Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97585122-fbed-4029-849a-162097054103.roa
File: 97585122-fbed-4029-849a-162097054103.roa (raw, json)
Hash identifier: e/sXbUov7QyVXh1lgOv4SmT50p4ntWCz/H6awY9MYdY=
Subject key identifier: 19:2A:8C:A1:9C:CD:5E:41:4F:16:9A:92:E6:75:B9:9A:B2:BF:05:AC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 298CD144FE270920E68BE65EBB93FBBC3C92118C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97585122-fbed-4029-849a-162097054103.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.72.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8c:d1:44:fe:27:09:20:e6:8b:e6:5e:bb:93:fb:bc:3c:92:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=d0563986c58196d9b1a5a535113bf268ad9e28abde5e767604887fb01f8935f5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:a6:56:d1:d1:45:6e:71:5a:38:9b:e8:ae:
1d:11:78:da:37:d5:e3:e4:2e:d8:b3:e7:35:97:ef:
e2:ea:14:31:3d:eb:14:96:9d:27:8e:d1:b5:35:ae:
e4:72:49:a0:ab:71:11:07:da:bb:c2:71:ac:5e:dd:
54:f2:1a:05:67:20:84:c7:0f:3d:de:4b:c2:ea:b0:
84:84:f3:ff:93:f0:52:25:39:fc:d2:6e:7d:db:86:
5c:c1:b7:76:d0:44:af:e7:33:28:22:19:50:b2:cd:
fa:44:a0:a2:a4:3d:55:b1:9a:20:5b:05:cf:96:76:
04:a1:69:ac:ba:37:03:92:cd:60:3f:37:ee:90:82:
87:2f:77:2b:f0:27:c2:c3:52:e8:86:5a:39:7f:03:
2b:20:c2:af:e6:03:77:29:5c:02:5c:7a:5a:3e:23:
64:bd:5a:81:31:6a:8d:99:52:1b:2c:71:a8:f3:b7:
87:71:8a:7d:ab:69:2b:68:99:45:25:87:25:d5:45:
2d:9e:ac:ed:dc:48:63:23:5e:70:77:f9:e8:4b:63:
38:07:66:96:ee:d1:57:0c:1d:3d:38:42:2c:9c:c6:
6d:65:0a:aa:c5:ea:ab:6b:41:c3:ab:61:9d:a3:61:
a1:c0:a1:1c:b9:67:20:3d:f5:d3:e7:e9:d5:c7:1d:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:8C:A1:9C:CD:5E:41:4F:16:9A:92:E6:75:B9:9A:B2:BF:05:AC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97585122-fbed-4029-849a-162097054103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
04:5f:5f:12:70:c4:fb:55:6f:0a:75:fc:95:51:da:a1:22:20:
3e:2d:3d:fa:47:61:a8:4c:13:a0:87:76:2b:cc:17:de:28:30:
cd:2f:1f:d8:9f:10:4e:d7:dd:a3:62:18:a3:0e:d3:21:07:80:
80:8d:8e:ba:04:8f:05:da:bc:ad:a3:17:ea:6e:04:4e:4e:d8:
65:f1:41:25:13:63:b8:22:90:1e:71:4f:d6:41:b8:09:e2:64:
bd:43:67:e7:d3:a7:9e:57:c8:5d:20:2d:18:64:00:34:fb:22:
45:ef:31:96:a5:d7:c9:8d:6b:36:dd:80:b2:9c:ed:fb:ff:5b:
a1:8b:e0:a9:33:27:96:3e:e2:2e:04:ec:08:9b:ae:c6:e4:83:
30:a9:52:a4:33:31:91:df:86:7a:29:e5:8e:e9:a0:5a:e9:45:
38:81:a8:d0:12:63:90:d5:7e:6a:f6:8f:16:40:81:e5:c7:5a:
51:89:a0:0d:72:17:61:05:b2:89:0d:2e:59:21:71:74:36:0b:
28:77:a9:26:08:4c:89:28:5c:fa:f9:6e:51:bc:cd:bc:f9:df:
da:57:9c:fd:81:e7:00:8c:67:9b:22:fd:c2:1c:95:03:e8:7b:
ce:98:90:b2:9e:77:e3:f5:9d:8c:e6:6a:8f:5a:cd:99:c6:8e:
98:92:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org