Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
File: a15337be-3f91-4e80-a89d-26de9d37ed80.roa (raw, json)
Hash identifier: YIwkc5tWPS7j3erwpHouNRNU6SXz6iOzxqZ9rsZHpFE=
Subject key identifier: A4:D6:9B:A4:8B:EF:15:0C:0B:3B:A8:4D:1A:59:33:0D:A0:EB:DF:79
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3878BBB3738861FAD637323E982BF7A9D71547FD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.0.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:78:bb:b3:73:88:61:fa:d6:37:32:3e:98:2b:f7:a9:d7:15:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=fff0eff754070b7862c0a1734b98feafe5fcebe70d8903a2968c3e5904a40b08, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:63:cc:2b:95:51:6d:25:2a:e2:b8:46:8c:
84:d9:30:fb:ac:73:97:5c:40:78:2a:95:1a:7b:a6:
3a:53:58:92:ac:cb:3f:21:e1:47:e9:d0:b9:03:cd:
a3:ac:a6:c9:61:4a:a4:8c:70:e0:73:d0:2a:4e:25:
8e:30:de:ac:4e:cb:d8:50:84:df:da:f6:90:ba:ef:
b1:4b:b9:4a:8f:e4:af:79:8e:03:f7:2c:36:19:dd:
e8:83:3c:10:d0:53:42:b0:76:f9:f0:54:69:f6:01:
11:92:06:e2:b9:8b:60:42:22:87:06:b9:06:52:96:
42:d4:fb:7b:6a:ec:95:a1:2a:e6:91:c7:0f:24:a1:
f6:4c:75:5f:c7:84:ce:ca:c2:16:c8:f8:79:ba:5f:
63:6b:05:6e:fd:49:f7:f7:77:b4:40:94:72:89:36:
7e:21:80:4a:ac:57:7f:3c:dc:83:91:08:c0:63:14:
de:b3:db:0e:76:3f:62:de:20:bc:71:e5:58:f8:85:
90:2e:17:ba:1b:0a:02:90:e2:bf:c3:64:da:e6:a6:
41:ce:fb:5d:a3:70:41:6f:8f:1b:fa:06:31:45:37:
9c:72:2d:b7:90:dd:bf:91:34:72:44:cf:8e:c1:51:
73:75:c3:a3:44:13:5c:b8:17:4c:fe:71:e1:9f:f3:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:9B:A4:8B:EF:15:0C:0B:3B:A8:4D:1A:59:33:0D:A0:EB:DF:79
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:1f:02:ae:9f:38:92:bc:51:76:a0:d5:b7:0c:63:30:e9:fe:
5c:c6:bd:33:21:ac:18:97:00:c5:c1:c9:ae:c7:b6:00:46:ff:
38:a2:e1:15:fc:2a:35:01:92:e4:4d:59:17:ba:db:84:ed:17:
e2:47:3d:c1:15:83:64:70:ec:bd:22:cf:08:fd:df:f3:0c:bf:
8a:05:83:01:de:4f:05:39:ef:9c:e9:58:c9:77:7d:f1:1c:47:
3f:d2:19:d1:2f:7f:be:b2:50:b4:54:10:7a:f3:2f:ca:d5:ea:
03:03:52:09:68:41:44:d7:d3:c2:e7:86:2d:a8:9f:57:0e:38:
ea:ce:62:51:b4:83:81:89:71:b0:8e:e3:5d:ce:f2:9c:4a:0a:
2d:76:f3:6c:2d:50:4d:b3:80:6d:41:1b:a6:ca:e2:3f:00:27:
25:4c:e9:9e:ba:9b:6e:f4:75:d0:7a:5c:e2:79:96:bc:b4:09:
6d:8f:c8:78:61:2f:69:8d:0a:18:25:e8:f7:09:df:08:d5:ca:
44:61:14:dc:bb:c5:7c:c6:51:34:60:dc:15:24:b9:40:87:2e:
c2:d6:bd:d2:f9:5d:36:98:87:86:ab:8c:67:6d:d3:6b:ec:df:
10:1e:e5:d8:fe:55:fb:6a:38:c0:06:25:a7:7b:34:87:8e:34:
50:7e:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org