Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa
File: ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa (raw, json)
Hash identifier: O+r3yJ2xSs9/jfQGSlbxAsDBTz0bZbtBdR6SnKdC6yg=
Subject key identifier: 8E:B3:BE:DD:28:75:E1:77:46:C9:A2:8A:DD:73:9F:0C:2B:5B:70:0A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 247F44C70187901C40C9C60C8703F821D89D7285
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7f:44:c7:01:87:90:1c:40:c9:c6:0c:87:03:f8:21:d8:9d:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=b91d660cd5b8068093622d813c68bf13dfd93d258b9f491eb312f6659a778fd1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:3f:27:fb:11:42:10:21:dd:11:b3:94:7b:
13:ee:41:53:32:1b:b5:77:62:87:ed:a5:42:18:c4:
f0:ec:3d:df:e7:92:93:63:50:e7:b2:7e:96:b4:24:
99:82:68:81:13:12:70:7c:01:8c:8b:00:2a:0b:75:
24:d7:94:44:07:06:47:5a:81:31:e8:e8:e5:f4:fe:
ab:50:4a:bd:46:1c:e1:23:81:bd:bf:8a:d8:93:54:
8f:be:4d:a8:9c:59:4e:b0:72:6e:14:91:fb:40:2c:
ae:b0:e5:4c:84:5c:3e:50:88:5d:84:b5:a9:e5:8b:
b7:fe:80:ff:75:e2:f6:70:37:c7:4f:dd:74:b9:06:
1d:ca:8d:52:7a:11:a8:0e:64:64:66:41:11:57:99:
d7:a4:2d:78:0d:9f:05:55:e9:ae:4b:2c:77:07:42:
46:6b:b5:7b:1e:a7:75:b6:fa:d5:e9:88:de:f9:22:
1b:b4:e8:52:0b:48:d0:0e:6f:f3:fe:44:f4:12:97:
48:7b:f5:d9:1a:c5:78:7a:80:7b:a1:32:40:90:f7:
82:64:58:91:5d:c3:21:00:7a:1a:00:f4:65:77:be:
79:52:91:b8:d9:dd:4e:68:ec:43:5d:94:06:6f:d0:
78:a6:c9:e3:1c:bc:87:57:79:8b:93:9e:27:45:a6:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:BE:DD:28:75:E1:77:46:C9:A2:8A:DD:73:9F:0C:2B:5B:70:0A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:0e:f7:a7:52:1e:67:f2:94:1f:20:c7:0b:e9:8e:b5:ea:3a:
5c:b6:b2:6a:74:6f:cc:a2:2a:e7:a3:d3:34:dc:24:ec:fb:d7:
21:18:e5:a8:2e:2b:13:19:b6:46:24:af:47:db:94:06:9f:2b:
d2:4a:52:9e:da:60:67:a9:90:4a:c9:23:b5:5c:67:ba:90:bc:
a8:ed:1b:df:b8:5c:64:3c:36:d4:68:b3:bf:4f:c7:34:4c:84:
4a:e4:2a:7a:66:bc:04:1d:f9:22:ed:ab:97:da:67:eb:57:f3:
3f:e3:f0:2e:93:eb:17:84:9b:33:1e:b8:3b:f0:29:1e:47:f8:
ea:37:76:a5:1b:94:9b:fa:7d:68:fb:ab:6e:19:88:7a:20:87:
ce:b8:bc:14:3b:c3:6b:d0:a5:cd:ac:1f:b3:91:01:9d:d3:98:
a9:4f:ad:b1:23:34:f5:47:84:ad:32:46:44:c6:f8:4f:80:f8:
2d:4a:4c:c4:74:b9:81:6a:8b:86:38:c8:66:c0:53:e2:c5:ee:
49:73:84:ca:c8:3e:73:14:a4:3f:98:a5:8f:22:cd:01:53:8a:
3b:b6:30:f8:f1:48:cb:23:86:ea:a8:6a:70:97:42:56:ec:12:
ed:5f:b9:74:34:42:c1:d7:db:71:37:c1:65:ea:6e:35:76:7b:
81:3e:34:bb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJH9ExwGHkBxAycYMhwP4IdidcoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjYwMDAwMDBaFw0yNDA1MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5MWQ2NjBjZDViODA2ODA5MzYyMmQ4MTNjNjhiZjEzZGZkOTNkMjU4Yjlm
NDkxZWIzMTJmNjY1OWE3NzhmZDExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiEPyf7EUIQId0Rs5R7E+5BUzIbtXdih+2lQhjE8Ow93+eSk2NQ57J+lrQk
mYJogRMScHwBjIsAKgt1JNeURAcGR1qBMejo5fT+q1BKvUYc4SOBvb+K2JNUj75N
qJxZTrBybhSR+0AsrrDlTIRcPlCIXYS1qeWLt/6A/3Xi9nA3x0/ddLkGHcqNUnoR
qA5kZGZBEVeZ16QteA2fBVXprkssdwdCRmu1ex6ndbb61emI3vkiG7ToUgtI0A5v
8/5E9BKXSHv12RrFeHqAe6EyQJD3gmRYkV3DIQB6GgD0ZXe+eVKRuNndTmjsQ12U
Bm/QeKbJ4xy8h1d5i5OeJ0WmhaECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSOs77d
KHXhd0bJoordc58MK1twCjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YWIzYzhlZWUtM2MwYi00M2MzLTkxMmEtYzMxOGM0NjUwNGFhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADljMA0G
CSqGSIb3DQEBCwUAA4IBAQDNDvenUh5n8pQfIMcL6Y616jpctrJqdG/Moirno9M0
3CTs+9chGOWoLisTGbZGJK9H25QGnyvSSlKe2mBnqZBKySO1XGe6kLyo7RvfuFxk
PDbUaLO/T8c0TIRK5Cp6ZrwEHfki7auX2mfrV/M/4/Auk+sXhJszHrg78CkeR/jq
N3alG5Sb+n1o+6tuGYh6IIfOuLwUO8Nr0KXNrB+zkQGd05ipT62xIzT1R4StMkZE
xvhPgPgtSkzEdLmBaouGOMhmwFPixe5Jc4TKyD5zFKQ/mKWPIs0BU4o7tjD48UjL
I4bqqGpwl0JW7BLtX7l0NELB19txN8Fl6m41dnuBPjS7
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org