Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b3d1fcf7-e82a-4fe4-b1fe-abec2cc71d60.roa
File: b3d1fcf7-e82a-4fe4-b1fe-abec2cc71d60.roa (raw, json)
Hash identifier: m58Mg6LlZY3bLRv2rSnRZsOlVQJc7b1AGkUu53BDY/4=
Subject key identifier: 0D:F3:02:FA:97:A4:4C:6A:69:D5:3C:F4:68:1D:8B:68:7F:96:38:A6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47AFA6E1B68885B9E1D7F3B70A990757EBF45E86
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b3d1fcf7-e82a-4fe4-b1fe-abec2cc71d60.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:af:a6:e1:b6:88:85:b9:e1:d7:f3:b7:0a:99:07:57:eb:f4:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=23c448bc5f7cc1d430a4e5cf1fc770a842bafc02ba9e6cd09493e23de0a94b13, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:56:90:e1:3b:f0:cf:32:da:ab:17:b7:dd:
2b:42:2f:57:97:99:4e:7f:b4:09:7f:2d:34:2e:93:
a8:af:63:e5:dc:b7:7a:f4:72:f2:2b:09:a0:3c:b8:
43:41:dd:09:c6:b1:2a:73:2d:42:b5:1d:dd:64:7d:
3a:81:dc:11:ed:4d:5f:e6:e2:b3:91:a2:25:a7:9e:
93:bb:cb:50:01:09:6d:e8:0c:23:c7:24:ba:0d:2a:
83:bd:31:80:42:d8:d8:2b:b4:79:ec:45:2c:df:a1:
4e:8a:40:11:4e:38:0d:b1:a0:95:54:7e:04:9c:85:
37:6f:54:2a:1f:bd:71:07:09:02:14:fc:07:6a:37:
64:66:fc:3d:ec:6c:36:72:a4:01:10:3a:b2:8f:5f:
ce:f4:c8:be:2b:a3:05:c1:85:a0:c0:2a:56:70:56:
12:77:a3:d6:a2:0f:6a:dc:ec:68:b7:18:41:e4:4b:
5a:2f:dd:16:35:b5:5b:36:a6:fb:e1:06:bb:44:18:
ee:ba:2d:ae:ba:63:54:bb:9f:97:bf:f4:29:db:a8:
b0:96:21:8b:65:da:6a:82:6e:c8:4e:34:6c:ee:c0:
9f:d4:07:6c:22:75:f6:38:39:2e:7d:ef:f9:c5:18:
46:1d:d1:28:8b:62:82:34:ec:1c:99:60:bf:e5:cc:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F3:02:FA:97:A4:4C:6A:69:D5:3C:F4:68:1D:8B:68:7F:96:38:A6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b3d1fcf7-e82a-4fe4-b1fe-abec2cc71d60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:cf:30:d3:2c:4e:ea:b0:14:d4:94:fb:8d:dd:b9:5c:78:19:
8d:2f:bd:b0:67:da:59:3b:e8:8a:0b:77:ad:eb:45:09:7d:ab:
33:d7:3f:72:33:b6:7b:4a:7d:8d:33:61:ba:3e:4b:7c:ac:f7:
3c:4d:cb:27:c0:f9:7e:41:82:05:36:42:cc:7a:bd:78:94:63:
49:16:1b:a8:5c:c5:43:d2:ec:b0:69:91:7d:a7:00:24:1a:12:
9f:62:18:66:df:ae:95:f3:09:08:1b:7d:76:87:cb:dc:c9:8d:
e4:02:35:68:30:f1:bf:46:59:38:d3:d7:20:aa:ab:37:ec:28:
03:33:6f:4e:8a:33:fa:ed:38:01:b8:05:16:92:3c:8d:2a:f2:
af:0c:92:38:a0:dc:3b:a9:cd:80:74:ab:10:de:b4:1d:c4:4f:
5d:73:59:6d:1b:de:a9:45:c2:74:d3:5b:86:ad:1d:1e:0e:fe:
88:c0:6d:be:99:c7:39:7d:4c:04:af:73:94:b0:75:fa:a9:9c:
a8:c9:2a:e8:42:55:61:8c:22:70:af:ac:30:9a:90:9e:d6:fe:
87:37:46:73:24:93:76:95:b3:f5:26:68:8c:57:95:43:44:4f:
da:22:c9:e2:1e:dc:d1:b4:f9:88:85:b4:1e:92:f6:5a:35:16:
d4:2f:d8:bb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUR6+m4baIhbnh1/O3CpkHV+v0XoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzYzQ0OGJjNWY3Y2MxZDQzMGE0ZTVjZjFmYzc3MGE4NDJiYWZjMDJiYTll
NmNkMDk0OTNlMjNkZTBhOTRiMTMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKgqVpDhO/DPMtqrF7fdK0IvV5eZTn+0CX8tNC6TqK9j5dy3evRy8isJoDy4
Q0HdCcaxKnMtQrUd3WR9OoHcEe1NX+bis5GiJaeek7vLUAEJbegMI8ckug0qg70x
gELY2Cu0eexFLN+hTopAEU44DbGglVR+BJyFN29UKh+9cQcJAhT8B2o3ZGb8Pexs
NnKkARA6so9fzvTIviujBcGFoMAqVnBWEnej1qIPatzsaLcYQeRLWi/dFjW1Wzam
++EGu0QY7rotrrpjVLufl7/0KduosJYhi2XaaoJuyE40bO7An9QHbCJ19jg5Ln3v
+cUYRh3RKItigjTsHJlgv+XM8ScCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQN8wL6
l6RMamnVPPRoHYtof5Y4pjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YjNkMWZjZjctZTgyYS00ZmU0LWIxZmUtYWJlYzJjYzcxZDYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlVMA0G
CSqGSIb3DQEBCwUAA4IBAQAszzDTLE7qsBTUlPuN3blceBmNL72wZ9pZO+iKC3et
60UJfasz1z9yM7Z7Sn2NM2G6Pkt8rPc8TcsnwPl+QYIFNkLMer14lGNJFhuoXMVD
0uywaZF9pwAkGhKfYhhm366V8wkIG312h8vcyY3kAjVoMPG/Rlk409cgqqs37CgD
M29OijP67TgBuAUWkjyNKvKvDJI4oNw7qc2AdKsQ3rQdxE9dc1ltG96pRcJ001uG
rR0eDv6IwG2+mcc5fUwEr3OUsHX6qZyoySroQlVhjCJwr6wwmpCe1v6HN0ZzJJN2
lbP1JmiMV5VDRE/aIsniHtzRtPmIhbQekvZaNRbUL9i7
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org