Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
File: a81c865a-a8b0-437e-b803-d35050fc3fea.roa (raw, json)
Hash identifier: 4YQ7FqDWAhzgz1Qvp8M1D0y23S06as6juOirUJR8Pzk=
Subject key identifier: E5:DB:6E:59:C9:E9:73:A5:36:4B:AB:D2:C8:11:8C:F7:26:8B:EE:76
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6D8B5F0CF2788CC3504A425F094D1AB1787C6115
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8b:5f:0c:f2:78:8c:c3:50:4a:42:5f:09:4d:1a:b1:78:7c:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=ad56e0e6a8ff02b038161c4bd8986c2aa535e752cd0a90c08d90225f80f7eb36, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:59:9b:5a:ab:1d:53:2d:fe:d2:d2:c4:d2:
4b:4a:cf:09:8e:e4:2c:e5:30:64:8a:74:a2:2d:b6:
33:f4:b6:b8:5a:80:d5:f0:d5:3e:9b:f2:b0:44:b8:
26:db:a5:43:58:da:c2:30:e7:40:4f:08:eb:7d:9a:
70:f9:ad:01:a6:94:76:28:c6:8e:7d:1e:94:d4:d8:
b0:9a:9d:06:8e:8b:93:72:21:6f:e0:24:1c:44:33:
fa:fc:ae:0b:1f:4d:11:f8:28:59:97:51:a0:6a:ed:
26:8e:ba:f0:f1:6b:38:19:39:37:01:9f:fc:4c:f7:
5a:bf:45:3b:a5:d1:82:d1:8d:5c:77:59:44:d7:c3:
77:c4:a4:a3:60:1f:f0:f7:6b:1a:85:86:49:1d:eb:
b3:28:ad:0f:c3:2d:49:d9:2a:5b:8b:a7:07:38:4d:
6c:75:ef:69:4b:57:08:9a:55:ae:39:b4:e7:9a:cf:
de:d3:2f:28:20:6a:5d:67:47:cd:cb:05:b7:cf:3b:
c1:7f:ad:d7:3c:13:f9:cf:f4:14:99:7a:44:0b:8e:
bd:d2:70:66:11:b5:b8:ec:25:76:8d:b4:44:52:66:
ac:15:3a:ef:44:49:c7:87:d7:2b:50:39:d2:cb:a5:
d8:a3:1a:3f:86:36:40:e1:7f:6e:b4:24:1b:e7:65:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:6E:59:C9:E9:73:A5:36:4B:AB:D2:C8:11:8C:F7:26:8B:EE:76
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:76:9b:a6:eb:f9:59:73:fc:09:2f:a6:33:f6:d5:0a:8c:0e:
d7:cd:b7:dd:b7:6c:6a:04:04:22:84:1d:e6:7b:25:1c:76:f8:
4f:e4:d8:5b:b3:26:59:7e:0c:08:03:c9:ee:f4:a2:82:ec:be:
76:da:0f:e7:b9:9a:df:25:80:ec:aa:37:03:84:48:c9:4e:20:
8d:63:39:c3:8d:c7:64:8b:e3:a6:09:14:33:2e:ec:86:ee:0e:
90:4f:2d:05:8b:7c:58:d4:d4:c3:9a:35:1a:12:75:f6:08:d3:
dc:cd:b3:8c:ef:20:fe:bc:a7:f5:35:b5:95:0d:88:ed:64:26:
bd:6a:66:74:30:31:73:84:a8:61:5f:36:42:fd:8d:d9:2b:e9:
ae:b5:23:95:51:da:42:53:8f:ba:e0:df:8e:f7:20:ce:e1:d4:
e3:c2:e6:c3:89:20:20:33:94:c1:5d:f4:ef:bd:39:a1:3e:e8:
32:2a:8c:68:d3:63:1f:a3:68:06:2b:88:80:7d:69:61:72:07:
e4:4b:4d:90:3d:79:78:3d:19:c9:8b:37:75:e6:b5:c8:67:6b:
13:e7:df:74:37:1b:92:1b:3b:59:18:1d:89:df:48:20:cc:4b:
3f:a5:11:62:94:6f:32:d1:2c:eb:9f:da:35:87:79:69:27:a1:
d3:d4:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org