aa:c4:1b:ac:a0:10:12:49:1c:4d:cf:
9a:21:36:fe:d4:02:07:6c:05:89:9a:58:1e:c1:7d:
08:43:8c:ff:84:5a:7f:3e:b4:af:94:06:9d:f4:1f:
01:b5:fd:65:7f:31:c1:ac:8e:db:c5:c3:a3:7f:69:
f6:24:96:16:aa:32:26:7b:53:ed:d6:64:66:58:7b:
97:aa:d1:08:18:f9:e4:46:b4:51:5c:76:47:98:8e:
19:9a:1a:ce:32:68:32:5a:6b:33:de:c0:3c:1a:b9:
6f:27:00:79:c7:a4:5a:07:97:4e:c0:fe:f5:1b:fc:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:5F:60:A0:F0:8E:55:2F:1D:B4:D5:FB:49:2F:0B:2F:AD:65:15
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/645140ca-ded9-48d5-91a3-42aec1941dcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
16:e4:97:29:e1:27:f4:77:fc:93:5f:87:a4:9c:31:97:41:87:
34:76:36:93:40:87:51:87:52:e9:7a:7c:c5:a2:ec:9b:e9:87:
f8:89:5e:77:83:74:8b:aa:8d:35:7e:1f:67:3c:81:46:06:44:
34:ea:26:23:0f:17:bd:dc:be:5b:89:d0:0b:bc:84:00:29:1e:
cb:89:3b:0c:d7:fd:d2:95:fa:20:78:f9:51:0e:98:37:47:63:
b1:62:3c:ce:5f:40:9d:ec:d7:8f:59:63:b0:bf:8c:9f:83:d7:
25:91:4b:66:19:a1:f5:24:bb:2d:d4:31:af:1b:4c:ef:44:32:
97:54:7a:1d:dd:cc:46:15:15:d5:01:71:c4:aa:5b:37:2e:7a:
51:e8:e5:f4:05:33:00:52:09:19:6f:27:9d:11:8b:d5:9b:60:
34:01:1f:cf:0e:f7:34:90:63:ea:e3:1f:a6:89:4b:75:e8:7c:
b5:8d:07:1d:7f:cc:5b:0f:39:a4:ca:59:f8:f1:64:64:a0:7d:
b3:34:e9:94:70:c8:0f:bd:1d:ba:cb:06:81:59:80:30:e2:a0:
ec:6f:64:f9:9b:f4:66:46:82:be:cb:00:7b:64:c1:07:a8:84:
ce:c3:7c:3a:2e:01:de:80:32:e7:b7:3d:5d:10:7a:a4:5b:f2:
64:3b:4e:cb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUHlVZJ3nd9hKtdYFvqWFkHUmuVJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA2MTAwMDAwMDBaFw0yNDA3MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGU5NDkyMDUyYTlmYzhjMTZmNGUwMWIwMDM1OWFhOGNiZmFkZDFlZWZhYzIx
NDY1YTNjMWNjYjExYzA4MDM2ZmMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMk7BJlgw+Y7ltX3Ur/qQWnMQmkcGYY4NR9D36Xe8jKBKShhk3Df6V6WlXQX
I89aOCjxbpu4iSVmVV6Yb12SqoUNAcfIVYV6VhGjxH7TB1U1e3WLnf1ZkqQiENLr
yCw+sEuogjYNTl+JVL5ROGibQAv7UPxwnmJS3fbdVD/NToT17XpY09XQJKRafarE
G6ygEBJJHE3PmiE2/tQCB2wFiZpYHsF9CEOM/4Rafz60r5QGnfQfAbX9ZX8xwayO
28XDo39p9iSWFqoyJntT7dZkZlh7l6rRCBj55Ea0UVx2R5iOGZoazjJoMlprM97A
PBq5bycAecekWgeXTsD+9Rv8DmUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSFrV9g
oPCOVS8dtNX7SS8LL61lFTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NjQ1MTQwY2EtZGVkOS00OGQ1LTkxYTMtNDJhZWMxOTQxZGNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATP0MA0G
CSqGSIb3DQEBCwUAA4IBAQAW5Jcp4Sf0d/yTX4eknDGXQYc0djaTQIdRh1LpenzF
ouyb6Yf4iV53g3SLqo01fh9nPIFGBkQ06iYjDxe93L5bidALvIQAKR7LiTsM1/3S
lfogePlRDpg3R2OxYjzOX0Cd7NePWWOwv4yfg9clkUtmGaH1JLst1DGvG0zvRDKX
VHod3cxGFRXVAXHEqls3LnpR6OX0BTMAUgkZbyedEYvVm2A0AR/PDvc0kGPq4x+m
iUt16Hy1jQcdf8xbDzmkyln48WRkoH2zNOmUcMgPvR26ywaBWYAw4qDsb2T5m/Rm
RoK+ywB7ZMEHqITOw3w6LgHegDLntz1dEHqkW/JkO07L
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org