Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
File: 7dc90e26-05aa-40c8-bbd0-967e095d6485.roa (raw, json)
Hash identifier: DAAOK7AHA5Bf5324krM1naVuUnnssOAkVboi9f0ifyc=
Subject key identifier: BB:20:D0:B1:04:06:38:D4:28:9F:C9:BF:27:F3:19:9F:D6:99:97:26
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2C8ECD294DBF92E15E53E05EC91D41C96030A137
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 143.65.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8e:cd:29:4d:bf:92:e1:5e:53:e0:5e:c9:1d:41:c9:60:30:a1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=e47a5da4fe63ae54c261a180a7001bb4ddb08d5b0586b881b2c4b78dd8a3117c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:97:46:ed:9a:c2:3d:dd:90:61:27:1a:95:
8e:4c:19:34:68:19:00:fd:be:df:eb:3f:63:29:6b:
06:b3:c1:0b:ef:07:d2:9f:d5:f7:12:21:d0:07:29:
ee:15:84:7b:0a:49:13:c5:fb:6c:96:5e:66:c9:0c:
90:98:00:0b:6f:00:4b:e5:57:55:22:c1:b2:e1:8a:
c1:64:28:36:0b:8e:15:3c:8b:d6:52:c5:6f:45:f0:
c1:ce:11:91:84:27:e4:2d:56:a7:ee:c2:55:ec:c7:
9a:48:e4:a7:b8:4a:90:0b:4e:a9:4e:51:2d:8a:80:
a2:c1:22:7d:30:db:e5:90:a6:06:65:6d:7d:45:d1:
ac:3d:29:76:95:4d:07:12:3f:96:d5:e1:cd:f4:90:
cf:dd:96:55:64:18:d4:38:09:ef:34:c9:34:e3:18:
2f:d0:c3:1a:0f:5e:4b:53:2b:5c:58:4f:41:f2:53:
32:ad:d6:e7:24:b3:6a:6f:9c:8a:fe:87:cb:a7:d1:
0a:ae:87:a4:9e:ec:96:35:a7:ab:be:53:91:c0:dc:
09:e6:bb:7d:d3:ae:f8:84:4d:a3:f4:41:1c:2b:21:
73:62:cd:eb:ae:17:43:1b:29:be:b9:06:1b:56:fe:
e0:49:9e:60:3f:63:48:6c:19:00:62:93:92:6f:23:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:D0:B1:04:06:38:D4:28:9F:C9:BF:27:F3:19:9F:D6:99:97:26
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b8:d6:26:01:99:9f:71:2a:56:59:93:57:56:f8:04:8a:56:fc:
d8:d6:b0:ab:d3:ac:8e:82:23:c3:47:60:71:32:af:fd:e5:b7:
63:dd:c2:b3:e3:d6:fd:f1:0c:5a:91:95:c5:c3:e1:31:bd:74:
d3:69:3a:a9:24:ba:88:03:ec:b0:5d:8a:96:f2:18:71:c0:4e:
67:ba:49:5f:35:d8:1c:ee:dd:bd:16:31:7a:c2:d9:a9:b2:bd:
cc:93:fc:e8:85:61:49:54:83:0c:ef:09:ad:27:64:a6:05:96:
5a:9e:a5:f9:6f:ed:91:4d:1f:04:4d:cd:4f:43:a9:3c:2a:19:
6e:69:08:79:35:ae:76:d6:4b:66:c7:93:f3:a8:71:d5:2d:98:
c4:41:5f:54:4e:f6:55:2c:8b:1c:fa:5f:1a:42:51:a7:8e:32:
87:a9:ba:dd:81:2b:4e:70:6b:73:0f:28:f5:a5:62:f1:b5:66:
1b:c1:74:57:df:68:5e:81:6b:be:bb:4f:c2:80:b2:3e:35:5e:
37:91:03:f9:78:85:69:49:e6:c6:da:dc:e7:c3:ba:86:0a:2f:
66:20:b0:17:19:73:e8:cf:35:3f:91:74:0a:a4:0f:a4:85:95:
a1:47:21:50:76:56:c2:73:3f:33:7e:0d:7a:d1:a5:a8:a5:1b:
dd:e1:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org