Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a32b75d1-fb93-459a-bd22-b8f58bccecf3.roa
File: a32b75d1-fb93-459a-bd22-b8f58bccecf3.roa (raw, json)
Hash identifier: J8QZsCFCKp6Fcv8Dw5JNhAP1XhrSsh8dT3Ir9RKE5Hs=
Subject key identifier: D0:A4:01:15:00:74:91:50:19:03:FD:EE:3D:BF:EE:D1:79:6A:BA:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5547611A0191BCDB3A233AE941BB3EE30AAEFADE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a32b75d1-fb93-459a-bd22-b8f58bccecf3.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.0.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:47:61:1a:01:91:bc:db:3a:23:3a:e9:41:bb:3e:e3:0a:ae:fa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=8f59d4ec795be44d81b3cdbebe13524acd0b512ea24732516ea0013b0eda21f3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:06:46:d5:17:ac:ac:29:2f:9f:ea:e1:af:
cd:5d:70:a6:97:02:1a:97:9f:ca:3b:49:34:50:fa:
82:e5:3a:c4:44:f2:78:bc:9d:18:b6:d8:cd:b7:6b:
3c:b0:ff:86:e8:86:10:7f:82:a4:62:3f:c3:8c:69:
af:50:b1:ff:29:95:d9:ec:8c:18:31:b1:9a:51:85:
5d:02:46:37:7f:7a:e5:0c:93:32:38:ac:96:2d:b7:
96:64:50:df:37:06:8a:41:e2:c7:a7:a9:b9:7c:92:
9c:8c:dc:fa:41:0e:58:6c:b4:5a:d8:4c:de:2e:08:
00:63:87:f4:29:fd:a8:b9:4f:4d:f3:e2:33:60:fc:
c1:78:84:b3:1a:da:79:95:38:2a:2b:4c:d1:98:a6:
c0:a3:58:f1:95:d9:ef:2a:7d:d4:51:1e:fb:c6:c4:
b2:0f:7c:6d:33:6b:19:45:12:b7:dc:06:65:ee:d1:
12:20:bd:32:92:19:a6:70:25:21:8c:7b:28:d9:b2:
b3:cd:cb:bb:f1:33:6e:62:2e:73:7f:b8:d2:ec:1d:
05:dc:e0:45:fe:ed:7d:fc:af:db:5e:63:54:e3:1f:
19:ff:79:28:8e:08:02:44:e0:32:1a:46:73:c2:63:
b6:39:16:45:ee:2f:b1:b3:83:39:fc:8c:90:ec:89:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:01:15:00:74:91:50:19:03:FD:EE:3D:BF:EE:D1:79:6A:BA:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a32b75d1-fb93-459a-bd22-b8f58bccecf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/17
Signature Algorithm: sha256WithRSAEncryption
30:c2:61:e2:d1:79:ff:93:a1:60:0e:d0:d0:86:31:ea:f4:cc:
ec:a4:6d:3f:8f:39:13:e3:fa:75:45:d6:66:5d:d1:79:04:ee:
00:7e:63:38:e5:53:7d:44:d7:bd:c0:51:0c:f6:9a:34:5f:56:
ce:f6:16:e3:0e:d2:4c:b5:28:18:ec:61:e6:eb:87:00:e3:f6:
91:15:c8:7a:0b:43:38:9c:64:8b:28:13:b1:eb:e0:3a:5a:dc:
5e:c5:bd:a6:44:81:e2:82:61:e9:30:60:15:78:c6:ab:4b:3e:
2a:22:a4:0d:c6:c2:fd:fc:05:63:61:9e:38:31:cf:d1:72:43:
1c:aa:52:66:23:e4:77:0a:64:40:3f:d4:ea:70:b2:d9:99:ac:
90:ed:94:16:c3:47:02:a6:ab:cf:ac:bf:22:6f:9d:4f:05:21:
d1:5a:8b:9f:41:55:53:57:95:ba:06:e4:bb:f3:af:26:1a:dc:
0d:f7:c5:50:ab:37:a3:39:96:c8:ab:e2:46:eb:90:6f:d6:bb:
0f:f4:d5:f2:8c:cb:37:78:11:35:a8:38:e5:bb:95:3e:77:8b:
eb:b9:90:d6:9d:76:bc:48:6c:52:76:9f:50:c3:f3:58:13:a4:
d9:81:f3:ac:93:1f:f8:f0:cc:93:35:a2:bb:2f:e8:ad:47:dd:
06:71:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org