Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
File: 95019996-0ef4-4f98-90e2-dd7efc004375.roa (raw, json)
Hash identifier: CT9S+7DyHQdQaTvV3GAdkiIUtjbKe4kwHZRa/LX4Pbk=
Subject key identifier: 59:44:2A:E1:18:84:6A:41:E5:E7:85:EF:A5:9B:BC:D2:23:66:83:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7D35B67F745C4EF0B6518AAB1A92BD67568C7452
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:35:b6:7f:74:5c:4e:f0:b6:51:8a:ab:1a:92:bd:67:56:8c:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=f4b66d43077b00a5dd1e09e03408fb1e744311e37e811512c76f98542c9175fa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:5b:cb:9e:22:b5:a9:78:c3:73:d6:1a:91:
f1:0b:0a:ee:dd:e1:dc:c7:b8:c1:06:34:3f:94:5b:
63:8d:f8:27:02:83:43:6b:f5:71:a6:e1:e4:14:7e:
ae:a8:be:c4:8b:aa:4c:55:99:28:87:72:c9:53:cc:
98:37:90:de:d4:4e:5a:e6:b2:3c:d2:92:58:91:e6:
a8:9e:e0:e7:f9:f0:7a:55:a3:84:de:c5:56:e0:7d:
23:4b:9f:5a:40:2f:74:47:39:2b:fa:ec:5a:27:5d:
aa:77:26:f2:c9:99:2b:9e:f4:46:65:06:cd:21:f5:
2b:bd:37:d0:85:59:39:9f:cc:37:ad:48:e1:30:f4:
45:16:69:c4:53:50:73:82:5b:29:c1:fa:56:8b:37:
0b:87:a5:0a:97:b3:a6:06:7e:ce:c2:ee:49:c4:9d:
e1:d4:a7:98:08:12:7b:fe:7d:b0:2a:ee:17:02:0e:
b7:a7:6f:96:fe:de:52:90:c5:c4:dd:c3:58:c3:4b:
89:a8:71:03:63:c4:d1:fc:98:6e:33:9d:0c:c4:eb:
8c:b7:9e:df:c2:ed:c8:88:fc:a6:7b:87:c8:aa:b9:
95:b4:a8:89:51:86:ed:4a:4d:9e:68:c1:d0:5f:a0:
81:dc:6a:5a:cc:40:33:b4:14:2e:6b:74:f5:1b:ad:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:2A:E1:18:84:6A:41:E5:E7:85:EF:A5:9B:BC:D2:23:66:83:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:d5:d9:cd:9e:e1:2a:c0:7f:a0:93:24:40:65:ff:69:84:02:
4b:8b:af:96:a5:9a:7e:48:7b:0b:1f:21:36:e2:c1:ef:12:36:
51:ea:40:c9:79:52:66:4f:e1:d4:78:de:12:ef:68:7d:0f:cc:
e4:cf:83:89:32:76:44:47:e6:c2:67:d1:10:3a:17:ba:e2:b7:
84:1d:c1:3e:b3:e9:a3:fe:c2:13:c0:38:dd:31:0f:f7:66:97:
bc:fa:39:47:56:9a:b5:43:83:d3:4c:9e:d9:63:ce:a3:ca:59:
ef:9d:21:9d:e4:e8:c3:68:d1:af:be:99:32:07:e9:60:da:d8:
da:c3:4b:48:bb:e2:85:a4:72:49:bd:8f:b0:d8:37:3e:d5:98:
ac:85:4d:e6:e1:8f:8e:54:d1:5b:34:0b:cd:a6:fa:f3:b2:8d:
fb:ee:86:7e:e4:5a:a8:64:bd:fe:91:b0:ae:13:2d:d8:58:b1:
38:a7:1a:f7:3e:b3:d8:37:6b:52:93:cf:57:56:da:8d:8a:da:
59:5c:34:9e:e8:e2:12:33:f9:0b:3e:1f:96:1d:74:fb:84:c0:
49:33:fc:22:c4:6d:82:16:2e:53:fb:98:59:ed:2e:16:1a:d2:
55:cd:5d:c0:30:2f:44:b2:f3:53:a9:4a:7d:86:c9:70:9d:72:
c4:df:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org