Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a10761b8-e85e-4339-a45c-82ab3615108d.roa
File: a10761b8-e85e-4339-a45c-82ab3615108d.roa (raw, json)
Hash identifier: R56xKfNJkQbZQfBFA47LXR2XmgOTeFidrgKEN5sCEI0=
Subject key identifier: 4D:D4:6B:13:E0:CF:C5:74:C6:08:D7:3A:62:AA:FF:01:41:E3:D3:67
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 71D708DFE6B3D98183589691D3D4B8F896B35829
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a10761b8-e85e-4339-a45c-82ab3615108d.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d7:08:df:e6:b3:d9:81:83:58:96:91:d3:d4:b8:f8:96:b3:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=a456fbd4f9e3c8c22a2f416785ce8242cf3b02d953aaeb09442260024a1440f1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:90:85:2b:b8:b0:bd:4d:cd:e3:74:65:c2:
9d:81:4a:b2:19:94:8b:be:5e:7b:18:33:b3:c6:5c:
fe:bc:d6:d5:1a:a2:68:6c:0d:fc:93:d9:39:19:fc:
2e:a7:81:fc:5d:6f:36:fe:f0:72:cb:72:e2:b3:77:
52:c8:44:f0:60:c0:d0:df:59:c1:54:97:bd:d9:98:
1a:e5:3d:a5:ef:98:aa:1a:46:38:e3:d0:f9:1a:26:
da:88:b1:e5:69:9a:23:ae:d4:44:97:6e:6c:23:b4:
85:89:31:1c:4c:f7:84:cb:5b:c1:70:e8:0b:c9:26:
99:f7:18:82:76:97:79:e7:92:1d:09:00:b9:16:a9:
a9:71:47:cc:8f:14:ae:c5:d2:0c:44:f4:c5:bd:30:
a6:a0:dc:58:17:47:c6:6f:a7:b1:f1:34:9b:4b:6c:
f3:d6:29:0e:56:58:49:c4:ad:22:84:74:bb:a2:58:
95:9d:df:cd:d9:4a:a0:80:37:34:c9:11:45:23:8e:
e9:44:71:f2:4b:31:e3:3f:45:20:03:17:38:52:a6:
d7:c6:b1:d0:25:f3:95:7e:c2:12:4c:6b:1e:a1:fd:
83:30:32:71:11:53:0e:df:3f:4e:49:8d:2e:aa:c1:
fb:79:b6:b4:2a:22:b2:d7:38:bf:01:cd:fd:1f:da:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D4:6B:13:E0:CF:C5:74:C6:08:D7:3A:62:AA:FF:01:41:E3:D3:67
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a10761b8-e85e-4339-a45c-82ab3615108d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:4c:6c:c7:71:7d:e5:1b:bc:a1:00:48:31:b6:78:c9:f6:c8:
ab:3b:ff:f8:57:b4:97:54:e6:74:95:bf:62:b6:6a:9b:aa:7c:
4e:31:07:04:a2:5e:5b:ef:06:ad:3b:ba:c6:ae:de:75:c0:e9:
b6:f0:2b:cd:1c:44:53:9a:4f:9a:c3:a1:6c:63:da:5b:56:07:
fa:a5:4f:46:31:fc:db:80:ca:72:6c:a6:ac:ae:26:5b:a0:61:
f7:9e:d7:ba:da:71:84:fa:af:20:d1:c4:c5:f1:41:31:36:d7:
2b:14:25:ba:75:56:c1:1f:b2:54:d9:58:4d:16:c2:49:21:d2:
f3:c2:1f:d7:bf:0e:6d:85:89:3a:f4:fd:05:ad:8a:06:4a:9a:
b7:49:28:fd:12:f4:e0:2d:cf:77:05:50:38:05:7f:a2:b5:43:
3d:8e:04:39:f7:6b:f7:51:05:48:49:46:8d:94:17:b5:b9:7b:
3f:5e:9f:16:8d:f8:88:66:e7:7f:49:56:f0:c2:5a:c8:4b:52:
91:66:cf:38:5b:f4:45:d0:46:0a:ea:46:0c:d6:32:e0:00:be:
7b:cd:08:31:0f:6b:49:98:42:ff:aa:f5:5e:ea:1a:36:a9:53:
12:ec:55:dd:42:35:0c:4e:88:13:e7:e7:36:82:b0:00:fc:a1:
05:21:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org