Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
File: 6b1fedd3-188f-4b29-88bb-0dce33df2464.roa (raw, json)
Hash identifier: qA0UDAdUqEtVr9+o3Eudg8PiD7e0PwCmk4MNA1JftPY=
Subject key identifier: E1:0C:FD:E2:C8:CB:02:7F:1E:C8:B6:2A:57:A8:79:88:DD:66:2D:41
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0894F462683D99D4BDEF19F1B60F7134E4D5F0D9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:94:f4:62:68:3d:99:d4:bd:ef:19:f1:b6:0f:71:34:e4:d5:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=6ef20f20ab57918be055b55791ed7284fb2415aa2a435c2fef3bdfbae881b138, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:68:11:9d:b1:cd:46:eb:4d:59:66:4d:40:
ab:75:31:ab:8a:3f:b5:84:2a:df:ba:69:02:9d:7b:
97:16:a9:24:14:71:ac:26:71:43:21:b9:ec:b3:51:
da:f2:15:38:46:23:4a:07:67:7f:38:c3:66:b3:42:
9c:32:28:7a:07:08:9f:73:b2:9f:e6:65:15:30:56:
31:56:f6:f2:c0:a8:d2:04:f0:f6:47:94:25:57:2d:
48:16:07:2e:bf:98:45:8b:6b:c7:ce:61:ab:32:14:
9f:48:65:78:91:21:03:a8:48:b3:cf:e8:ab:94:99:
a3:7c:c9:86:a5:fb:e3:20:9d:b8:2d:29:73:d4:6d:
79:03:98:a5:a9:c6:5c:a4:13:4a:b4:da:d7:61:c6:
e8:ff:48:da:97:03:c3:b6:f1:25:4e:aa:c2:2b:9c:
6c:27:a1:bc:6b:2f:da:cc:9b:d2:16:a9:5b:5c:f8:
17:c9:27:9c:e7:b7:42:54:25:35:4f:0b:eb:f1:c2:
f3:a8:3b:6a:f5:fa:e8:9d:b1:4b:56:05:66:e6:9e:
e0:ba:fe:80:c8:e1:96:3e:77:89:c1:9c:d4:ac:55:
8e:89:3a:b4:b7:5e:90:d1:8b:a8:9c:6b:33:06:fc:
c0:50:da:39:72:7e:c9:80:07:7b:ce:c6:b4:3c:d8:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:FD:E2:C8:CB:02:7F:1E:C8:B6:2A:57:A8:79:88:DD:66:2D:41
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:52:b2:48:ec:f2:94:84:fb:dd:cf:f8:6d:7e:7b:43:39:20:
c3:f4:66:04:5b:6d:7c:3a:df:21:e2:22:c3:67:f4:7d:af:e5:
9c:93:54:50:bd:14:d9:f6:18:60:70:51:5e:ba:1e:cc:c8:65:
cb:96:fe:d4:7e:12:03:88:39:e4:47:96:6a:fc:70:21:17:8e:
f4:3f:0d:22:f1:09:8b:bf:2a:7a:da:a5:e9:3a:f0:04:a0:97:
bc:9d:c0:85:eb:a9:54:1f:d0:b9:e4:61:e0:c3:9a:51:9b:f0:
eb:85:51:54:1e:65:10:0b:65:0b:d8:3d:0e:cc:b7:ac:bb:58:
2f:87:52:89:1a:e2:c6:3f:63:f2:cc:e9:b8:2f:91:35:b4:f8:
5d:68:ac:ba:05:b5:30:23:8c:e8:98:77:0c:80:00:4e:79:49:
9b:02:8f:d6:aa:83:a8:c2:b3:7f:0f:a7:b9:29:1e:4c:8b:af:
36:05:97:2c:5b:6d:1d:8a:14:2b:7d:fb:68:1c:82:80:4c:ab:
ce:27:71:ff:87:41:e9:ae:fe:14:82:df:fb:0a:2c:58:71:44:
50:15:b3:30:2b:3e:6a:c5:f0:d3:af:6d:67:c7:92:05:fc:78:
9b:b3:08:f4:5d:61:46:69:ab:38:8d:a6:f9:94:99:7c:d8:6d:
ec:0d:f7:ef
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUCJT0Ymg9mdS97xnxtg9xNOTV8NkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlZjIwZjIwYWI1NzkxOGJlMDU1YjU1NzkxZWQ3Mjg0ZmIyNDE1YWEyYTQz
NWMyZmVmM2JkZmJhZTg4MWIxMzgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJYaBGdsc1G601ZZk1Aq3Uxq4o/tYQq37ppAp17lxapJBRxrCZxQyG57LNR
2vIVOEYjSgdnfzjDZrNCnDIoegcIn3Oyn+ZlFTBWMVb28sCo0gTw9keUJVctSBYH
Lr+YRYtrx85hqzIUn0hleJEhA6hIs8/oq5SZo3zJhqX74yCduC0pc9RteQOYpanG
XKQTSrTa12HG6P9I2pcDw7bxJU6qwiucbCehvGsv2syb0hapW1z4F8knnOe3QlQl
NU8L6/HC86g7avX66J2xS1YFZuae4Lr+gMjhlj53icGc1KxVjok6tLdekNGLqJxr
Mwb8wFDaOXJ+yYAHe87GtDzYgYsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBThDP3i
yMsCfx7ItipXqHmI3WYtQTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NmIxZmVkZDMtMTg4Zi00YjI5LTg4YmItMGRjZTMzZGYyNDY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMyMA0G
CSqGSIb3DQEBCwUAA4IBAQA4UrJI7PKUhPvdz/htfntDOSDD9GYEW218Ot8h4iLD
Z/R9r+Wck1RQvRTZ9hhgcFFeuh7MyGXLlv7UfhIDiDnkR5Zq/HAhF470Pw0i8QmL
vyp62qXpOvAEoJe8ncCF66lUH9C55GHgw5pRm/DrhVFUHmUQC2UL2D0OzLesu1gv
h1KJGuLGP2PyzOm4L5E1tPhdaKy6BbUwI4zomHcMgABOeUmbAo/WqoOowrN/D6e5
KR5Mi682BZcsW20dihQrfftoHIKATKvOJ3H/h0Hprv4Ugt/7CixYcURQFbMwKz5q
xfDTr21nx5IF/Hibswj0XWFGaas4jab5lJl82G3sDffv
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org