Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
File: 9f77493f-a89e-41b4-9b06-e8928fedf80c.roa (raw, json)
Hash identifier: p3vWbUXlrJu22Fo/92QgoBfOAD16/oKcTjaMHFd09WY=
Subject key identifier: 78:F8:50:D1:0B:93:00:9B:E9:15:6A:F9:04:E0:54:25:D3:5F:D0:C6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57096D2C383E34AB1CB598DBAD07FA5F5B3F68FF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
Signing time: Tue 11 Jun 2024 00:00:00 +0000
ROA not before: Tue 11 Jun 2024 00:00:00 +0000
ROA not after: Tue 16 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 85.213.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:09:6d:2c:38:3e:34:ab:1c:b5:98:db:ad:07:fa:5f:5b:3f:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 11 00:00:00 2024 GMT
Not After : Jul 16 23:59:59 2024 GMT
Subject: serialNumber=f523a2f7256a0ae41604ca7ba5a11794be676294c683e8ceb62960b943e7af81, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:8c:06:2a:d5:1c:90:91:b3:d4:72:70:5b:
7a:ab:36:1a:39:4e:0d:25:65:15:66:90:f2:d4:c1:
a7:26:84:d9:a7:b7:7a:e8:44:2a:b0:8c:4a:fb:ea:
8a:c8:82:af:01:fe:f7:54:54:99:37:f4:ce:50:1b:
44:d6:7e:32:e5:95:25:ee:ab:54:62:a6:d6:82:49:
f6:b0:83:e7:5d:d7:d4:43:76:7c:9a:85:23:95:19:
45:e2:52:c6:fa:c7:02:be:3f:8e:99:b0:7e:26:6e:
8a:e5:47:27:95:0b:30:bc:1f:f5:1e:65:64:4d:fb:
de:ed:4d:8c:9b:46:f3:6a:17:ec:43:96:5b:7e:a5:
7a:c2:c8:ff:8a:d5:02:1e:78:b5:dd:89:63:c6:7c:
9d:5f:ef:d0:55:d9:d9:8d:c9:a8:f7:9a:bb:23:ef:
e9:2b:e3:93:a4:0e:a6:7a:37:1c:8d:84:1b:91:13:
b4:e0:cc:9d:09:31:3a:57:d0:48:ea:6e:29:50:48:
f9:dd:cc:46:d3:8e:84:ee:15:ae:54:8b:0e:ca:d3:
f0:9d:ec:a6:e1:7b:ed:1c:f6:ab:bb:24:69:e7:74:
f3:60:5c:4a:9b:fe:a5:26:e3:ea:43:8d:02:84:a3:
07:2b:10:ce:05:ac:d3:5a:97:ec:e3:c4:61:66:30:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:50:D1:0B:93:00:9B:E9:15:6A:F9:04:E0:54:25:D3:5F:D0:C6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:f3:b3:df:e0:e8:8f:95:a0:a1:0b:8a:cd:59:26:0d:3e:95:
11:61:55:81:9e:a1:ac:9d:d9:1b:f4:72:cf:28:7a:84:cd:49:
b6:29:54:17:e0:c4:65:62:3c:d2:74:7e:e1:78:61:6c:19:23:
1b:95:8c:2c:6b:ec:2c:9c:4d:94:40:28:ce:8e:ec:e8:16:aa:
fe:b7:99:44:14:00:06:b1:d4:13:97:19:53:24:16:00:38:3c:
f7:42:1f:97:3d:c9:48:81:95:d6:36:b2:cf:1b:da:9c:7d:fb:
5e:55:8d:14:7b:9c:b7:e5:d2:bb:cc:82:d3:fe:77:a5:52:30:
18:6f:c7:13:bf:d4:c9:36:1f:ec:21:fa:85:7f:19:fc:11:a5:
1c:f0:5e:1c:7b:0c:16:d5:c0:5a:29:16:e6:6d:e5:db:0c:fe:
fa:8d:f7:e5:f3:76:25:0b:be:48:cc:b1:8f:29:27:46:b0:b3:
c1:e2:bd:c5:5f:aa:04:79:3f:f5:15:e2:69:ca:ed:8c:ea:f8:
0d:1d:bf:35:39:8f:b2:9c:77:3a:e9:8f:2d:bd:b7:f4:c6:b4:
ca:20:91:00:75:04:5b:de:14:77:05:c8:eb:34:83:db:fe:de:
0b:e0:1f:6e:a5:01:dd:ee:34:31:3c:b3:5b:83:e4:02:05:44:
b9:23:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org