Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
File: a2b57228-1239-489b-a0ad-c926f19f72f0.roa (raw, json)
Hash identifier: qocTq+hmxqkSVbyszPrUNjQzUJmCR2LVm5Q9D7BIUkM=
Subject key identifier: 62:F7:8D:DD:40:8A:D7:E4:D5:B3:3B:92:37:73:2C:F5:CE:2E:6B:84
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 25C3E7A70C109A72BA14BD48D22FBC312975C7B1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c3:e7:a7:0c:10:9a:72:ba:14:bd:48:d2:2f:bc:31:29:75:c7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=7aa08d2c83338edd8e75328e7241040c48f31588814070e3b0a6785a0eb76386, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:c7:5e:d2:b4:fc:7a:f4:ed:7f:04:10:95:
09:c7:98:64:d2:61:3d:cc:12:09:a7:2c:86:45:5d:
59:07:5f:d9:fd:84:9b:88:0f:f8:4a:bf:b8:d6:68:
f6:61:cc:c2:94:1f:84:79:62:0a:ed:1c:d7:99:55:
c7:fd:b4:66:e4:6f:37:97:61:c0:f6:9a:ab:83:3e:
1b:47:7f:c8:5a:30:a4:90:6e:a5:f5:43:fd:e1:eb:
b1:d4:78:fc:ad:90:c9:c4:f8:c0:ac:d8:3f:0a:a8:
5c:dc:99:b0:70:75:16:a6:60:88:4b:90:d2:8c:7c:
10:b4:ed:e7:90:2b:c8:73:3e:7a:5a:a3:58:28:92:
97:c6:fe:2e:0d:a4:df:d7:61:4d:7f:09:4b:e3:c8:
85:82:b5:31:97:d6:1d:90:d5:bc:5b:72:ac:7a:16:
7d:cb:9d:d9:cd:cc:5b:e0:0e:1e:b4:e2:80:7f:0a:
30:60:e5:a7:46:d5:40:56:46:07:7d:e2:d1:a4:b6:
28:cf:8a:9d:e7:0f:b4:27:6d:1b:a7:5a:b2:a1:3e:
16:04:05:fb:09:cb:2e:7f:0d:ff:4e:4a:25:1e:03:
d9:bc:fd:32:b8:16:1f:d7:e4:f5:5a:43:30:6b:42:
9a:2b:47:3b:3a:70:2f:36:89:16:e1:03:90:60:2f:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:8D:DD:40:8A:D7:E4:D5:B3:3B:92:37:73:2C:F5:CE:2E:6B:84
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:3c:30:2f:6c:6e:f8:bd:94:09:f5:7a:7c:f2:88:d4:62:a4:
30:81:29:fe:0e:f8:80:16:dc:7b:7f:0c:44:4e:e0:f3:ae:0c:
cc:ca:ce:e5:76:a5:42:5a:b5:02:36:fb:cf:90:f8:ab:81:e1:
dd:1f:3c:0d:e4:34:02:36:c8:60:1e:db:00:be:32:1b:0f:d4:
93:21:c8:02:06:b9:02:37:d9:2b:ca:02:22:43:e3:5b:eb:c3:
80:5f:b8:d2:43:01:9d:05:60:7e:f1:3e:6d:48:69:1b:8e:53:
fa:73:c6:74:a3:49:fc:4f:a5:41:3a:66:de:29:e3:0a:df:f5:
f2:8c:17:0e:66:2f:0a:b5:d6:3d:52:13:a5:25:f6:8e:20:49:
be:e3:2a:97:b4:91:84:3f:a8:18:f2:16:e0:de:8d:6e:a0:25:
67:d2:71:80:49:3b:18:df:37:c4:f1:f6:64:79:91:e0:52:84:
9c:f8:f2:90:89:0a:79:50:53:72:6c:7c:6b:cd:75:ec:3f:66:
22:ec:6c:89:a0:26:42:58:54:d4:99:f0:e1:37:0f:29:d6:fe:
88:0f:27:03:9b:c2:c9:d2:53:7b:bb:17:c4:c1:ac:d7:57:34:
7d:06:98:e9:47:84:5d:f5:cd:6a:15:41:d5:81:ce:e4:f7:08:
33:b5:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org