Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
File: 8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa (raw, json)
Hash identifier: cryRWxvyqE5pzXzd4edmWb8p76iz9ZiLB726C5gp/D4=
Subject key identifier: CD:31:D3:B6:B2:AF:D5:11:DC:7A:68:88:C4:72:E7:9F:D4:13:D3:29
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1EAFBE55DDE91E185C18AFF7005F6D2534B1B024
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:af:be:55:dd:e9:1e:18:5c:18:af:f7:00:5f:6d:25:34:b1:b0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=2cb1e77fefa28e0099476a6186173ec81bf7a188baabed658a2409da8a9de30e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:f4:82:80:1a:9f:fe:c1:76:3f:08:2c:19:
0b:22:7f:e4:cf:70:e7:ce:5e:2b:a1:cb:80:87:ef:
96:ad:e7:db:48:05:a1:ad:84:24:72:10:e1:a4:f9:
77:86:40:20:a8:d9:ed:c2:38:8e:7b:55:f9:28:c1:
a2:87:8e:44:30:55:ab:fe:91:90:69:74:ec:0a:8a:
04:1c:89:d8:09:f5:df:78:0c:3d:57:8b:c2:62:2f:
e2:85:82:69:33:74:18:2d:c1:e6:52:8d:80:b9:fe:
ba:9b:40:1c:e7:8f:e0:ae:60:83:72:d3:d4:77:27:
ba:f6:3f:e3:2e:5c:1d:6f:c2:2a:72:3a:9d:7f:84:
eb:a5:ce:47:97:7e:bb:73:b8:1a:73:36:8f:cc:02:
40:25:86:2b:ea:6a:11:15:d9:c1:f9:27:61:44:2d:
bf:00:f1:8a:dc:db:76:22:29:3a:09:c0:4a:d0:13:
e4:55:f4:4c:66:2f:92:b6:39:e6:12:33:83:9c:0c:
a3:05:cf:dd:6e:cf:51:ab:88:f7:d3:eb:a0:4c:fa:
f0:2e:c4:37:02:e1:9b:f8:06:12:2f:55:2a:d8:86:
95:47:a0:2c:a5:3f:76:08:26:e1:65:ab:99:bd:49:
d7:ec:1d:d5:32:a8:56:0d:db:ef:4d:cc:08:c8:2b:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:D3:B6:B2:AF:D5:11:DC:7A:68:88:C4:72:E7:9F:D4:13:D3:29
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
24:1e:2e:23:09:30:38:d7:70:28:29:2e:c7:0b:bc:ef:32:ff:
34:b0:4c:93:6e:8d:43:cf:46:f4:62:83:ca:60:c7:55:06:26:
95:77:4d:ec:49:71:c0:54:b1:66:83:32:65:5d:ef:b7:29:f2:
d9:ef:9c:c5:54:04:89:0c:48:aa:b8:37:ef:99:77:f5:fd:15:
de:7a:1e:54:6f:f8:fe:12:7f:c7:1d:b5:73:00:be:54:4c:07:
4d:a3:7e:44:95:ed:d9:d9:0f:64:54:1a:73:f6:93:d0:a7:75:
cc:34:00:11:fd:1d:0d:0d:c4:f9:6d:f6:d5:61:5f:9d:54:ea:
51:5d:20:9b:52:82:fd:80:04:39:a1:46:28:6a:2e:b5:22:7a:
aa:69:4c:de:1f:ec:f2:0b:98:a0:13:15:72:dc:d5:47:d4:58:
a3:17:8a:63:3f:51:cf:06:a5:81:b9:dc:af:19:85:ac:ef:ac:
bd:95:88:84:d2:96:2c:c0:c7:9a:ac:9b:ee:c3:ef:84:f8:05:
48:53:28:1f:f5:e2:32:bf:b8:69:c1:44:40:40:e8:09:df:f0:
c5:39:a2:cc:73:c3:76:d7:4d:a1:db:36:2f:98:87:2b:93:55:
85:9d:8b:3c:1a:37:0b:6e:7a:fe:7d:15:bd:12:58:df:e5:f6:
6c:92:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org