Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
File: a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa (raw, json)
Hash identifier: cQXlMibauq27qsh9NiOs1eEioAEm8QZWSVUbzvc4CYU=
Subject key identifier: B6:4B:55:4B:53:C4:DC:E0:5D:59:5A:B1:6B:91:84:D5:B8:8D:2A:5E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 59DC6DC4CCEE7F56BE6087EAC44DDACD085E54C5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dc:6d:c4:cc:ee:7f:56:be:60:87:ea:c4:4d:da:cd:08:5e:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8b8f04beb443456e68f1899c010cf15d0f3870cc3acbf66150258434b90abc3a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:7b:10:ca:15:53:de:4e:82:77:b3:75:80:
3c:1b:48:a3:a9:ed:e7:fa:64:87:43:ed:03:e6:bb:
b2:9c:65:7a:28:e0:b0:85:14:a5:01:3b:81:46:23:
4b:d1:14:b1:5f:ba:bd:20:88:42:20:dc:ca:fc:18:
e7:c6:de:5b:5c:10:e0:f2:60:5b:f9:12:ab:9d:4f:
08:06:9d:13:b6:51:cc:20:cf:5a:6f:61:c5:8b:69:
c9:1c:23:f2:2f:a5:95:e0:2b:74:c8:32:28:22:c7:
17:b3:cc:c4:c2:15:ce:aa:b4:35:7b:26:31:e6:83:
3b:b1:0e:8e:e4:38:b0:f1:49:56:8b:95:10:5c:47:
81:a2:27:9c:44:16:16:36:7b:15:f8:15:48:4d:3e:
67:fe:e4:30:8a:b8:db:b5:ef:7b:2c:0a:f1:54:dc:
09:e5:7e:33:c5:2d:db:f6:1e:8d:14:5f:13:7b:cc:
43:21:7d:ab:6c:60:c7:a4:c7:8f:6d:bd:03:19:9c:
6a:00:12:98:b1:f3:3b:64:1c:43:1c:45:90:78:1c:
8f:0e:25:a4:e2:f3:59:14:7c:58:ba:60:8b:1a:57:
51:d6:27:f2:a0:09:a9:a6:7a:5e:71:b9:e3:9a:1c:
2c:cf:99:99:bc:67:24:a5:2e:35:fb:74:b7:48:d9:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:55:4B:53:C4:DC:E0:5D:59:5A:B1:6B:91:84:D5:B8:8D:2A:5E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1010::/44
Signature Algorithm: sha256WithRSAEncryption
7a:f3:d4:26:64:e0:bc:de:b4:66:2f:97:c7:0e:38:c5:3c:2f:
16:cd:19:ac:b6:43:1f:0e:64:20:a7:1d:a3:20:71:65:f2:6d:
17:1a:65:2b:b8:cd:a1:56:b3:0f:d2:45:f6:ae:dc:ae:47:3a:
ef:0d:a7:cc:2c:7c:80:99:49:04:8c:94:1a:63:7d:56:c2:5a:
00:d0:a4:65:b2:5f:8a:c8:37:25:78:81:ad:a5:64:b0:be:18:
c8:0a:cf:d2:c3:fa:f4:23:da:d7:2b:8e:ee:02:03:46:70:3e:
cc:28:c2:53:3a:2d:9a:a2:36:b0:6f:ec:d6:9a:0f:24:1c:98:
5b:2f:df:ee:74:a9:ad:50:92:bc:4b:71:51:60:a6:d0:20:ff:
1d:bc:42:eb:29:a6:a9:42:39:01:1e:0a:30:d8:8b:fd:7a:67:
eb:81:5d:70:37:2b:3c:01:e5:92:16:55:d4:6b:32:a7:67:0f:
3d:84:8b:8b:52:df:3a:b9:b8:7a:5e:da:c2:64:d8:6e:03:52:
90:dc:5a:99:61:08:43:e9:ed:03:46:ed:99:f5:69:86:8e:e3:
84:67:ec:0c:50:8b:fa:78:13:70:f6:b3:68:ca:4f:21:fa:8b:
d9:06:ba:42:66:ac:65:cf:fc:8e:0e:9b:27:3e:40:c9:db:fa:
0f:dc:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org