Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6f2042b6-daa0-4132-a2fa-da355c9bd0c8.roa
File: 6f2042b6-daa0-4132-a2fa-da355c9bd0c8.roa (raw, json)
Hash identifier: meDPeSwaxDjO6XEv6oLQ7k59QKzSjBg8AzuGEeycZbk=
Subject key identifier: 0A:39:A6:EB:8D:6F:89:38:31:B5:CF:EE:FB:64:6A:53:18:35:C7:74
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 365864E16EC640F3CF7045241C2446DA051B257F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6f2042b6-daa0-4132-a2fa-da355c9bd0c8.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:58:64:e1:6e:c6:40:f3:cf:70:45:24:1c:24:46:da:05:1b:25:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=171e1655eaf08d1a34a36fe4a4a84a0de905e1ff38b40fe9f52b69b31404db62, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:1b:fb:f4:68:df:d6:02:40:71:7c:84:8f:
72:9f:e3:b8:87:e9:2b:50:1f:cb:5d:6b:ac:f1:9e:
c3:8f:70:0f:82:6e:29:6a:04:e1:17:22:ca:6f:0f:
8e:73:a3:c9:cf:25:83:82:bc:ec:cd:01:d9:51:f0:
2d:44:7c:2f:25:c3:b4:f7:35:97:5a:20:1c:a0:f4:
c1:1b:9d:81:9c:df:ee:fc:ae:8c:72:71:35:02:a7:
f6:65:f7:75:4f:aa:b2:17:99:fa:5c:fa:be:ae:99:
4d:c4:44:cf:cb:8f:eb:27:c5:e6:7e:f7:d5:13:ce:
c8:cc:29:d1:ae:33:90:7d:46:65:ca:bc:46:10:28:
35:a1:9b:3d:55:00:55:83:6f:ba:d2:01:bd:27:d8:
9e:74:53:fb:e4:53:19:66:1e:f3:bf:92:fd:c3:00:
f6:7a:76:de:13:f5:37:39:2b:3b:9d:e5:80:c6:0c:
21:58:00:62:f5:bd:74:00:35:d5:ef:76:1f:64:3b:
af:ae:25:8a:8a:c7:58:02:b3:e8:6a:f0:f3:b0:48:
b5:44:ee:3c:7f:a4:b1:65:5c:fd:46:4c:f0:f7:95:
f0:eb:1b:e7:97:78:cd:fe:fa:dd:b0:63:4b:26:7f:
ba:bf:05:25:8c:98:5e:08:d1:a9:84:51:90:36:ca:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:A6:EB:8D:6F:89:38:31:B5:CF:EE:FB:64:6A:53:18:35:C7:74
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6f2042b6-daa0-4132-a2fa-da355c9bd0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:26:94:e8:6c:6b:1a:bf:f2:63:e2:8a:99:1b:05:78:ca:94:
a3:d1:fe:0e:13:5d:66:f2:85:9c:04:8a:37:13:bf:5d:a1:86:
f0:af:36:fb:72:c6:28:bc:64:c8:d3:6e:77:40:e8:a3:3e:f0:
7f:9a:8f:a7:b3:47:61:5f:28:ca:3b:41:3d:54:73:10:c6:7f:
22:61:ef:cd:72:d6:1d:26:ee:93:51:71:c9:ee:39:14:6f:ae:
3b:d8:96:c2:e5:d8:31:61:24:09:f1:ce:08:96:ae:77:35:40:
e8:d3:5e:61:6e:7f:f1:3d:0a:a1:a4:9a:65:23:f6:20:65:2a:
ee:c9:01:25:9d:c6:7f:d9:32:e3:ab:24:5d:70:17:63:49:57:
cd:9a:57:49:25:d0:6a:00:17:ab:a5:fc:5a:3c:a5:4c:6e:e8:
d1:df:5c:32:3c:e7:b3:a4:1e:e6:13:92:46:82:97:5a:a0:c8:
52:2f:c1:95:ea:44:d0:22:bf:40:47:57:e3:01:3a:28:e1:38:
88:b6:11:83:fc:9e:9c:65:56:dc:01:5b:d1:43:ab:1f:93:a8:
c6:57:96:1d:d1:c2:ee:e4:36:f5:55:d6:c5:67:ac:5c:33:15:
df:45:b2:93:d0:51:98:6b:b7:74:5e:8e:13:9e:17:72:ac:90:
43:a1:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org