Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bccdd23d-b92c-4f87-ada7-26de87fddc89.roa
File: bccdd23d-b92c-4f87-ada7-26de87fddc89.roa (raw, json)
Hash identifier: TfK0iSBGW0ijpJRGNi80jVL5R65nGK6B22cYsJKt8xs=
Subject key identifier: 27:3D:A2:E3:A4:9D:59:B3:04:93:2F:47:A6:41:E9:6E:EE:F8:3C:DC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6E4EC4AA6F8B02390430808415A6291DE7667B68
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bccdd23d-b92c-4f87-ada7-26de87fddc89.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.232.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4e:c4:aa:6f:8b:02:39:04:30:80:84:15:a6:29:1d:e7:66:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=14ba2a2089b1544a50ecdb7f9e56238c5159e84eced89bf2e0cdcc24963750aa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:a3:87:d4:ec:b9:bc:2c:16:89:52:35:b6:
b7:48:4a:4c:81:71:fa:03:fd:93:5b:fe:78:39:a0:
8b:cc:2d:a6:3d:db:47:55:ad:c5:54:60:58:06:93:
bb:ec:9f:b4:b3:27:94:a6:58:31:54:78:61:68:71:
d5:9f:f3:c3:b2:5f:3b:28:ea:c6:56:62:c9:85:ea:
03:1f:aa:09:4a:8e:d7:35:2c:1b:75:f4:0a:28:07:
23:f4:b9:9c:b4:c9:63:d8:8f:20:4d:81:27:8d:f9:
4a:81:46:dd:7d:b4:e1:aa:25:04:94:c0:3d:d6:fc:
19:85:3d:1f:6f:bb:61:7e:75:dc:5c:9b:01:db:ca:
3c:73:5c:74:d6:a9:3e:07:3d:7f:33:66:3b:73:3a:
8e:1c:49:1c:fc:1e:1f:99:ba:b6:9a:77:99:5d:8b:
b0:78:33:2d:c6:0a:29:3f:f1:e9:f9:c5:ff:2b:46:
58:e4:89:19:f0:2a:bb:8a:3b:9a:b6:03:6a:18:3a:
04:d6:a0:ba:3f:86:61:e8:41:d0:6e:8a:8c:74:21:
76:69:68:7e:45:ff:b7:e2:9f:bb:f5:fa:41:62:34:
fb:04:4f:00:9a:f9:b4:1a:d7:e4:9f:25:49:cf:a8:
62:f7:cd:b9:9f:5d:b1:fc:a1:04:91:1d:c0:e6:e1:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:A2:E3:A4:9D:59:B3:04:93:2F:47:A6:41:E9:6E:EE:F8:3C:DC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bccdd23d-b92c-4f87-ada7-26de87fddc89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
73:6b:84:9e:df:93:ea:70:e0:85:bf:57:3c:2c:0d:89:61:8b:
2b:e8:37:3b:f7:57:32:1b:fd:c3:52:a6:5d:94:3e:ec:f4:c7:
b5:80:eb:6b:ac:d5:77:5f:70:86:33:3f:d4:41:bd:7d:32:ee:
c6:82:4b:aa:4a:92:a5:20:af:47:6b:94:6f:1c:30:c9:eb:e4:
68:c9:72:6b:b0:d5:31:e7:73:6c:04:c4:26:ca:4c:cc:e0:86:
a6:26:da:1a:ed:77:e2:d5:47:9b:42:82:fc:3c:9f:9d:e8:67:
35:72:22:68:fa:3b:cb:90:78:04:71:2e:99:01:db:09:ab:90:
6b:e0:bf:7f:93:17:7f:73:5e:23:7a:dc:35:fa:e9:e5:57:ba:
5c:8a:51:01:ab:53:38:d1:55:91:0e:1d:38:9b:71:f2:72:63:
e1:e8:1a:1b:0d:2f:66:f7:1d:06:21:db:75:b6:85:35:c8:cc:
88:ab:fc:9d:d4:6e:06:9b:10:83:b4:15:fd:00:68:18:69:ff:
57:d9:ac:7e:b3:3c:d5:b1:19:2f:e4:4f:29:c0:2c:b1:8e:c7:
69:ae:db:b1:20:ac:8e:df:52:54:10:67:48:a2:2f:48:7a:ee:
a7:78:d5:48:5e:0a:a8:5d:bf:1c:81:b6:f5:b1:95:40:ca:b5:
38:91:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org