Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a9916a41-7c7f-4c1c-bcf2-b6e1b32b7dfb.roa
File: a9916a41-7c7f-4c1c-bcf2-b6e1b32b7dfb.roa (raw, json)
Hash identifier: jW5GKBurHVySkl6ufGFvRsgSuSvVd5wbCAWBIfr3aYk=
Subject key identifier: 40:0C:1A:E1:08:D9:27:53:95:FB:AB:82:DC:09:9D:17:4C:FD:DF:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4724DD548051BEB2579A2E679D4CC34635916CAD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a9916a41-7c7f-4c1c-bcf2-b6e1b32b7dfb.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.212.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:24:dd:54:80:51:be:b2:57:9a:2e:67:9d:4c:c3:46:35:91:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=4853739201b0fec7f5316a371086d10eec4ac3d5deaa36c35fae69b768d1c27e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:46:6d:4e:95:08:9e:f8:1a:bf:bf:b0:c0:
c2:e2:31:b3:75:17:c9:90:0e:f9:66:70:52:86:ea:
a3:e3:33:75:14:9a:49:ac:85:df:6f:32:00:d9:a5:
3d:38:97:ad:9d:f6:74:95:f8:4e:ab:c6:9e:fb:c5:
27:6f:e1:96:2c:fc:f0:b8:ac:2e:9e:37:7d:30:97:
d0:4b:a2:6c:61:b0:d4:43:5f:5d:00:9f:95:94:e1:
2b:7c:fc:4e:46:7d:39:0a:06:30:19:03:cc:36:51:
64:6c:a3:a2:b2:ff:ea:ba:73:51:bf:b3:26:30:bd:
e5:4d:0e:c1:98:08:f9:f1:97:85:b0:07:bf:6b:14:
e0:be:7f:1a:b3:e4:4e:27:76:57:53:81:65:af:9c:
64:a0:9d:08:58:47:cb:02:41:1c:5a:25:75:87:1b:
e5:f6:d4:6a:11:ca:27:81:80:b4:7b:b7:fb:7e:5b:
58:99:7e:98:58:a0:8a:b8:7c:0a:3a:0b:a4:ac:fc:
7d:46:49:bb:b3:e7:75:a6:fc:96:a1:04:74:97:30:
3d:b9:a2:17:1f:d1:69:97:81:65:b2:00:85:e7:b3:
b9:49:33:7d:d5:01:26:3c:d6:71:d3:58:ea:16:a7:
0b:92:14:1b:e0:5d:32:72:6f:11:e2:ce:44:c1:ed:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:1A:E1:08:D9:27:53:95:FB:AB:82:DC:09:9D:17:4C:FD:DF:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a9916a41-7c7f-4c1c-bcf2-b6e1b32b7dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1e:1b:35:05:58:04:51:5b:dd:88:fa:d9:72:d1:6f:9f:fd:73:
e3:b3:4f:ca:b7:96:b9:75:11:2a:46:ea:71:ba:83:18:48:cd:
e2:7a:b4:ac:c0:09:26:32:fe:8a:0a:e1:54:52:0a:3b:78:4e:
2e:3a:7d:37:bd:1b:4b:ba:d0:80:e2:53:50:5f:84:88:e6:9e:
05:60:d5:f0:d1:1a:4b:32:3b:2d:be:70:bf:12:e9:42:11:4a:
d7:ed:15:c6:3d:49:0b:dc:e6:92:16:2b:75:b0:19:79:ba:77:
e7:3c:25:97:1f:0c:d5:d7:0e:5c:fd:51:60:1a:16:66:29:ea:
a9:8a:b0:2b:52:e9:54:9d:86:91:40:af:8c:ea:61:43:e0:32:
0c:24:94:42:78:42:e4:b7:0b:a9:c4:6f:87:ae:25:cf:4b:80:
53:ea:7b:ba:9d:97:b0:9a:ee:df:72:79:0f:81:fc:70:9b:a4:
0b:bc:c2:d4:77:fe:7d:0b:58:72:4e:01:ee:60:50:fa:e1:30:
2c:80:f5:c3:4f:b5:d5:85:71:1a:98:c7:6b:70:a9:76:9e:71:
53:a0:ea:c1:05:f6:f2:d7:11:d6:ec:e3:03:1d:25:8d:fb:9a:
df:1f:00:33:ae:39:ce:6a:45:92:7b:a1:06:27:e2:f4:55:ba:
94:c5:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org