Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa
File: 94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa (raw, json)
Hash identifier: MKkb3NDvvr/OmkKMgUaQZ9US9P2ga3SSRm1h5WsvnA0=
Subject key identifier: 63:F7:27:68:9D:96:53:18:54:4D:26:F3:51:25:84:B6:15:58:BA:0D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 34354AD76C79A6549C81DDB3C3D4C6FB9D798A6E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.236.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:35:4a:d7:6c:79:a6:54:9c:81:dd:b3:c3:d4:c6:fb:9d:79:8a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=ba425149c723ca62807563f93a37a313134c4a29e2cb1f96400b04138575ae15, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:d4:28:72:a8:96:f4:91:73:36:8d:e7:74:
5a:95:c2:ed:76:b4:f7:83:85:a7:c0:91:14:dc:3a:
80:51:27:96:d8:b9:12:2d:5c:35:0b:99:02:95:99:
69:30:92:13:f5:75:c3:02:15:87:61:29:3e:53:7b:
2f:a9:c0:dc:6c:c9:92:96:15:ac:2b:e8:ca:c3:87:
81:a8:35:78:1d:e3:66:44:85:6a:99:8f:69:db:e9:
32:0c:da:b4:ca:35:57:27:ca:5d:91:26:ff:c0:41:
82:eb:b7:ba:c2:92:65:9e:0b:a7:9b:d8:cc:39:df:
e3:06:23:2e:12:82:28:75:01:a8:78:a2:79:29:6a:
79:28:fb:51:3f:7e:f8:51:f3:1c:7a:ee:6f:45:d2:
37:af:f1:09:1b:15:b0:02:60:c9:f2:1f:41:af:3f:
29:1c:7e:85:56:bb:13:4c:b6:30:c3:83:a1:8a:da:
79:66:67:2a:2e:9a:a8:f5:f2:9f:4f:d7:4b:c3:2e:
5a:f6:6e:93:71:98:fa:e1:e9:53:20:48:cc:f4:35:
ef:81:9c:76:ab:74:12:de:c1:0a:39:e3:91:59:42:
e6:4e:a7:af:de:d8:b3:f5:f4:93:36:aa:ce:df:87:
6e:31:4a:bb:b2:d6:d1:ff:6e:45:8b:9a:c5:5f:1b:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:27:68:9D:96:53:18:54:4D:26:F3:51:25:84:B6:15:58:BA:0D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1f:af:ea:a3:53:8d:2f:af:ac:06:c5:95:59:f6:d3:7c:5c:92:
9e:0c:0f:d0:e0:02:65:ff:57:79:a0:08:01:5a:ec:56:c1:c9:
53:87:ab:76:8d:e5:94:58:1c:93:eb:67:a2:cc:3f:a9:15:dc:
f8:24:42:29:40:27:8b:d8:e0:8b:ca:23:2f:4c:ac:66:09:40:
b4:6d:06:47:75:be:39:b6:b6:a3:db:07:27:d5:49:a0:bd:b3:
61:57:aa:62:16:5d:a1:34:0e:f8:3c:6d:9a:db:b9:9a:e1:99:
2d:98:29:dd:3f:63:04:b2:e8:d7:b0:e1:ec:08:56:6b:d2:0a:
12:8d:4c:6d:3d:39:71:ce:1e:ae:88:8f:71:22:84:55:8b:9f:
64:2a:cc:63:23:73:c6:07:01:34:ef:2c:12:fe:32:c7:95:d9:
d4:23:c8:f2:e9:f3:ab:7f:0c:6c:21:1f:ed:5b:cf:bf:2c:bf:
af:ec:e2:fe:0a:cd:61:6d:5c:d1:a0:b6:93:eb:0b:dd:48:ef:
00:ba:a2:70:9a:7c:b6:da:8c:cc:04:78:5a:04:26:46:34:9d:
eb:4d:62:2d:45:7b:28:93:54:d1:eb:ff:0f:fe:f9:8b:61:43:
e8:a7:3a:c2:e6:9a:1d:10:fe:7d:4a:19:a2:28:28:3d:f0:5e:
1d:8d:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org