Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
File: 83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa (raw, json)
Hash identifier: YasQoONdNeOswLUiVy0QlQA+l0uHHzBbmY860MBOXqw=
Subject key identifier: 6A:A2:EB:AB:52:CA:FF:15:C6:EB:62:E4:E1:B4:0D:2B:CD:95:3F:85
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 063CE8D8322CFA5F1C1DBC6D380F736209809BC6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3c:e8:d8:32:2c:fa:5f:1c:1d:bc:6d:38:0f:73:62:09:80:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=c744ec8fbd384401f4b1e39b25eb79b3ea6dd158d25bc87a3e2bee55d8298258, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:1b:86:19:f4:f5:23:47:23:1e:e3:10:9c:
4f:52:75:d3:3a:73:4c:c2:4d:35:70:31:75:63:09:
5f:93:0c:4b:e4:6c:b7:13:a3:b9:18:ca:21:af:92:
08:c8:11:31:b8:f2:17:fb:49:95:d9:1a:79:03:05:
19:cc:a5:54:0d:6c:de:1a:8b:8f:a8:6d:8e:f8:5d:
77:53:3f:f1:d8:d7:23:fc:22:96:b8:cf:c2:bc:70:
fe:1b:01:63:19:88:15:25:71:7b:d7:63:b9:c0:04:
5a:93:ff:48:ed:43:e7:32:62:c1:f3:df:62:5d:ba:
e3:4b:74:05:34:2e:c0:d2:88:c9:a3:8c:fb:3c:bb:
fc:26:be:b8:35:80:0a:6f:3e:91:fe:29:42:1c:ae:
77:47:2d:b1:2a:04:84:b2:d4:e2:ff:dc:6f:0c:19:
a7:c5:37:fb:d5:bb:c7:d0:7a:39:6c:34:90:c6:11:
bf:05:d7:3f:09:0b:a4:82:97:08:11:93:f2:63:c2:
92:84:2c:a0:93:93:85:c6:20:55:1e:c2:be:71:bd:
fe:f0:58:c6:6b:80:ce:d3:c3:a1:da:80:4a:2b:cd:
c9:92:05:0c:3b:10:0f:6a:62:ab:d2:d3:62:58:9c:
da:ad:09:20:49:3b:ac:0b:53:66:44:1a:f3:f9:fc:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:EB:AB:52:CA:FF:15:C6:EB:62:E4:E1:B4:0D:2B:CD:95:3F:85
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c5:68:21:48:19:25:58:d3:4c:9e:32:b5:8e:b9:40:56:95:93:
d3:c4:6b:2e:d7:9d:dd:a8:d5:ba:26:73:30:76:52:c3:7a:5f:
e1:f5:62:95:3b:06:46:93:49:34:4a:d7:21:2f:60:92:89:b7:
64:a3:a8:ad:f4:39:76:19:ef:75:7d:bf:5c:75:cc:25:7b:a0:
28:dd:6e:3a:bd:8b:db:e4:f1:a3:fe:3d:81:69:c4:a6:b8:d7:
28:67:fb:36:f0:bb:b3:3b:f5:06:24:d1:28:82:8a:a5:37:45:
08:4d:6c:29:30:87:71:81:7e:75:61:10:1b:f0:ce:0e:b4:16:
6a:30:dd:74:32:7d:33:b4:ea:81:35:6a:ea:66:0e:25:ba:0f:
47:74:52:b0:fd:da:52:f9:3a:f8:be:79:a2:d5:c6:d5:73:d5:
d1:b6:4d:cd:23:53:44:8e:c2:83:37:46:7d:4c:c8:de:d5:1e:
21:11:6c:f0:81:5a:06:56:9c:ca:90:f8:ef:89:5b:2c:f1:77:
7f:ef:f6:98:ee:fb:f4:84:9b:06:a8:43:d1:3e:3b:ac:2d:6a:
05:ba:58:23:8a:54:96:c0:99:b6:3b:8c:5e:4c:2d:56:03:7a:
44:ab:c0:58:c5:15:c4:12:fe:82:d3:37:c5:4a:2e:b1:32:b4:
e4:4c:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org