Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
File: 7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa (raw, json)
Hash identifier: uzIGhSKKz8kJJH5RZP1PiyAy7vV58kg9yXUQQTNJ6L0=
Subject key identifier: 8A:E7:40:3B:0B:DE:40:23:6E:5D:90:9F:71:09:CA:8F:F8:E8:2C:60
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2DF148230C7D07EE693E26DD06F823AE4D63385C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f1:48:23:0c:7d:07:ee:69:3e:26:dd:06:f8:23:ae:4d:63:38:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=a6a3a715dba5aeec82ca86da8694e798e120ffcc7c311ae7e9070810821f27b5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:b0:61:5b:68:3c:5c:5e:d0:a8:3f:ea:72:
9b:0a:b3:ad:a0:69:d7:76:15:bc:3d:df:7f:a2:5d:
f9:7e:28:26:c8:7a:e2:91:47:ca:fb:0f:79:77:c7:
26:4e:40:54:d9:05:57:19:1e:3b:f1:7f:07:67:dc:
00:df:05:fc:5d:fb:3a:84:44:95:bd:b0:32:a4:00:
2d:06:fa:b5:8a:5d:77:ac:f7:f5:7b:4a:a1:4c:b2:
59:6a:0e:09:cb:02:6f:7f:ba:00:ba:5c:93:9a:c8:
7d:0e:96:61:b9:a5:5c:11:74:bb:fe:07:e8:45:ce:
1e:8a:7b:dc:66:b1:a1:16:2b:f0:ef:b3:7e:a5:ff:
82:6f:f5:21:f9:40:07:75:8b:a8:d2:ab:bd:ef:b2:
33:05:5a:21:3c:34:1f:a6:83:77:58:1f:e2:c1:04:
78:1c:31:79:85:83:1a:0e:87:37:ca:11:aa:09:f5:
ab:52:aa:33:f3:af:ad:e6:46:ac:b8:b5:32:15:09:
b7:eb:1a:94:b6:0a:a7:bf:28:b2:3c:ea:d7:00:1e:
45:d8:f1:b3:4d:fc:9a:44:05:a8:5f:cc:9c:e3:ad:
fc:b1:0a:cb:67:b7:ab:21:db:05:2b:28:2d:9a:0d:
03:da:a7:0c:0d:ec:5d:87:d8:bb:c1:e7:23:18:03:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:40:3B:0B:DE:40:23:6E:5D:90:9F:71:09:CA:8F:F8:E8:2C:60
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:86:fb:7e:15:c2:91:ab:5d:cf:af:0d:93:2c:74:0b:bb:b9:
b5:f3:ca:e4:ab:ea:65:a0:44:aa:29:b3:bb:d8:02:14:d4:dd:
b2:f3:7e:4a:89:69:cf:43:da:ea:6f:eb:5b:6e:af:58:44:6f:
95:c9:3d:05:d1:ed:30:a5:c0:e0:43:72:d0:53:8f:63:2d:f4:
6a:30:a1:3c:28:a0:c5:e6:13:26:32:23:a3:16:d7:6f:f7:a0:
49:f3:2a:56:db:05:a8:59:27:f2:82:e7:59:95:8d:4d:01:62:
58:0a:e9:fb:5b:e7:a9:d7:ec:2f:a8:fe:d9:4d:f4:55:bf:1c:
07:a5:b4:6c:21:9f:01:f8:30:f6:50:79:b4:19:ff:56:30:e6:
e7:a8:12:62:f2:05:c5:9b:12:27:f8:da:25:a0:41:9f:10:65:
2d:f0:28:fb:63:26:38:d2:44:6d:5b:01:14:31:b0:6c:9c:19:
66:ec:e0:80:45:cf:b1:c5:19:9c:21:9b:30:19:7f:31:02:98:
2c:c2:b8:91:ae:9d:d9:52:af:c8:75:48:78:28:38:12:b0:14:
05:24:de:0c:04:48:01:3b:8e:4f:af:50:ad:96:ce:69:36:ce:
f3:cb:a6:42:d0:19:e3:85:bd:2e:76:b2:43:f8:6c:2c:91:b4:
f0:31:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org