Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
File: ac15d5af-b90d-456e-b53e-55f7c17fc512.roa (raw, json)
Hash identifier: PNDrjdxJUxwgJ7MGp0z8m/WMUxuAe/jiyEipzv6OjJ0=
Subject key identifier: 58:7D:E5:18:3E:CB:F7:FA:8F:6F:00:57:F1:73:41:A6:4F:1A:0F:2B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 356B00B021349A225D9DF473A152DFEAE4F36051
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6b:00:b0:21:34:9a:22:5d:9d:f4:73:a1:52:df:ea:e4:f3:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=a23de32fa7d53f532e738ea6a6e122adc29b1dd9c8317e2da3de69602d125101, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:93:17:82:19:21:87:78:95:f7:a7:93:df:64:
5c:c2:64:de:a8:c3:e4:09:ca:f5:18:0b:34:33:6a:
76:53:4c:3d:24:bb:90:79:e5:4d:08:0e:39:83:2a:
0e:6e:32:b5:65:71:df:df:96:63:22:c4:82:4c:6d:
df:30:33:05:5d:b3:fe:bd:de:cf:72:03:51:17:98:
1b:4a:b3:50:3c:eb:04:c4:28:48:19:73:12:c8:67:
16:67:de:e3:90:61:7a:91:dd:42:88:a1:fe:cb:fd:
a7:35:58:d2:ea:55:d6:15:8f:49:cd:25:19:5f:09:
51:e4:91:a6:0b:ed:df:4d:67:d2:dc:25:1d:3b:f2:
37:08:5d:80:8a:ae:ca:81:39:ee:7a:90:68:04:b8:
a0:c5:c3:e8:63:7f:a9:16:2a:14:9e:50:1b:61:34:
75:a9:3f:72:71:cb:72:99:a1:63:87:ad:cf:42:f7:
4f:cf:4d:f3:6c:7a:f7:56:10:25:07:56:00:66:81:
fc:73:c2:2a:42:21:fe:58:c0:18:3d:fe:49:8f:b1:
6c:53:0d:ee:cf:67:4d:96:3e:09:e6:1f:f2:c0:de:
cc:bf:27:03:43:db:8c:a3:c3:c5:f5:ba:71:02:33:
f1:7c:c6:e7:9f:04:0c:74:14:fe:4b:ee:c4:8e:8c:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:E5:18:3E:CB:F7:FA:8F:6F:00:57:F1:73:41:A6:4F:1A:0F:2B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:69:40:41:68:0b:75:13:30:c0:94:d0:27:f7:a8:cc:f2:4e:
8c:06:ac:67:d0:1d:65:ef:96:fb:dc:44:29:df:a2:a1:d2:2d:
48:fa:47:ea:80:b2:71:d9:2a:fb:70:a6:d4:42:aa:0e:54:b8:
c4:bb:89:40:a7:5e:23:da:af:2f:39:f1:4d:48:a9:51:d4:b3:
80:cd:1a:2a:73:da:f2:91:9e:a2:21:cb:04:b6:db:cb:46:5e:
dd:64:9b:45:c7:88:f0:64:ea:39:df:eb:65:d1:3a:f5:bd:9b:
21:a6:c3:15:d8:8c:fe:f9:86:73:54:98:b0:61:91:10:6c:3d:
19:25:b8:60:17:86:1f:d7:cb:e7:4a:1f:2b:60:2b:14:8b:44:
5a:fb:21:e4:dc:33:ce:27:03:21:0d:10:66:8b:de:d4:f6:e1:
26:4c:32:46:f1:a6:26:4c:17:4f:06:e9:7b:1e:a7:70:cf:7b:
86:33:44:50:ee:f0:3a:be:48:00:15:0c:d7:59:90:d8:72:20:
0a:46:c3:7e:16:44:fc:8e:a0:8d:f7:57:bb:5a:23:1a:2b:3c:
fa:4b:87:47:74:db:b0:e2:29:ca:6d:08:c1:88:37:87:4b:10:
ce:6b:2a:6c:e5:7a:21:d4:cb:56:ae:a7:50:26:3c:71:24:47:
75:f1:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org