Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6ae34828-513c-4833-b505-1b83f25fa93e.roa
File: 6ae34828-513c-4833-b505-1b83f25fa93e.roa (raw, json)
Hash identifier: pItXvlQuHPOG09Hhgd+4YmGl/MScOH1Uj1XiSAGxXGg=
Subject key identifier: D3:A7:69:BA:FC:E5:03:17:15:AF:3B:04:33:87:8C:53:BE:52:82:96
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 73F126442CC9EF934E9F3AE15AB6DBB821411D86
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6ae34828-513c-4833-b505-1b83f25fa93e.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f1:26:44:2c:c9:ef:93:4e:9f:3a:e1:5a:b6:db:b8:21:41:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=5bfe0f498e29c2ede5a2dd00785d36138f69ce07121d0c03f874b17a64f33173, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:bf:b8:f1:ff:c8:2d:08:5c:ed:5c:ab:6f:
fc:92:54:a5:33:0e:19:4f:12:37:65:bc:7b:bf:55:
18:86:0f:f4:6e:80:3e:a9:65:38:45:22:25:20:2a:
81:62:ad:7c:31:e9:b8:95:be:5d:c4:81:99:f6:0c:
ef:46:54:60:ff:eb:f7:a3:f9:cc:8e:45:b4:f7:ef:
e2:3d:1e:f0:55:40:fc:97:7b:8f:26:31:99:e8:e6:
dc:19:f7:65:52:10:fc:d4:14:97:4d:3b:ee:54:2a:
a4:a4:86:44:df:91:b4:d3:5f:dc:67:65:66:60:47:
4b:5b:05:f9:9c:eb:b5:e7:15:b4:bb:ca:a5:0d:f8:
81:77:f9:80:0e:ff:0d:24:62:71:d5:85:02:b3:82:
45:ff:08:ab:cb:05:1a:a1:ed:dc:85:1b:88:7e:74:
ae:2e:d1:60:52:6d:ee:37:9a:7d:dd:4d:b5:47:83:
02:60:bb:5a:91:55:cd:f9:0c:ac:14:31:70:40:c2:
c5:bf:8e:f4:79:d9:36:e0:ae:0d:9d:50:f9:c2:e7:
b0:f8:5b:ea:05:38:af:4f:98:0f:8c:13:e4:d2:ad:
76:04:db:69:6b:f0:b2:86:92:66:a0:2d:14:31:bb:
8f:48:10:b2:8f:46:fe:58:26:d4:34:89:f2:75:09:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:69:BA:FC:E5:03:17:15:AF:3B:04:33:87:8C:53:BE:52:82:96
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6ae34828-513c-4833-b505-1b83f25fa93e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:8d:8a:76:ae:da:46:f2:28:59:db:d3:7d:65:a3:c0:dd:8b:
67:9e:9a:bb:51:c6:84:e7:7f:a2:38:89:90:63:a4:99:59:44:
ed:08:4a:2b:57:12:a1:0e:20:82:a9:d4:4d:40:81:48:f3:f0:
23:72:cc:e0:8c:ff:d6:e4:e3:88:1c:59:30:5b:5e:d6:b0:23:
70:7b:ab:30:e7:b2:a5:cd:a0:fa:4b:da:28:ec:67:2b:20:90:
7e:71:cd:01:26:6f:79:97:4c:7b:36:11:48:d0:7d:1d:90:32:
68:a9:0f:9f:cf:c9:d1:65:64:8f:84:03:f7:6d:4f:76:9e:ae:
0e:07:a9:46:20:e7:5c:1e:55:37:8e:3e:a4:04:a0:42:dc:36:
d8:3f:e3:95:f9:e0:4d:37:a9:16:50:de:9f:a1:a0:ce:32:bf:
a7:8c:b1:7c:3c:0b:30:b9:d8:92:86:48:eb:c0:37:ed:b0:45:
27:e1:cc:39:7d:fa:cb:c5:53:a9:70:d1:ee:c1:e0:39:82:cc:
37:78:ca:23:5d:10:9e:34:8d:76:db:95:3b:b3:5f:4c:c5:e1:
3f:fc:cf:c4:15:b0:ff:a5:62:bd:ad:1c:93:03:ab:a5:1c:37:
cf:06:f1:b3:b1:f4:b4:a5:1d:7d:2f:dc:72:7d:7d:f7:f2:71:
2b:60:1f:52
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUc/EmRCzJ75NOnzrhWrbbuCFBHYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjYwMDAwMDBaFw0yNDA1MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDViZmUwZjQ5OGUyOWMyZWRlNWEyZGQwMDc4NWQzNjEzOGY2OWNlMDcxMjFk
MGMwM2Y4NzRiMTdhNjRmMzMxNzMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvvv7jx/8gtCFztXKtv/JJUpTMOGU8SN2W8e79VGIYP9G6APqllOEUiJSAq
gWKtfDHpuJW+XcSBmfYM70ZUYP/r96P5zI5FtPfv4j0e8FVA/Jd7jyYxmejm3Bn3
ZVIQ/NQUl0077lQqpKSGRN+RtNNf3GdlZmBHS1sF+ZzrtecVtLvKpQ34gXf5gA7/
DSRicdWFArOCRf8Iq8sFGqHt3IUbiH50ri7RYFJt7jeafd1NtUeDAmC7WpFVzfkM
rBQxcEDCxb+O9HnZNuCuDZ1Q+cLnsPhb6gU4r0+YD4wT5NKtdgTbaWvwsoaSZqAt
FDG7j0gQso9G/lgm1DSJ8nUJAKkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTTp2m6
/OUDFxWvOwQzh4xTvlKCljAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NmFlMzQ4MjgtNTEzYy00ODMzLWI1MDUtMWI4M2YyNWZhOTNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlVMA0G
CSqGSIb3DQEBCwUAA4IBAQBLjYp2rtpG8ihZ29N9ZaPA3Ytnnpq7UcaE53+iOImQ
Y6SZWUTtCEorVxKhDiCCqdRNQIFI8/AjcszgjP/W5OOIHFkwW17WsCNwe6sw57Kl
zaD6S9oo7GcrIJB+cc0BJm95l0x7NhFI0H0dkDJoqQ+fz8nRZWSPhAP3bU92nq4O
B6lGIOdcHlU3jj6kBKBC3DbYP+OV+eBNN6kWUN6foaDOMr+njLF8PAswudiShkjr
wDftsEUn4cw5ffrLxVOpcNHuweA5gsw3eMojXRCeNI1225U7s19MxeE//M/EFbD/
pWK9rRyTA6ulHDfPBvGzsfS0pR19L9xyfX338nErYB9S
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org