Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
File: 7764f303-17ca-41de-afb2-e2a4278e047f.roa (raw, json)
Hash identifier: UOP9dGYtevUaSXH735ZSiPctFokGMMWX8TTGpDalA7A=
Subject key identifier: 58:9C:B1:F7:8E:EE:5F:11:33:03:F6:AE:0F:9B:56:52:8C:A7:DB:8A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 58E4F241434D00FAB65BB0DFE770BBEBCA434EBD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e4:f2:41:43:4d:00:fa:b6:5b:b0:df:e7:70:bb:eb:ca:43:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=5322bee77c342f1845ba1c17adfa6d4fc94718eed49afea7ae75fb713c245e91, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:92:00:05:b0:75:90:3e:86:34:c6:a9:36:
20:b3:d9:6a:01:ba:98:f0:80:1a:36:f8:eb:ae:67:
e5:3b:5d:ac:70:93:f6:eb:5f:f5:65:3b:08:0b:7f:
3e:f8:fd:bd:c7:df:9c:7c:d7:44:1a:83:1b:d6:42:
33:95:e0:67:11:af:25:35:41:58:54:e7:8d:80:d2:
11:46:90:89:a1:eb:70:d4:a4:2e:a2:4f:74:df:fd:
81:97:48:bb:d6:cd:a2:21:8e:e9:ff:d1:a8:19:04:
b8:2e:98:36:32:b5:c7:fb:ba:9c:4d:92:74:16:ee:
07:e5:21:cb:e3:13:66:b4:f0:ac:7d:84:c9:c3:21:
68:04:32:57:77:e5:91:02:ed:fa:94:ac:8e:71:40:
8b:3d:b0:2d:58:5e:27:31:cc:77:e2:6a:14:88:67:
55:a3:b1:96:f4:19:da:37:1f:cc:15:ac:92:78:fe:
2e:4d:b5:e8:0b:f4:00:6c:ae:24:7b:9c:67:42:5c:
f0:e4:8d:37:5d:ae:9c:68:45:c7:89:2d:bc:cc:d7:
81:31:19:f7:78:28:84:e1:9a:ce:24:59:9d:73:a0:
3b:c5:30:f3:4f:1b:5d:89:2b:b7:cb:82:8b:26:2c:
e7:b7:c4:98:74:aa:5c:4e:0f:1e:73:26:84:41:4e:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:B1:F7:8E:EE:5F:11:33:03:F6:AE:0F:9B:56:52:8C:A7:DB:8A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ce:45:60:e4:0d:b3:55:cb:83:59:55:66:f3:a5:48:cd:14:57:
14:2b:01:b9:b2:2a:34:b2:53:fa:6f:98:e9:85:28:bf:a1:ef:
6a:59:b7:6e:46:21:73:db:da:da:0d:e2:88:51:19:34:33:7c:
19:c0:62:98:d7:01:00:7b:e1:dd:5c:38:4e:03:1a:a8:82:c7:
51:ed:ea:fd:51:15:c1:42:be:a6:1f:66:5d:57:93:58:c3:78:
bc:cc:d3:81:1f:70:2b:dd:a8:13:87:de:db:3c:68:c5:7c:1e:
b6:f5:46:a9:4d:c1:ef:b2:cc:0f:31:87:92:ce:4e:30:d7:36:
ba:df:b1:a0:84:cf:2a:4e:8a:99:c4:24:cb:c6:6f:68:b9:20:
bd:19:93:97:aa:a5:ef:73:2c:c2:4e:c8:45:9a:f0:91:97:d2:
1a:97:16:b6:65:b9:14:31:93:57:ff:1b:65:98:8d:cb:75:09:
fd:1b:f4:d6:35:7f:56:79:f3:49:bc:2a:aa:30:6f:b0:a8:38:
11:a8:0b:17:d3:2a:55:8e:34:47:ec:36:30:11:89:50:77:54:
29:77:74:93:5d:17:c9:a4:4d:f7:d5:eb:89:90:7f:01:cc:d0:
f6:d5:92:54:76:69:77:28:11:e4:3a:f5:7c:1b:d2:6f:c9:12:
8a:ce:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org