Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa
File: b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa (raw, json)
Hash identifier: 5632WtCKcw1lYVMCvQgDMevjqgtd7g/gEPcdbsT1iQ8=
Subject key identifier: E4:67:1D:EB:4C:E7:9B:C7:3B:BD:2F:F2:1C:35:10:90:2E:ED:1F:11
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1177B9BCBF245CBF218230DA6701DB4F6EDE7EED
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.32.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:77:b9:bc:bf:24:5c:bf:21:82:30:da:67:01:db:4f:6e:de:7e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=9ffd09fdc460a46b455cfceb7d2c36dd4b3320be1ccf7b0e0e82d5d9947e223f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:1d:a4:1d:3f:13:50:90:57:5e:33:f0:d3:
e6:7a:2e:23:2b:50:e4:d6:90:47:2d:82:2f:59:70:
d6:dc:72:72:6d:22:a0:26:23:56:5b:c2:8f:de:36:
23:35:65:b3:77:40:52:3b:54:39:9d:00:ec:ca:be:
1f:11:93:0d:fd:bc:8c:f8:21:90:35:67:25:fc:1c:
7b:49:c5:c2:1a:2d:0f:21:6c:86:bf:1a:da:3e:1f:
7f:54:7f:36:b9:42:f4:28:4b:ee:94:29:7c:54:2b:
08:e7:6d:0b:ad:2b:c2:f5:b0:df:98:13:64:19:94:
8e:9a:19:e3:9b:a0:bb:70:7e:4d:8f:91:e4:08:95:
bf:64:5e:6e:46:bc:81:2c:00:6a:ce:42:d5:2d:12:
d8:b9:71:32:b7:79:31:a4:00:63:72:00:9e:81:c9:
d9:1e:7b:90:16:12:30:b8:71:59:44:da:b8:10:cb:
c3:4c:c3:6f:08:41:7f:a3:a4:2e:bf:2b:98:5f:47:
ca:0a:a8:56:e3:ae:98:49:13:87:2f:87:b0:54:63:
8f:93:55:74:08:65:ec:4e:30:80:de:41:89:63:d9:
85:87:b3:75:b2:57:40:2b:34:5d:43:74:38:eb:c6:
15:3a:39:2f:92:ad:b3:41:cd:71:69:20:8c:5b:de:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:1D:EB:4C:E7:9B:C7:3B:BD:2F:F2:1C:35:10:90:2E:ED:1F:11
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:0d:5c:fc:e1:e9:c2:6d:a7:92:a4:01:24:67:fa:aa:b5:2c:
ac:2a:e8:58:16:05:bc:2a:bd:14:6f:2e:16:15:c5:3e:f8:75:
a4:a1:2b:30:3c:d3:66:28:3d:4f:7f:ec:2d:84:60:7a:6f:09:
e3:81:11:13:33:cb:07:0f:46:91:a1:86:ec:ca:a9:b9:de:e4:
cd:c5:b6:28:6b:a4:03:c8:82:4c:3d:c2:0f:05:c3:ef:64:38:
df:07:f3:3e:d5:ac:90:83:66:aa:4c:f5:9e:ac:eb:9a:aa:f1:
b5:9f:1e:b1:77:07:ec:9f:47:0c:95:ab:5b:54:ab:a1:d5:62:
47:dd:0c:6b:a5:71:69:2a:81:83:26:07:0b:b0:e9:05:70:b3:
4d:4d:00:e2:2d:b2:40:29:ee:58:7e:bb:54:64:da:ae:20:69:
06:fe:da:e6:30:9c:e4:af:6c:a0:a5:e0:47:4a:75:21:b5:96:
d9:b0:3f:94:fe:28:22:eb:51:95:cf:e7:5a:7d:6e:e1:6c:1b:
70:ac:77:e1:4c:36:c1:0f:a8:a5:91:85:aa:02:e5:74:9c:69:
0d:ae:3e:5a:11:75:02:0e:b0:51:46:3a:bf:71:91:50:47:c6:
9b:76:74:4e:fd:43:6a:e0:39:9d:79:69:21:98:ac:2d:a7:b2:
f2:fe:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:13 2024 by rpki-client on console-ams.rpki-client.org