Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa
File: ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa (raw, json)
Hash identifier: GMzujrmXRbURIIR/6iI3m12JsmWqqWza7cqqL77FRpo=
Subject key identifier: 58:BB:2A:EE:F2:12:00:17:99:30:33:47:4D:52:A1:F6:31:18:B6:12
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2FB097EC332979694A14233FB5158507B639824A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 193.186.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b0:97:ec:33:29:79:69:4a:14:23:3f:b5:15:85:07:b6:39:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=885ac4ae2ecea9ed9c98d182a35f25082c5e2916b5df080b273c4274d2001691, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:7b:23:cd:c8:88:d2:7a:1b:6d:b3:aa:2a:
63:bb:d9:47:16:5d:42:a6:36:b9:07:5f:61:f3:10:
24:01:d7:69:b3:fe:5e:34:35:36:f7:93:bd:75:b7:
0f:bb:9c:d7:d3:62:5c:95:4a:f2:65:50:85:59:3e:
72:79:e6:0a:68:14:55:ff:ea:08:1e:4b:a2:bf:69:
2f:19:f2:80:59:e1:c9:2c:ad:6d:e7:de:33:5b:3b:
a9:d0:6a:51:6f:ca:e6:c0:3b:db:74:ba:27:24:a1:
19:c8:a4:22:8e:04:fa:b6:c3:8b:12:1c:a7:dc:57:
a2:cc:11:3a:0b:b5:ef:21:68:36:ea:5a:cd:dc:49:
a3:76:9a:aa:68:3f:4b:80:dc:f9:9b:24:c3:4a:a4:
33:8f:f0:c9:3f:fc:c8:9c:a4:fb:ae:5f:49:c9:5d:
54:8c:65:7b:12:e2:80:9b:63:56:e6:85:e3:01:17:
b2:d6:f4:ab:91:29:6f:de:ac:2f:6c:bf:31:4a:94:
bf:5c:c8:3b:fa:c6:05:d6:5d:e2:49:70:95:9d:cd:
9a:30:92:c6:c2:c5:0e:58:5d:b6:98:2b:af:c4:ee:
5a:de:e1:61:8a:df:0a:07:24:5e:6d:aa:bd:2c:c2:
1f:74:93:f4:a0:61:e3:82:38:30:ac:9c:3e:c1:86:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:2A:EE:F2:12:00:17:99:30:33:47:4D:52:A1:F6:31:18:B6:12
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c7:21:4a:3f:79:5a:41:fc:28:bc:20:bb:4f:20:b7:fa:39:
2d:e6:cc:26:53:93:93:b1:30:a3:4a:dd:e9:46:fc:8f:fa:b6:
5e:c6:e7:52:32:81:8d:08:81:e3:43:b3:a0:2c:ba:a4:f5:df:
1f:66:9e:93:90:e0:c2:ec:74:58:57:ce:8b:c7:b5:57:8c:cc:
6e:8a:42:7a:65:2c:40:78:c2:c7:8d:18:a1:05:a6:2c:02:a1:
bc:69:0a:1d:a7:81:52:32:82:d6:56:7e:d8:b9:78:c0:20:90:
33:60:a7:e9:85:b3:b4:08:fa:e9:fe:d0:41:32:63:59:2e:76:
f9:a5:a1:65:f7:1f:8c:f0:68:35:c5:96:c8:5b:b8:32:6a:fd:
72:55:a7:6f:08:7e:31:b4:cb:83:da:0e:2f:86:fd:6b:b3:72:
a8:7a:91:da:40:b0:a9:d3:7f:ec:bd:ae:a3:b0:a6:ab:f1:85:
71:35:d8:ec:b0:2a:94:8d:59:e0:86:35:e5:c1:64:3c:fe:bf:
1c:89:8d:2b:72:10:09:8b:2c:f7:48:26:cf:51:bd:20:54:c3:
d7:ca:47:ed:c3:29:ef:e2:ef:ed:7c:53:72:9c:5c:3e:28:cc:
e2:76:08:b5:51:69:7f:cd:8a:80:55:c2:6b:18:be:25:bf:1d:
eb:df:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org