Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
File: 7438d445-a5f7-4e01-82a2-5975f6fc967c.roa (raw, json)
Hash identifier: HPsdC/+IZHmg4rMx0V+uT5Tda8O3SY4KqXr5xshbaGw=
Subject key identifier: F3:5F:7D:D9:89:24:F9:78:F0:4E:B7:9E:93:40:A5:81:67:39:7D:EA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2F25ECA6EAEFDF3335E8B2FE87358A0A1CFAE58B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
Signing time: Fri 14 Jun 2024 00:00:00 +0000
ROA not before: Fri 14 Jun 2024 00:00:00 +0000
ROA not after: Fri 19 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:25:ec:a6:ea:ef:df:33:35:e8:b2:fe:87:35:8a:0a:1c:fa:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 14 00:00:00 2024 GMT
Not After : Jul 19 23:59:59 2024 GMT
Subject: serialNumber=4bda151c7de7a4cdb307cc82b23b146e43dcdd6d442f71cb4cd0b8099ee62b73, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:6c:7c:88:4e:a1:d9:46:71:6e:ef:f9:b5:
ca:d0:e2:c7:b4:9c:2a:2b:ec:c6:22:88:e8:f2:6e:
a0:ab:d1:69:62:4d:08:12:2d:9e:b9:14:c2:54:b4:
1c:e6:ef:81:16:5d:fc:f0:94:2e:a2:eb:09:dd:42:
93:a0:37:c3:d1:c5:66:ff:f3:11:e7:8c:b8:30:77:
42:ed:7d:ae:51:4f:02:b2:38:37:ca:52:e9:10:b3:
5e:5a:e5:c4:d7:5d:65:1f:d5:b5:1b:77:ef:fd:9d:
38:fb:f5:3c:02:38:e6:b4:5d:37:8b:fb:0b:eb:78:
86:40:ba:bf:24:02:70:fd:f1:88:c6:6d:37:7b:10:
72:03:f1:e0:bd:d5:b0:4e:94:76:d5:35:4d:7d:14:
4f:1a:f5:35:82:09:03:ca:9a:74:82:11:5f:c1:06:
79:df:3c:bd:e5:66:29:59:81:cb:74:e0:32:2c:84:
73:7a:b0:ff:ca:b0:14:3c:e6:b7:76:fd:e2:81:f6:
b8:40:c3:a6:f8:e0:0e:cb:e0:16:d6:1b:dc:89:c6:
7c:a8:47:4c:ba:29:2f:28:53:3d:46:cc:c5:2b:38:
57:25:4e:a8:d1:cb:e8:9d:2f:9d:8e:61:6d:cd:a8:
0a:9d:e5:06:af:04:22:5f:5a:43:ee:c3:76:36:4f:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:7D:D9:89:24:F9:78:F0:4E:B7:9E:93:40:A5:81:67:39:7D:EA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:c8:33:06:47:33:60:e2:ce:8f:ff:ab:0b:31:34:fd:e5:e4:
3d:7c:26:95:3d:1a:27:77:c1:2e:e9:b3:b2:09:70:aa:6a:18:
cc:b7:3a:8b:4b:6e:2b:d0:11:47:a4:fb:d1:02:9c:06:57:98:
b0:e6:64:0e:00:0d:a5:d5:31:76:40:ac:fc:5b:05:dd:27:75:
d4:c3:95:2a:49:db:e1:57:f2:6a:05:75:42:3f:05:28:99:ae:
7f:78:93:57:74:1a:fc:d2:95:d9:45:3a:87:71:03:0e:0c:8a:
1a:79:99:89:56:91:ed:4e:04:46:7e:5b:89:15:6a:1a:26:07:
ce:fc:4c:f2:88:4d:e8:d7:6b:f9:42:c7:ba:77:e8:63:ed:fe:
66:0b:6a:80:72:c4:d2:6c:34:c3:17:a4:b2:47:0f:98:22:f8:
26:5c:93:1b:86:e3:7f:9d:43:af:f0:9c:fa:52:27:f4:ed:83:
bd:86:b7:3b:fc:84:55:7b:64:9c:6c:70:b7:a3:65:4f:a2:69:
ca:0e:fc:91:6b:74:a5:43:fd:85:35:23:f5:28:b2:48:c4:4d:
02:ca:96:2e:a6:02:e0:6e:9c:a5:3f:10:a1:03:e3:b1:56:e1:
70:dd:6c:f5:78:38:87:80:cf:f6:2d:5e:02:ce:02:35:94:04:
c8:dd:19:cb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIULyXspurv3zM16LL+hzWKChz65YswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA2MTQwMDAwMDBaFw0yNDA3MTkyMzU5NTlaMHoxSTBHBgNV
BAUTQDRiZGExNTFjN2RlN2E0Y2RiMzA3Y2M4MmIyM2IxNDZlNDNkY2RkNmQ0NDJm
NzFjYjRjZDBiODA5OWVlNjJiNzMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKRVbHyITqHZRnFu7/m1ytDix7ScKivsxiKI6PJuoKvRaWJNCBItnrkUwlS0
HObvgRZd/PCULqLrCd1Ck6A3w9HFZv/zEeeMuDB3Qu19rlFPArI4N8pS6RCzXlrl
xNddZR/VtRt37/2dOPv1PAI45rRdN4v7C+t4hkC6vyQCcP3xiMZtN3sQcgPx4L3V
sE6UdtU1TX0UTxr1NYIJA8qadIIRX8EGed88veVmKVmBy3TgMiyEc3qw/8qwFDzm
t3b94oH2uEDDpvjgDsvgFtYb3InGfKhHTLopLyhTPUbMxSs4VyVOqNHL6J0vnY5h
bc2oCp3lBq8EIl9aQ+7DdjZPUCMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTzX33Z
iST5ePBOt56TQKWBZzl96jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NzQzOGQ0NDUtYTVmNy00ZTAxLTgyYTItNTk3NWY2ZmM5NjdjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNaMA0G
CSqGSIb3DQEBCwUAA4IBAQAByDMGRzNg4s6P/6sLMTT95eQ9fCaVPRond8Eu6bOy
CXCqahjMtzqLS24r0BFHpPvRApwGV5iw5mQOAA2l1TF2QKz8WwXdJ3XUw5UqSdvh
V/JqBXVCPwUoma5/eJNXdBr80pXZRTqHcQMODIoaeZmJVpHtTgRGfluJFWoaJgfO
/EzyiE3o12v5Qse6d+hj7f5mC2qAcsTSbDTDF6SyRw+YIvgmXJMbhuN/nUOv8Jz6
Uif07YO9hrc7/IRVe2ScbHC3o2VPomnKDvyRa3SlQ/2FNSP1KLJIxE0CypYupgLg
bpylPxChA+OxVuFw3Wz1eDiHgM/2LV4CzgI1lATI3RnL
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org