Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7971c2d6-d2af-472b-98c6-136e8edc0890.roa
File: 7971c2d6-d2af-472b-98c6-136e8edc0890.roa (raw, json)
Hash identifier: bWYSTL9330MfessTk01eubnUWbl5FdLa/eZPDCBBZgQ=
Subject key identifier: C2:35:33:83:20:03:47:8A:10:47:66:E3:CA:B7:B3:C1:D6:B0:6C:33
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 07A37D898F8EE31F1B0FF1CF38AE16016CAE8EB9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7971c2d6-d2af-472b-98c6-136e8edc0890.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.156.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a3:7d:89:8f:8e:e3:1f:1b:0f:f1:cf:38:ae:16:01:6c:ae:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=9af48ec38d6c06472fd74e4ab382c4e2752420fae20c827542f17747b065f337, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:01:9a:5c:07:54:43:d0:a2:8d:cc:6c:74:
88:de:28:8b:d7:40:ef:7d:34:89:de:00:87:70:46:
9e:bf:61:cf:a1:8f:e3:a7:87:23:72:b2:96:4c:8d:
ad:53:e9:43:b3:88:f2:78:b2:f6:c5:7a:21:3c:97:
d4:b4:4c:e7:ec:0a:61:e9:8b:ff:9b:d3:8a:90:43:
dc:17:5c:eb:d4:0b:a8:fc:1a:ce:ed:9f:80:63:27:
cb:e4:4d:da:69:2a:33:26:96:d2:1a:7b:50:ed:67:
94:bc:29:5c:50:a2:0d:c2:0b:20:86:f7:03:da:bc:
a4:ff:47:a9:0c:93:ed:e8:db:80:89:ec:bf:f1:82:
05:ac:04:a4:54:ab:b0:9f:72:cf:ae:10:8a:4d:f1:
7a:c6:a3:e1:d5:ec:3d:72:bc:69:d7:df:85:b4:c2:
da:80:b2:d0:d7:24:7a:59:be:98:a1:e8:99:63:6d:
c9:ba:fe:c0:68:43:a3:86:1f:55:56:44:44:bc:77:
00:4b:35:91:6c:1f:3e:c1:b8:31:4c:ca:49:f9:24:
6d:0c:03:ea:9a:e2:b4:57:43:5b:29:23:a3:36:50:
30:6f:2d:e9:75:ed:4b:22:0d:e6:80:14:04:c7:0a:
46:1f:6f:0e:c0:5d:f5:fe:42:b1:a8:4b:6b:26:fa:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:33:83:20:03:47:8A:10:47:66:E3:CA:B7:B3:C1:D6:B0:6C:33
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7971c2d6-d2af-472b-98c6-136e8edc0890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.156.0.0/15
Signature Algorithm: sha256WithRSAEncryption
cd:74:e1:47:b0:ad:0a:dc:13:54:56:b1:8e:c3:9c:73:35:60:
33:95:34:17:54:84:cc:c4:b0:09:9a:98:70:f8:b2:07:12:1c:
aa:fb:62:bc:8c:3e:b7:6f:b8:72:ef:20:d0:84:5d:fd:3e:9c:
b8:59:94:dc:68:8a:5c:f5:7f:48:1c:79:5d:e4:da:6b:f3:ff:
c5:1c:78:e5:ca:90:88:cb:98:cc:ea:ea:14:03:06:c7:2b:92:
f5:bf:fd:8b:cd:79:aa:3d:30:af:20:56:6f:a8:4b:dd:f2:e9:
8e:35:11:a4:91:73:32:ab:09:03:35:c6:03:7d:fb:80:3f:3b:
09:c1:8c:c5:2a:23:14:12:c8:bf:94:29:32:79:74:bd:b9:aa:
74:9f:cd:95:85:91:f9:cc:db:49:48:ac:07:67:b7:b0:f4:79:
d0:4b:7f:88:6e:07:fd:b0:16:31:fc:bf:c2:8b:17:77:17:d4:
f5:c4:51:0b:4e:d3:5b:94:03:f9:95:b9:af:dc:69:c7:f9:cc:
f6:c6:9d:b5:c2:da:ee:40:79:3b:9d:57:c3:67:87:c0:ae:75:
51:81:18:02:5f:fd:df:9d:49:a4:da:71:38:10:05:7d:15:3c:
30:97:05:65:54:c0:2b:9e:eb:47:0d:81:55:9d:9f:42:1d:dd:
43:7a:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org