Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
File: adc1220c-3515-4928-b808-ab48f97a186c.roa (raw, json)
Hash identifier: yBLEPjfLU34jgqQYIJpZAOFLluZKCpsq38FBKiZlhms=
Subject key identifier: 7A:85:06:63:51:13:91:EB:36:4E:4E:19:4E:CB:A3:B1:9F:6E:00:BA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5AECCEDCCE1FD3B70A919B99422A9CDE04D49EE9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ec:ce:dc:ce:1f:d3:b7:0a:91:9b:99:42:2a:9c:de:04:d4:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=ffb69fd71dbfa85bb516247a857e47dcfd6c6c34eca36fcff3ea411d46119482, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:61:c8:00:0e:2d:58:b1:9a:df:9a:9f:f4:a2:
ea:61:1c:e7:c9:ee:73:e8:2e:a0:b0:6f:0c:7d:2c:
0b:15:e7:eb:64:c5:4a:54:fa:16:c0:b2:98:13:56:
39:3e:41:ca:4c:d5:4a:35:16:93:a2:4e:5b:49:42:
cb:2c:aa:f0:9a:9e:e8:81:59:3e:e8:dc:26:5f:dd:
b1:28:ef:3c:f3:39:9b:2d:10:1c:f9:42:07:04:06:
bc:16:72:8a:02:08:70:08:1a:65:89:e6:10:9f:6e:
b6:50:3d:70:4f:bf:bf:7a:64:5d:7d:cb:1d:74:fa:
1f:a1:fc:72:8b:1c:72:b4:17:40:0e:52:51:14:b1:
33:3f:06:28:9e:54:51:a2:3f:8c:30:a7:8d:99:8c:
68:71:53:23:9d:cf:35:38:38:bf:23:5d:db:1b:0d:
ee:c9:7b:0b:17:69:25:7a:30:13:ce:cf:1d:db:62:
42:ff:92:f3:91:08:dd:7e:dc:4a:20:e2:70:06:97:
cd:c6:26:af:89:f0:1f:93:38:47:0c:96:3c:6b:bd:
83:3f:5f:31:ef:fd:42:b4:2b:ad:81:74:33:8c:03:
ae:33:ce:81:54:75:77:14:9f:a1:34:f9:32:a1:e9:
bf:e1:27:90:26:07:d0:e3:bb:d8:75:40:80:4d:b4:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:06:63:51:13:91:EB:36:4E:4E:19:4E:CB:A3:B1:9F:6E:00:BA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.181.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4f:71:22:76:f0:5e:2d:e2:e8:4c:9e:04:64:ea:2b:24:57:
06:07:f5:ac:70:b7:6f:21:c4:25:87:c6:75:e8:83:a9:12:19:
bb:30:81:24:a4:07:7d:eb:3f:d1:2f:bf:09:bd:da:5b:2f:33:
3a:ae:98:80:c5:a7:ff:f2:dc:4f:5e:86:73:4b:75:fc:58:b9:
5a:23:6e:e7:04:ed:7f:2b:cd:d1:6a:b1:44:05:dc:fd:27:aa:
4f:7b:99:e0:41:16:48:43:ac:2c:48:44:30:84:f4:94:01:a7:
e4:f5:d4:16:18:c8:9d:52:73:6a:91:dc:86:60:b7:04:ec:ad:
de:d0:c4:b6:e8:2d:a7:67:d4:f3:de:b5:29:77:60:2d:8b:72:
c8:16:31:9f:38:1d:a0:7d:4b:84:a6:98:e5:5c:86:60:fa:38:
d5:0a:72:ea:03:37:49:f8:b3:e9:34:bc:01:97:75:88:66:33:
de:b7:e4:f1:98:b2:0f:d2:0e:cc:4d:d1:2c:ad:b8:ad:43:31:
3d:54:e4:37:b0:34:52:8a:26:d6:62:6a:d9:af:40:79:a0:94:
9e:a5:e6:f9:5a:f5:cb:da:46:60:20:06:f7:33:c3:0e:e4:b7:
4f:6b:dc:cf:c0:10:2a:45:5b:86:d4:14:ff:35:0c:d4:5d:db:
6d:02:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org