Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
File: 7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa (raw, json)
Hash identifier: PDqIWFLVV9FEzmvx3iBschxuzsM7OzgqY2D0I2Sx3zQ=
Subject key identifier: F4:89:BD:A5:AA:DA:37:5E:AF:B6:5F:BC:6B:BB:14:95:0C:17:E8:B6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0A39F30D15E26CC07E9DF1401A6EFFF01A5E3121
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
Signing time: Tue 28 May 2024 00:00:00 +0000
ROA not before: Tue 28 May 2024 00:00:00 +0000
ROA not after: Tue 02 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:39:f3:0d:15:e2:6c:c0:7e:9d:f1:40:1a:6e:ff:f0:1a:5e:31:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 28 00:00:00 2024 GMT
Not After : Jul 2 23:59:59 2024 GMT
Subject: serialNumber=1cf021de2b39986b088440ca5d6fcbf7621e99978fb9e465c52c3175381e7ae4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:f9:89:38:31:70:d5:05:66:d0:c9:2b:c0:
21:63:e2:b5:44:f6:9d:e7:d0:71:45:ec:a4:30:db:
e8:6f:1b:76:03:02:54:42:24:ce:3c:09:d2:18:a5:
d1:2c:72:5d:13:ac:b8:1d:55:7d:ed:78:fe:c3:ac:
13:5d:d4:e6:31:a8:31:67:f0:fd:1d:a1:1e:8b:e8:
7f:96:bd:e8:27:36:fb:0e:0c:43:c5:f4:e0:19:ba:
63:96:ff:c6:f6:ef:ae:e0:9a:86:d0:d6:3c:83:86:
1b:ed:e1:8d:a8:c3:23:6f:cf:06:cc:7f:4b:bf:79:
ba:d2:67:31:59:51:e8:f6:d6:4e:41:90:aa:8f:14:
c3:fe:00:ee:1b:e0:e3:8e:a1:f9:65:77:f2:d3:04:
2f:8f:12:14:43:9d:4a:43:01:fc:bb:a4:7b:4b:5e:
45:b2:7f:bc:13:b2:2b:cb:4c:28:6b:4a:d0:72:b9:
91:db:dd:04:9b:12:ff:5d:d2:3c:b8:5f:38:cd:56:
86:f1:4d:88:6b:f5:93:c3:85:f3:c7:a7:2e:3f:44:
df:55:0e:35:df:b3:ae:0e:8d:7e:d6:80:97:d8:38:
0e:f4:5c:50:94:17:f8:40:86:94:09:be:0d:ea:c5:
40:ea:38:13:6e:f9:eb:54:84:5d:31:49:2b:b2:ad:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:BD:A5:AA:DA:37:5E:AF:B6:5F:BC:6B:BB:14:95:0C:17:E8:B6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1a:34:0c:be:91:28:58:c2:aa:12:8c:2a:ed:ba:9b:07:40:c8:
fe:3d:8f:59:54:60:46:20:f0:ab:43:ca:0e:a2:ef:0c:c5:b5:
e9:73:ca:a7:16:20:b4:ae:0e:0a:84:38:3c:65:eb:f9:d7:f8:
d0:22:56:96:01:a9:8b:0f:32:bc:1c:94:41:ef:58:b8:4b:d1:
47:bc:59:18:1c:5c:e3:c9:19:68:e9:8c:87:b6:29:3d:a1:74:
c1:45:9b:27:35:ff:26:0b:71:67:52:6a:dc:c6:db:58:da:d3:
f8:4c:d7:6a:e3:ad:3c:4f:1c:0f:9a:ee:3e:c2:df:e3:b2:4e:
6d:86:cd:3b:e5:dc:75:31:a3:12:d9:a8:05:0e:7d:94:36:61:
de:97:e7:99:b9:f1:5c:1f:2f:4b:ea:86:69:13:60:f2:7b:c1:
6e:ea:ae:c5:5b:23:38:52:76:4f:fe:fc:a1:da:b6:65:1d:c7:
ce:35:c9:50:fd:85:d3:c6:06:fa:1b:8d:c3:05:82:93:8a:28:
75:0e:3a:0c:71:2a:7d:a1:c2:14:c2:89:e3:21:af:9a:d3:c0:
35:fd:c7:92:2a:ca:09:c0:01:5c:4d:38:b1:a4:5e:27:b7:94:
0d:ff:38:52:46:53:10:cd:c0:9f:1f:e4:4c:83:4a:1c:3b:06:
05:b1:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org