Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97a9749c-f933-42d6-a093-7bf3a4de27a5.roa
File: 97a9749c-f933-42d6-a093-7bf3a4de27a5.roa (raw, json)
Hash identifier: 4jZuVse8wwxZXRshUNYM7eXA9AXGSrYEW5cV+uBTZjg=
Subject key identifier: 0B:1A:B4:5B:28:93:90:8F:3F:87:06:E6:E3:6B:A5:AF:AB:13:5E:19
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 644D07C8EC8504C253B87C7875EF067D20B6671A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97a9749c-f933-42d6-a093-7bf3a4de27a5.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.69.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4d:07:c8:ec:85:04:c2:53:b8:7c:78:75:ef:06:7d:20:b6:67:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=4c65136da08dc1f939a0fe8c915e7ed3f7b05a9ab1b480bd75f8d56123496718, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:fc:47:ce:68:7e:9a:3a:7a:1c:1e:2f:71:
14:ae:5f:16:26:ca:39:23:dc:cd:ec:39:9e:b5:5c:
ec:5b:fb:b5:65:ff:4a:c8:9e:08:72:33:c5:ba:ee:
e8:83:ed:dc:74:df:ac:ca:4e:af:a9:28:26:5e:b7:
68:87:f7:70:9e:69:d4:4b:2e:a6:cb:af:09:81:b9:
ac:7b:80:be:76:ff:a4:16:f8:5b:de:96:8f:04:ff:
e4:e8:2c:be:f3:56:98:d3:50:d9:41:0a:7b:ad:bb:
24:56:c0:e6:47:54:e4:e4:38:c0:6c:de:1f:93:30:
43:80:c7:bd:b3:ec:76:f9:7a:9d:e0:fe:a2:d3:12:
c9:2d:c2:8a:99:86:35:f7:67:1d:8d:17:d1:7c:48:
ae:53:90:5c:d5:ad:0a:20:d0:e7:ef:e3:0e:dc:1c:
39:26:5b:04:16:0c:b6:a1:f3:b1:00:82:c0:f4:a0:
ab:08:98:f5:fa:0c:49:18:e4:a4:cd:67:23:29:2a:
3f:cd:94:20:15:e6:f8:70:04:59:f1:9b:a6:3d:41:
e7:92:0f:30:ec:1b:36:9f:12:1a:87:90:3e:2c:85:
fb:c2:90:6d:47:54:1f:db:bd:25:98:80:fb:f4:4d:
2f:aa:52:1d:74:3c:30:35:47:33:4b:46:78:e8:b4:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:B4:5B:28:93:90:8F:3F:87:06:E6:E3:6B:A5:AF:AB:13:5E:19
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97a9749c-f933-42d6-a093-7bf3a4de27a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:69:e3:c8:fc:08:a4:da:1b:a8:f4:da:ba:5e:20:4f:6f:4e:
4c:69:72:84:26:97:ad:be:1a:90:fc:62:79:24:52:6a:55:94:
4a:9e:26:c9:bc:f1:95:64:73:d5:06:35:de:93:af:bb:49:87:
da:c2:ee:19:ee:7e:01:37:d8:3b:cd:7a:42:03:ef:1c:f3:a5:
ff:96:50:a9:5a:b3:b0:2c:8a:78:bf:a6:98:3d:81:84:e5:99:
0e:01:f8:31:81:5a:85:ef:a2:f2:1f:18:24:5c:c8:42:1c:72:
40:f1:39:b3:6b:f1:8e:69:33:4a:0e:8a:4e:cf:c1:c3:80:f2:
7b:52:cf:bb:c0:2e:70:88:45:13:4e:bc:52:e6:74:aa:d2:a7:
46:1e:a1:25:c1:f2:0e:41:00:dd:be:44:72:96:ca:9d:00:3a:
2a:3c:bb:c3:2a:04:47:ab:6a:80:42:82:ba:24:86:54:1f:42:
23:10:9b:5b:b5:66:00:e7:cc:4f:f0:65:77:94:cb:f9:98:5b:
4e:d7:e6:6b:73:ef:8f:7d:2f:e5:6f:b1:3c:54:58:5b:7e:9e:
fe:2b:48:37:9d:bd:a6:60:1b:c0:90:4b:48:f7:83:37:86:aa:
5a:02:6f:76:91:8a:ec:63:35:59:90:3b:e9:21:92:06:3b:fc:
df:d8:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:21 2024 by rpki-client on console-fra.rpki-client.org