Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
File: 73023bb1-a443-4047-a9f2-64a1905f67ac.roa (raw, json)
Hash identifier: RSqoBFEm0/zod+Sq89hGdO4I1BxkpspP4qFsg6HcqTg=
Subject key identifier: 2F:66:B7:32:BC:91:5B:0C:1B:A6:91:AF:62:07:C3:9B:56:F7:91:BA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7E1D7842EF256EC5C70B3ECC3892478115AA0A16
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1d:78:42:ef:25:6e:c5:c7:0b:3e:cc:38:92:47:81:15:aa:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=f166dd17ad6d0e796b958c5bd0b1fbf68a56817fde2f066205e439a570297cb7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:08:0e:d0:c0:ba:38:50:29:fa:f1:04:09:
fa:7a:e9:14:33:45:26:73:94:28:59:ee:4d:20:ec:
92:ee:5a:6d:f2:3a:d5:8d:79:da:14:86:67:fb:c6:
2d:71:35:e1:5c:d9:e7:dd:e9:10:47:b6:ac:0d:0e:
34:d9:e9:66:6b:ba:45:6e:f0:1f:3d:8a:79:ad:c3:
be:2d:12:69:d3:24:6a:7c:24:b7:f1:ae:01:55:0e:
e9:c2:2a:7b:34:ab:22:9f:41:64:75:56:2c:0a:ff:
e2:21:4e:99:85:2b:eb:53:0e:84:58:c2:82:77:f2:
b4:26:6b:ec:ca:3b:bd:cd:b5:6d:e3:b3:6e:77:56:
c9:3b:55:d9:59:48:70:87:d2:4b:a2:c4:7a:be:1c:
7d:46:ec:f3:07:f1:c1:b9:e2:e1:6d:72:b3:cc:7a:
f6:47:75:70:95:b0:43:a3:b5:b5:7a:3d:42:63:5c:
62:be:a0:16:ee:6c:78:37:e2:ef:15:dc:7b:a0:cd:
86:c9:67:aa:e2:63:74:1e:8b:86:75:bb:03:e9:45:
a1:39:d9:0e:30:d1:14:15:12:ab:9f:83:0b:f0:e6:
d3:8e:b8:8e:1d:7c:39:fd:64:5c:7d:48:b4:ce:4e:
76:08:83:b7:da:db:cf:a6:2f:ec:8b:e9:e0:f7:6a:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:B7:32:BC:91:5B:0C:1B:A6:91:AF:62:07:C3:9B:56:F7:91:BA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:cd:c2:43:a0:07:69:cd:47:a2:2b:ea:26:22:e3:00:6e:33:
d3:3a:ec:27:c8:9a:79:07:3e:92:fa:9a:18:b1:45:b5:5f:1c:
b6:87:7c:80:d0:e1:9e:61:28:38:ef:f8:9b:be:15:87:80:b6:
c8:5a:4a:3f:98:ee:dd:c5:4d:dd:21:32:cd:11:26:18:5c:16:
f8:32:be:d1:41:c5:43:e9:e0:54:82:35:b3:6b:30:2a:8e:b6:
1f:88:96:b9:14:40:80:5d:36:05:fa:db:c1:5b:9a:3c:9b:fe:
f7:11:e1:f4:79:73:ae:18:07:8a:7c:63:9c:52:e2:b9:24:3a:
7a:73:01:7f:90:dd:a1:18:53:f7:00:8c:7b:b9:05:fe:cb:91:
b7:10:50:3d:a8:66:2e:03:2c:8a:e4:79:56:62:7d:58:ef:a2:
14:cf:4b:c6:52:f3:78:76:5a:af:80:36:e6:11:63:84:1d:4c:
da:78:c9:17:88:7d:55:91:b1:22:7a:89:e6:7b:99:70:29:27:
09:c4:e2:4e:c1:0d:08:2e:e6:62:0b:1e:f4:f0:98:0a:49:2d:
e7:6b:72:31:fd:b7:87:f9:92:eb:24:46:67:96:56:86:a1:68:
36:53:41:cc:73:f9:42:0f:ae:5a:bb:7a:cc:3c:1e:ae:f3:fa:
f8:11:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org