Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7400bc89-8ab3-42f2-b8fe-727fbb92dec4.roa
File: 7400bc89-8ab3-42f2-b8fe-727fbb92dec4.roa (raw, json)
Hash identifier: tgc+Ia+WxxbTFRCaD4ve5yK4BXHJLsqIdXBkt1e8LVQ=
Subject key identifier: E5:D1:94:10:71:B4:B6:ED:6D:37:0E:1E:51:53:83:47:B8:04:DE:7C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 19E5EB06ECB4D2083B2AD87C287BEA2F47C3D332
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7400bc89-8ab3-42f2-b8fe-727fbb92dec4.roa
Signing time: Fri 03 May 2024 00:00:00 +0000
ROA not before: Fri 03 May 2024 00:00:00 +0000
ROA not after: Fri 07 Jun 2024 23:59:59 +0000
asID: 14618
IP address blocks: 83.118.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e5:eb:06:ec:b4:d2:08:3b:2a:d8:7c:28:7b:ea:2f:47:c3:d3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 3 00:00:00 2024 GMT
Not After : Jun 7 23:59:59 2024 GMT
Subject: serialNumber=7990f2cb4048d65d74406a8eb1172c3ccc1c53e37491f990758a3577ec60d6a1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:15:dc:27:d5:a1:19:c5:26:00:e7:7f:b0:
35:42:07:4d:91:21:b4:50:a2:05:bb:d2:a8:0e:f3:
30:37:9a:be:b5:1b:83:50:c2:62:9b:88:ee:f0:10:
81:1d:06:38:78:8b:68:f1:0a:81:09:64:84:29:d0:
e4:85:aa:d9:c8:15:8c:de:81:8f:77:80:6a:b2:ab:
dc:d2:ec:59:20:9b:ae:1d:00:d6:39:38:0a:29:bb:
6f:29:58:df:5f:23:cd:be:ae:9a:0a:93:07:49:c5:
64:8a:71:81:43:6f:31:dc:00:79:c2:a1:9a:4d:66:
45:b3:fa:3f:63:ce:fb:9e:9e:90:95:1c:74:51:c1:
81:9f:42:47:a6:3c:fd:f8:6d:99:3d:c4:af:69:ce:
27:00:b6:1b:12:4c:ba:8e:fe:8e:6e:cb:1f:a3:25:
37:21:3a:af:f4:39:dc:3b:77:e2:04:1b:68:44:ed:
61:1a:e5:4f:0b:90:67:64:d4:d9:33:0a:8a:d8:ad:
23:0a:2d:c2:75:18:69:ee:b4:05:91:39:4e:55:27:
64:63:b6:f6:d1:9f:c2:dc:02:28:af:3f:f6:d5:f2:
1b:49:14:76:5b:85:e5:44:63:67:49:81:d1:40:68:
ed:3f:c3:94:11:aa:1b:a2:15:0a:d0:fb:59:ee:6b:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:94:10:71:B4:B6:ED:6D:37:0E:1E:51:53:83:47:B8:04:DE:7C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7400bc89-8ab3-42f2-b8fe-727fbb92dec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
af:38:5b:94:29:b5:d5:6d:03:61:9f:06:5a:bb:36:67:3f:13:
b4:81:86:af:83:bf:2d:9d:b1:72:ea:c7:91:70:b3:65:0e:a7:
2c:78:29:e0:9c:0f:fc:54:c8:fb:21:fc:bd:a8:c4:1b:19:b8:
f5:c8:d5:1b:62:2e:39:b1:83:d4:ee:63:64:f2:f5:d1:70:4c:
3e:bc:67:00:50:fd:f2:10:d1:08:1f:b4:c2:c0:55:9c:2c:d8:
a4:ec:dd:07:d8:40:59:b2:ef:85:41:bf:7c:ac:ca:30:65:0a:
4d:5f:2e:d2:81:e3:70:bf:ab:34:79:64:61:d0:e7:ae:cb:ad:
ab:15:81:cc:b3:1d:c3:e7:eb:fc:ff:59:bd:83:0c:c5:8e:f6:
8a:17:dc:75:a9:b3:15:a2:af:d4:d9:21:e3:95:67:85:46:d3:
b8:59:a9:8a:70:32:58:61:70:54:24:89:2d:ed:20:f5:8c:39:
62:38:e4:ee:e8:14:74:a5:8e:ac:6d:b9:a4:53:d2:e7:f2:a9:
9f:2e:c3:a8:97:d7:06:5b:87:db:56:75:ea:2b:41:ce:b1:df:
bf:6c:d6:dd:b7:ce:a8:b0:90:ff:35:7a:da:9f:9d:36:b2:d7:
44:93:ad:a3:3a:4c:06:4b:88:de:03:b5:d5:94:3f:5c:41:03:
eb:f9:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:21 2024 by rpki-client on console-fra.rpki-client.org