Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
File: 8ee7bd52-fc09-4c49-af31-341b51b405e0.roa (raw, json)
Hash identifier: aL85dOpbNSJZpqeD+bNx1amWVCxDahrEQzVupguV0YQ=
Subject key identifier: 6E:C5:C5:C3:E9:EB:BA:07:67:4B:D1:74:54:D1:5F:E9:58:13:08:6E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 17E6313099205632018B7357795923647BC27B50
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 194.234.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e6:31:30:99:20:56:32:01:8b:73:57:79:59:23:64:7b:c2:7b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=6c81248b8bb60361598ac0ca3d4c2b09a03a620ccad41457fc3ddc27254f85c7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:da:8e:86:8e:6f:83:6e:58:50:5e:ca:9e:
f7:f7:da:93:0c:0b:e0:e9:7a:8f:27:28:10:0d:3d:
fb:50:b9:5e:79:ce:2d:e8:a7:77:77:dd:0c:81:cf:
00:b8:7a:0d:21:17:9b:3b:15:23:55:51:ba:bb:08:
85:00:9c:78:18:31:73:f7:09:f8:86:da:ff:39:fe:
ae:34:de:a8:eb:c4:5f:ed:4f:3c:1f:5e:61:f8:1e:
55:76:81:9f:0f:30:2e:82:46:eb:3f:90:a2:a9:68:
6c:0f:b4:1f:f2:ef:bf:b1:69:64:10:db:dc:e8:8b:
6f:ea:e9:c9:c6:ae:81:cb:11:e0:c7:e2:bb:ac:83:
5f:d0:1c:b6:d8:b8:af:f7:24:fa:48:28:e8:3e:18:
f4:eb:39:a3:e1:22:22:6b:1f:3a:81:8a:16:24:47:
09:ed:f9:6b:ba:65:ee:37:5b:11:c4:8d:35:98:42:
de:eb:3c:43:18:62:e5:3b:5f:f2:46:c7:e1:43:16:
36:38:e0:ad:39:f2:56:7d:b3:94:87:c3:34:c0:d3:
ce:95:07:21:88:26:ed:16:e8:e4:dd:bb:a5:c0:4d:
7d:7b:c7:70:48:c2:c8:8d:ef:93:21:2b:22:47:41:
72:a8:22:49:70:24:54:8c:70:29:7b:49:06:bd:fd:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:C5:C3:E9:EB:BA:07:67:4B:D1:74:54:D1:5F:E9:58:13:08:6E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.234.0.0/15
Signature Algorithm: sha256WithRSAEncryption
34:d3:f6:3e:ee:b6:98:d8:2a:e8:af:17:9d:eb:2e:b7:69:e7:
06:2a:56:4a:03:f2:4e:0f:ee:eb:27:3d:88:f1:cd:3b:7f:99:
e1:8b:df:5a:4c:06:bf:34:bd:b3:35:10:74:6d:6a:a6:b7:f5:
ce:84:ef:d6:10:e1:52:a1:75:d7:76:87:a5:17:ee:b1:5f:f6:
ac:36:a5:cd:c0:ff:53:e5:6a:7f:f2:e0:36:82:1e:19:fc:3d:
e9:58:31:b8:8e:2e:37:95:13:4a:71:a5:32:be:a3:6f:7f:30:
e3:aa:f0:18:06:5d:55:7d:d3:69:80:52:51:28:8c:a8:83:7e:
db:06:27:01:9a:3a:97:59:4d:37:ba:0b:ce:00:c4:04:12:e9:
e5:26:18:41:1f:51:12:15:7a:44:2c:9c:0e:d4:d5:35:37:08:
eb:f1:14:53:b7:35:c0:8a:f5:45:27:76:6d:bf:4e:33:bf:81:
f6:31:a3:61:00:6f:3c:6a:10:96:fa:b9:0c:27:e0:96:59:83:
95:92:e0:9d:1d:00:93:df:f1:17:ff:64:d7:fd:dc:75:2b:e5:
3d:e3:e9:72:3c:d0:47:60:7a:77:a5:f5:5e:f0:19:eb:ca:66:
52:55:05:b8:71:1d:79:23:fd:35:98:f3:b4:32:99:9e:e3:cd:
41:8a:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org