Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa
File: 9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa (raw, json)
Hash identifier: ItupxoLLnlK1wZAOdHmDlfEmlB1r+RWUO/P8ToepA1Y=
Subject key identifier: 49:B9:BA:BC:03:1A:33:47:CD:3A:91:88:62:5F:E1:40:AB:CC:AD:6C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4E8FBF8B4F844E8B2CA43DEEB482ED41DA45BAAE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa
Signing time: Tue 11 Jun 2024 00:00:00 +0000
ROA not before: Tue 11 Jun 2024 00:00:00 +0000
ROA not after: Tue 16 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.0.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8f:bf:8b:4f:84:4e:8b:2c:a4:3d:ee:b4:82:ed:41:da:45:ba:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 11 00:00:00 2024 GMT
Not After : Jul 16 23:59:59 2024 GMT
Subject: serialNumber=bc73ea206b10c0ab2f9ccced34dd52bbd068e9bd981c317ca4ffb97f9dadb491, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:88:e6:bd:0b:1b:9b:aa:a0:91:52:86:4f:
f0:11:02:c0:18:ae:09:80:41:c0:b1:08:86:73:6f:
9c:60:83:e9:7e:8a:bf:b2:ab:c3:8f:b2:e7:7b:a1:
b7:b4:aa:8f:a6:50:84:70:02:45:d2:60:1d:43:18:
5d:85:7f:97:e9:e2:39:16:d4:09:15:8c:cc:8f:6d:
1f:b0:a1:27:ca:04:d2:45:45:94:07:0b:7a:39:00:
e0:42:29:d0:6d:51:9a:73:ae:5f:97:bf:ca:5b:16:
93:e2:d3:b0:91:0c:8c:bc:9b:c2:4e:bf:76:5c:f8:
27:85:1d:56:77:fa:25:95:51:66:a3:2c:78:be:63:
59:c8:30:dc:37:1b:96:08:bf:e4:46:cf:bb:49:6f:
ca:29:d1:47:e1:40:3a:3c:1b:cf:a9:ed:35:58:f4:
f4:98:ca:a7:d4:e7:38:46:a3:e5:58:3b:75:26:fb:
67:98:66:a0:8b:32:fd:45:59:f9:0d:a1:92:f0:58:
bc:0e:ad:50:a2:02:d3:96:82:5a:e3:38:41:0c:71:
87:95:de:9a:29:8d:66:16:00:72:fe:46:48:1d:e9:
63:39:5d:da:31:a7:57:88:29:6c:7c:91:9c:2b:f4:
f1:0b:c9:d2:34:8c:c8:12:a4:da:b7:71:15:e5:4a:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:BA:BC:03:1A:33:47:CD:3A:91:88:62:5F:E1:40:AB:CC:AD:6C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:62:2a:4d:cc:0e:9a:8b:f4:08:86:f1:59:b0:78:d2:1e:51:
bd:a0:ee:ac:98:43:e9:1d:12:80:6d:73:51:13:38:cd:1f:4f:
34:db:a3:b3:0d:7b:a6:f6:ad:eb:e6:e6:22:18:48:2e:20:0e:
b3:8d:35:b6:30:08:f4:51:10:a9:53:66:e4:8c:d7:6a:f5:73:
40:3a:28:41:6d:fa:3b:23:63:c8:d9:c2:6a:81:88:79:08:e0:
97:69:9a:d5:52:74:d1:de:ea:db:dc:56:25:58:8c:77:35:c6:
83:c1:6f:45:61:b9:d4:cb:00:ab:7e:29:91:2b:e9:4b:5c:a3:
cc:ca:21:e1:fc:ad:33:cc:e3:fc:bd:3c:7f:63:50:98:0d:51:
84:2e:a1:1d:fe:85:64:74:35:7c:de:f4:c2:33:0d:6b:9c:c8:
35:6c:19:df:80:e0:ac:92:a1:dc:0f:52:ac:aa:b8:1c:39:87:
c1:65:9e:e8:fc:2e:a2:8f:03:0a:f8:8f:67:f1:61:6e:cd:bd:
28:84:77:a5:bc:7a:22:9b:eb:c7:60:1d:05:b5:b7:1d:18:d2:
40:f5:68:82:dd:2f:a9:53:af:2d:11:ee:27:72:0a:44:46:75:
88:62:47:48:05:fb:f3:37:b2:8a:cf:94:dd:3c:88:f5:b2:c5:
1b:74:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org