Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
File: 695716ab-c4db-435d-95fe-4143be62030e.roa (raw, json)
Hash identifier: 2W2p+ljCjtUAm8SBarbHIs7FjhgzCHmXLHBiS28t5Zs=
Subject key identifier: 3B:29:DE:73:00:D1:87:05:78:93:7F:0A:07:89:B0:E5:DE:13:4F:3B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E10E792ED561F85F713BCDBA7F7634A1BBB3461
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
Signing time: Tue 28 May 2024 00:00:00 +0000
ROA not before: Tue 28 May 2024 00:00:00 +0000
ROA not after: Tue 02 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:10:e7:92:ed:56:1f:85:f7:13:bc:db:a7:f7:63:4a:1b:bb:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 28 00:00:00 2024 GMT
Not After : Jul 2 23:59:59 2024 GMT
Subject: serialNumber=135b141b20fd84a4d19a001165aa8bc62bf8f8f57086f16a595bcd7b900aef26, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:11:a3:0f:dc:f8:47:31:9d:d8:1e:4c:e2:
99:57:e7:85:f6:4b:69:60:5a:be:34:fe:61:3f:9a:
2f:56:7b:e4:a7:c8:03:97:3b:ed:8c:a1:62:c3:39:
85:6a:f7:c5:8b:52:6c:d8:31:d5:90:1d:63:c1:1a:
f5:08:a4:6d:8a:5a:e9:de:c0:95:f2:90:2b:92:2d:
aa:6f:0f:83:fb:4c:76:b1:93:22:5f:d7:12:42:f7:
a9:b9:c5:5f:65:f6:28:66:16:92:88:58:76:48:c7:
14:fe:e5:85:09:f0:75:fb:8b:16:6e:8d:02:60:b8:
00:f7:e1:2f:d2:bc:32:29:f0:e8:f4:ef:d8:ac:a8:
6a:8c:06:6b:ab:7b:0d:8c:e2:6c:6e:f5:1f:fb:1c:
13:b3:3d:4a:28:74:48:66:b0:25:5f:d7:93:da:1f:
c4:b1:85:38:49:4f:09:4d:e1:14:55:5b:16:a5:5c:
30:92:93:18:a7:1d:4e:58:af:91:d5:45:81:1f:9d:
dc:d7:44:93:d5:b9:65:d7:4f:a3:97:56:bf:38:cd:
85:3d:36:32:36:3e:b1:92:cb:25:8d:a0:0e:fc:31:
0f:cf:09:58:e0:45:24:e5:ba:57:1a:46:65:59:84:
cf:1d:34:d6:55:b1:06:2a:16:0a:26:16:58:3c:6a:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:DE:73:00:D1:87:05:78:93:7F:0A:07:89:B0:E5:DE:13:4F:3B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:a3:5f:86:23:34:21:71:e4:7b:5b:d1:17:40:f4:5d:60:51:
d7:7b:d0:88:ee:8a:01:76:fc:61:13:3a:f1:ad:1b:af:68:99:
4b:dc:6e:f8:78:c1:5c:ca:b9:b8:84:e0:a6:95:8e:74:78:a9:
e7:ba:9d:4c:0f:29:d0:1e:d2:20:da:ca:eb:39:54:dd:01:55:
a2:08:c2:d1:bf:44:e8:f1:ed:1e:96:cd:fb:0b:7f:1b:9e:94:
cb:0f:2d:37:19:22:29:cc:0e:68:bd:cc:4d:e8:1a:7d:6a:9c:
be:83:80:e2:60:0f:1e:05:3a:9b:ce:1c:72:b0:2c:37:5a:9f:
63:15:d9:3b:48:12:b3:ed:17:ce:a3:13:57:34:fd:9a:5a:af:
07:ec:b5:a4:81:31:77:92:70:75:58:f2:e0:a6:c4:0f:b6:93:
2b:29:56:d5:ac:eb:5f:fa:71:17:79:3e:c7:45:f9:bb:3a:6b:
53:69:6b:09:59:80:0a:9f:b2:e1:90:29:06:e1:cf:d1:2c:ad:
d1:e7:6e:48:f5:94:ef:c0:0f:ca:b8:4c:bb:61:7c:29:76:86:
4e:42:20:13:13:e4:4a:58:07:4a:cd:9d:ce:d2:72:c4:c5:d9:
2a:c0:35:39:0a:56:3c:d1:c1:c8:a0:84:bb:35:b4:dd:50:0f:
94:c7:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org