Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95922c65-906c-414e-8807-a0500d403602.roa
File: 95922c65-906c-414e-8807-a0500d403602.roa (raw, json)
Hash identifier: kjRaq86iqznjzgzebEIOyMHo9Smt/bnWYFeEEijh8VQ=
Subject key identifier: 87:93:F8:61:31:44:71:23:37:71:04:06:67:D4:5C:B9:12:09:C1:B2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7A8C00C0A40DD8765AD0818C3D4500D8D1465DB5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95922c65-906c-414e-8807-a0500d403602.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.139.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8c:00:c0:a4:0d:d8:76:5a:d0:81:8c:3d:45:00:d8:d1:46:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=9974e14cc8941869df8ef3323151ce0af2d6fa3b4dc5bebbad7086aa0581d343, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:a9:aa:bd:10:27:68:fa:9e:66:c3:51:43:
12:4c:86:74:c9:18:24:8e:18:2d:43:ca:7e:bb:fd:
70:96:fd:84:4c:a3:e8:18:b3:34:0f:8e:2c:1f:4b:
83:12:f9:72:c3:45:d7:3d:fa:14:fb:a2:ad:db:dd:
42:6e:14:cc:7a:71:43:b6:bc:f7:58:e9:ea:d7:b0:
d5:cf:a2:19:47:f7:d6:32:71:b9:b1:93:2d:c5:c6:
6d:0b:78:79:77:fc:33:bd:5f:9a:f7:71:8d:35:19:
06:d2:60:06:39:59:cd:1b:8a:b4:54:5f:8b:c9:89:
54:95:ef:45:cf:d2:ee:90:9d:b3:15:92:5a:89:4c:
62:b9:3a:05:52:35:d7:40:d8:62:e7:f7:26:4f:3e:
0a:33:ae:4e:11:75:6b:24:09:3f:d6:2d:fb:87:22:
75:14:b0:66:66:2c:7d:e2:0a:28:a7:97:c7:04:17:
fc:77:cf:6d:fb:14:8f:06:d2:9d:f2:27:71:1c:cf:
60:59:c7:e1:5b:10:b5:d9:62:4c:05:d6:19:ea:ac:
2d:5c:51:02:59:b3:55:5f:41:a5:b7:9a:27:19:65:
bd:59:56:ef:7b:64:05:86:5a:34:4e:b6:9e:0a:58:
74:bb:49:7d:1b:ae:92:c2:09:66:52:75:3e:f8:6a:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:F8:61:31:44:71:23:37:71:04:06:67:D4:5C:B9:12:09:C1:B2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95922c65-906c-414e-8807-a0500d403602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:76:d3:d5:bd:25:62:b5:03:43:55:97:8c:39:a2:83:a2:a8:
c4:bf:92:db:ac:82:a5:4c:bb:ce:77:18:15:9a:32:72:9d:3a:
4e:bc:ed:8c:0c:3c:9e:43:66:81:7c:86:33:7a:3c:81:1f:18:
a6:b4:d1:b6:09:ea:f9:22:9c:16:95:9c:c7:f6:a6:7d:05:84:
cc:be:28:c4:32:8a:45:cd:09:eb:be:3e:c7:21:26:8f:73:2a:
31:f0:1b:bd:a6:91:c0:0d:18:bd:c6:59:a0:fb:4e:11:ad:1d:
1e:36:c5:51:f9:77:41:62:b8:46:6b:6d:e0:eb:95:86:b0:94:
34:80:b3:91:b2:45:c7:25:ac:34:51:8d:3c:2f:75:f0:f8:6f:
8e:88:62:4a:d2:c3:0b:ea:d4:fe:48:b5:6f:7b:c7:a1:e3:a6:
7b:04:fd:b5:bd:1f:19:d8:b1:91:4b:bf:34:39:19:c4:6c:74:
eb:3b:a4:80:43:6c:11:67:55:00:e6:f4:4d:ef:3b:03:49:3a:
f0:c1:6f:00:f4:01:6c:ff:8e:2f:ae:47:e6:1a:9c:c8:62:4c:
7c:25:bf:45:2f:c9:67:72:0c:77:d3:46:5d:f9:43:13:ea:a4:
72:85:c8:ba:26:b1:b7:4e:cd:59:62:3c:a6:ad:d0:a6:76:8f:
74:0c:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org