Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: fhusuyHhlUEOoTRerPRvJPWCiWAFQs8HrZWX/UrPcNQ=
Subject key identifier: 05:1B:E1:21:DB:0D:D9:9D:2C:AC:F7:50:ED:00:2F:8D:67:BC:47:68
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 02C1EA67DD4E0437E689B4716E144A8AF22A3B4E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c1:ea:67:dd:4e:04:37:e6:89:b4:71:6e:14:4a:8a:f2:2a:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=b7d78d1bbf1d63e58f5cdda1c8dd0fcbc0ce7370ed880f22f10676f4caad174d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:4d:6d:af:12:23:24:5e:99:f6:44:4e:1e:
c6:c4:1d:73:73:83:ab:86:7c:29:64:bd:b8:e1:2d:
e0:ec:16:64:62:51:7c:64:73:a3:29:26:eb:72:09:
1a:53:2e:a5:c7:d9:27:04:48:4c:f2:f7:1b:99:4b:
23:57:c1:63:7a:55:13:61:58:84:59:63:bd:f6:92:
0b:40:b7:80:17:1d:54:9c:f8:d7:9f:5a:9c:ef:65:
96:e0:d1:28:42:0a:80:67:83:76:f7:f8:c0:90:e2:
54:82:2b:94:c7:a7:78:99:05:e3:bf:35:66:bb:63:
b5:3b:c6:a4:10:dc:dd:f8:85:d7:17:d8:ac:bd:62:
6d:ee:60:1f:50:06:c4:e3:cf:9a:45:e8:97:7f:3c:
00:6e:ec:51:e2:d9:5a:0a:0b:11:b2:a2:64:6c:86:
6d:35:ff:a6:4a:bb:eb:e0:cc:e8:91:e2:bd:17:bb:
b7:fe:ae:c3:70:56:34:5d:bc:96:0c:f6:b4:35:ca:
e5:da:fd:cb:07:68:c3:99:69:39:01:93:0b:1f:48:
ff:83:f4:44:c3:b0:fc:6c:a4:41:e2:3f:a1:cf:9f:
ef:d3:c0:50:44:c4:f0:a5:c9:5a:00:97:5e:d5:40:
29:ff:1e:73:6a:c4:72:2f:f9:0c:b9:43:dd:3b:f0:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:E1:21:DB:0D:D9:9D:2C:AC:F7:50:ED:00:2F:8D:67:BC:47:68
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:15:65:b8:a5:c6:7e:7b:d5:ff:37:31:bf:dc:d5:aa:65:db:
c5:d4:a4:c2:0b:88:dd:a3:c1:f5:c9:61:5b:3e:7a:c8:8f:36:
7c:3b:c2:36:ad:b8:97:92:73:3b:2d:b9:0b:82:67:94:95:78:
c6:84:4f:4d:63:bf:6a:d3:dc:11:55:93:57:55:6e:ac:2d:ba:
1e:dc:21:30:48:ea:8f:8e:1c:71:b3:08:dd:e6:c3:06:01:66:
b6:53:12:e5:25:3e:5c:1f:81:dd:24:99:89:40:f8:f6:26:f5:
89:2a:c5:88:c6:b1:ee:8f:6d:d7:1d:9a:49:b1:45:01:06:e3:
01:3b:45:1b:cd:4e:c7:ec:4e:e0:85:67:0f:a8:ff:8a:27:a7:
ce:a1:e7:82:14:9e:78:21:dd:84:8f:56:4d:dd:fa:5b:ca:92:
25:4f:a7:00:3c:81:12:2f:66:ba:36:d8:b1:5d:d9:08:c9:c3:
67:08:7d:24:c5:67:4a:0b:3f:43:9a:1e:c5:c9:25:07:48:cb:
d5:b8:cb:e1:c1:0c:21:6d:32:cb:85:65:ad:d6:0e:f8:7a:ae:
a6:dc:82:4d:de:d1:22:44:0e:67:27:7c:75:02:dc:f4:e3:6f:
25:f3:f8:93:b5:86:f3:79:bc:77:25:ac:99:76:d6:5a:50:81:
b2:1f:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org