Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
File: ad3850cc-845f-4fcd-8675-43476aa1af0b.roa (raw, json)
Hash identifier: oADNpEep17sqwImPohIZ2bdUA3Slk13EsKIFhYqzpvc=
Subject key identifier: FF:5B:46:38:87:79:5A:8F:AF:C1:E2:6D:CB:D4:AA:25:71:6A:87:10
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4F19F708D3B5E9877A649F02CE994F2E694DC8E4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:19:f7:08:d3:b5:e9:87:7a:64:9f:02:ce:99:4f:2e:69:4d:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=a29da17c10fac9ce0f0f1542e397a07acb12308eb0ca0ab94bff5f6b0933ea60, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:2c:a9:8d:b9:66:24:4b:9c:47:02:3d:43:
06:08:37:8d:5f:6f:a9:da:aa:b8:68:aa:ab:b5:5d:
11:98:ed:cb:93:0b:bb:ff:c2:e1:46:85:09:2b:8b:
74:eb:31:c0:4d:e6:66:c9:1d:86:6b:41:5a:8d:1b:
99:c0:3b:13:a0:58:0e:b5:b7:3a:6e:79:fa:fb:cd:
68:41:e0:0c:88:d8:6f:11:07:ea:4e:f6:5a:e6:d9:
3e:14:fe:f4:f1:27:71:47:a7:e8:8d:86:72:bc:6b:
98:9e:96:a9:33:78:e7:b7:35:63:8f:06:bc:4f:90:
36:ca:34:aa:eb:f4:1a:1f:2e:a1:b4:5a:aa:8f:7a:
dc:c6:12:3d:0e:8e:68:b8:ab:27:64:df:bd:3e:a6:
28:b0:0a:b9:91:19:cd:18:3e:82:55:7f:4e:02:b2:
8e:ab:cf:aa:11:57:0d:40:0d:36:02:1a:22:df:87:
4d:a0:f5:f2:12:f4:9b:2c:a4:94:e0:c7:62:6e:71:
78:0c:76:30:e1:2f:a2:54:c3:6e:e4:62:2c:c3:b8:
84:bc:71:5b:92:68:d7:b4:2c:33:36:1e:f8:17:a7:
0b:47:0f:91:b6:dd:7c:9d:e6:d7:bc:88:1d:e7:16:
7a:b3:b2:49:30:97:89:13:31:55:7d:bb:c3:5d:b0:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:46:38:87:79:5A:8F:AF:C1:E2:6D:CB:D4:AA:25:71:6A:87:10
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:98:85:d9:64:be:d8:3a:12:fb:2f:9a:44:45:04:13:d0:cf:
91:65:66:53:a3:7c:24:71:15:9a:58:f8:29:3f:8f:2e:cf:ff:
dc:36:a6:89:1d:4d:36:4e:71:b0:27:f9:28:fc:33:e1:4b:96:
69:27:a2:68:36:e3:66:93:99:81:65:27:86:0d:b9:3b:52:fd:
4c:77:05:57:e1:a2:01:41:a5:ff:40:ab:82:fd:1a:95:32:71:
bf:61:27:d8:4c:9b:46:30:5d:02:69:a7:0b:74:26:8d:7d:0f:
8f:1f:18:15:f9:bc:b1:bc:3f:93:a8:81:05:49:0d:a4:9b:95:
d4:ee:49:99:fe:d1:8c:92:6d:a4:96:34:65:c2:88:8d:b9:03:
cd:1d:03:8e:a5:72:8e:5b:e1:61:35:56:ec:28:c9:2a:db:ee:
6e:07:d5:7d:ad:56:99:5c:f4:69:e4:be:25:ff:ae:3e:94:61:
22:64:06:20:4a:87:50:c2:a3:f5:89:cc:be:77:2e:01:f4:2d:
0c:fc:37:51:b9:4f:b2:c7:33:55:fe:c5:e4:78:1d:fb:27:58:
71:2f:dc:4e:8d:11:6b:36:77:48:f5:98:d3:2d:84:45:18:2a:
6c:ff:6b:25:3a:03:75:55:b4:12:70:50:7a:a6:3f:72:6f:d6:
a9:4c:5e:39
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTxn3CNO16Yd6ZJ8CzplPLmlNyOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjYwMDAwMDBaFw0yNDA1MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGEyOWRhMTdjMTBmYWM5Y2UwZjBmMTU0MmUzOTdhMDdhY2IxMjMwOGViMGNh
MGFiOTRiZmY1ZjZiMDkzM2VhNjAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL0gLKmNuWYkS5xHAj1DBgg3jV9vqdqquGiqq7VdEZjty5MLu//C4UaFCSuL
dOsxwE3mZskdhmtBWo0bmcA7E6BYDrW3Om55+vvNaEHgDIjYbxEH6k72WubZPhT+
9PEncUen6I2GcrxrmJ6WqTN457c1Y48GvE+QNso0quv0Gh8uobRaqo963MYSPQ6O
aLirJ2TfvT6mKLAKuZEZzRg+glV/TgKyjqvPqhFXDUANNgIaIt+HTaD18hL0myyk
lODHYm5xeAx2MOEvolTDbuRiLMO4hLxxW5Jo17QsMzYe+BenC0cPkbbdfJ3m17yI
HecWerOySTCXiRMxVX27w12wODcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT/W0Y4
h3laj6/B4m3L1KolcWqHEDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YWQzODUwY2MtODQ1Zi00ZmNkLTg2NzUtNDM0NzZhYTFhZjBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5qjAN
BgkqhkiG9w0BAQsFAAOCAQEAS5iF2WS+2DoS+y+aREUEE9DPkWVmU6N8JHEVmlj4
KT+PLs//3DamiR1NNk5xsCf5KPwz4UuWaSeiaDbjZpOZgWUnhg25O1L9THcFV+Gi
AUGl/0Crgv0alTJxv2En2EybRjBdAmmnC3QmjX0Pjx8YFfm8sbw/k6iBBUkNpJuV
1O5Jmf7RjJJtpJY0ZcKIjbkDzR0DjqVyjlvhYTVW7CjJKtvubgfVfa1WmVz0aeS+
Jf+uPpRhImQGIEqHUMKj9YnMvncuAfQtDPw3UblPssczVf7F5Hgd+ydYcS/cTo0R
azZ3SPWY0y2ERRgqbP9rJToDdVW0EnBQeqY/cm/WqUxeOQ==
-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org