Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa
File: 88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa (raw, json)
Hash identifier: K8gelBi9Z+6cRjAjN7O6yy+uYuHT2JBW7EIg2gaFrwI=
Subject key identifier: D3:CD:A3:B8:31:67:15:42:F4:59:8A:21:3A:17:EE:61:3D:50:21:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20972B9ADEF7A0149F1E66548F21E23FFFB71DF1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa
Signing time: Sat 25 May 2024 00:00:00 +0000
ROA not before: Sat 25 May 2024 00:00:00 +0000
ROA not after: Sat 29 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.96.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:97:2b:9a:de:f7:a0:14:9f:1e:66:54:8f:21:e2:3f:ff:b7:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 25 00:00:00 2024 GMT
Not After : Jun 29 23:59:59 2024 GMT
Subject: serialNumber=8ca360cbc59884b01ad560a23358fd2fd3766725f3fa0da4da5bc3b6432789a9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:56:1f:60:06:7a:6a:a2:97:47:78:3e:16:
18:0f:aa:96:17:99:40:e1:06:b8:2e:31:f2:0a:07:
eb:91:05:8c:82:70:fa:24:09:86:35:18:8b:1b:89:
06:25:b4:45:6f:1f:c1:b0:17:66:c3:ec:eb:7e:82:
37:24:1c:d5:e6:c0:11:e3:e7:33:68:6c:f4:1c:da:
d9:c5:e8:59:eb:95:36:b0:17:1a:f1:77:be:43:01:
49:a7:65:8e:e2:37:08:81:d2:c4:53:13:23:52:3e:
73:34:2b:38:ab:36:a6:f9:c9:e9:a2:da:23:34:b4:
74:0d:bb:7f:26:48:52:1c:d9:96:69:3e:76:e9:87:
1b:ee:39:35:56:9a:9c:53:1b:b6:53:ce:73:c5:23:
97:ae:16:59:f4:a9:e1:e4:ce:bc:f6:c7:d4:2a:fc:
e9:f8:8e:97:d9:4c:65:28:90:61:bc:94:a7:fb:bc:
42:8c:5d:67:d6:1f:3a:9f:73:5c:e4:3e:8d:a3:0a:
ec:50:51:2b:ed:69:5a:0b:19:cb:2b:59:fb:b7:d9:
94:68:45:dc:f2:46:80:d3:5c:24:ad:94:12:50:fb:
66:fc:e2:c9:94:ff:60:d4:fc:4f:1f:0e:da:d3:9e:
97:4a:28:0b:c0:60:be:c9:81:13:19:17:6c:f2:40:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:A3:B8:31:67:15:42:F4:59:8A:21:3A:17:EE:61:3D:50:21:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:d4:40:a9:de:b3:93:22:9a:ad:0e:c6:1e:16:af:ca:43:ea:
61:e1:a3:06:7e:45:d1:88:97:d3:be:bd:13:09:5b:f5:33:5e:
86:61:81:3e:a3:04:c0:86:af:36:3a:57:22:3a:f3:5f:83:15:
23:c3:1a:10:66:a1:d0:4b:20:08:3c:bb:fd:fd:b1:dc:ea:73:
6d:2d:7d:02:5e:5c:a1:fe:23:07:2b:6e:7a:1a:7f:ee:b9:e1:
da:e9:69:5c:ea:3f:ed:a9:c4:79:b4:31:f7:8c:25:70:39:65:
fe:76:69:8c:3e:8b:a7:ad:71:84:a1:40:7e:2d:05:78:00:98:
f6:49:fe:98:1f:83:4e:95:96:b5:d3:fc:80:ea:51:44:0b:be:
61:b7:85:b7:42:46:8f:e9:24:bb:f4:fe:22:d7:db:dc:ee:a0:
3d:48:30:f4:e5:8c:3e:2b:82:06:5e:27:a3:f3:b4:51:93:b4:
b9:0d:49:7f:94:e6:f1:26:69:c2:a5:e4:2d:7c:f7:fe:26:de:
7c:43:38:0f:ef:52:f5:9a:63:ba:f3:b1:ca:e3:7b:62:f8:6b:
66:a8:7a:a9:6b:8b:24:ae:a5:4b:07:27:44:de:62:18:1a:c1:
d8:13:bc:fc:b9:d3:ee:59:2d:aa:06:93:43:d1:d4:72:22:df:
68:de:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org