Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bcd928b4-d150-4c40-8fca-0a900d36cb1e.roa
File: bcd928b4-d150-4c40-8fca-0a900d36cb1e.roa (raw, json)
Hash identifier: rnEu9ManSFFERVGJ0W0EXYOTVN1BVSnpB2TSDxgMiqs=
Subject key identifier: AD:D0:C0:9A:44:62:13:22:CB:27:5B:57:3C:E7:09:BC:21:16:DA:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0CE57C2D8764CF61C6E03439C3A9894C4CC1DFFF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bcd928b4-d150-4c40-8fca-0a900d36cb1e.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 195.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e5:7c:2d:87:64:cf:61:c6:e0:34:39:c3:a9:89:4c:4c:c1:df:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=9d0088f2e3366958cc730bd40185538f8cb57c802afd89a2ddbde333d56118f0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:cf:b8:b5:7c:51:e2:12:9b:44:d3:38:fa:
4c:20:9e:ec:f3:7a:cb:80:5c:0e:f9:f9:ec:c0:bb:
ab:c0:48:07:4b:22:9e:15:01:cc:82:c2:2f:15:1b:
0d:cb:3f:a6:ce:2d:91:36:1e:44:9d:d0:50:d9:dc:
7f:5e:23:db:36:b8:9d:64:a7:7b:30:96:4b:8c:49:
93:70:9b:e2:75:0b:7a:ec:9f:ef:8b:60:1d:a5:0a:
96:a0:be:a0:9c:b4:95:60:f1:30:65:3c:3d:c7:97:
b0:31:68:0d:e8:5b:2c:92:0b:55:d4:b6:0d:56:3e:
67:85:f2:d4:86:67:54:a8:ba:5a:e8:d0:e8:34:44:
95:c7:17:ec:d0:3a:67:34:d8:57:0f:e4:8d:ca:65:
6f:26:aa:fa:a0:2a:d6:a8:cf:2c:89:4b:ab:55:21:
69:56:81:61:68:eb:5c:f8:43:a9:12:93:3d:7b:cf:
5c:bc:68:80:95:eb:07:cb:e6:3a:1e:54:fe:19:4a:
85:09:15:36:89:70:08:7d:63:74:43:f0:ac:fb:0c:
5b:3a:5b:6d:c6:c2:29:cd:cc:4b:0e:0e:3c:cd:88:
23:d9:e2:20:72:b2:26:19:37:22:00:91:81:a7:75:
04:7c:04:80:97:96:a0:bc:2b:25:c4:32:22:6b:48:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D0:C0:9A:44:62:13:22:CB:27:5B:57:3C:E7:09:BC:21:16:DA:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bcd928b4-d150-4c40-8fca-0a900d36cb1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:9c:76:df:5a:b6:02:09:b4:4b:0f:41:43:c8:18:59:ea:b5:
79:78:93:29:ce:8b:79:b4:16:98:13:7e:39:1c:fe:f5:a2:1c:
3f:34:9d:e0:5f:08:af:50:4d:89:2a:21:e5:d4:84:85:40:4e:
58:a9:fa:4d:bb:05:08:57:b1:8e:df:37:8c:6e:e2:c9:ea:ca:
14:dd:4b:67:2f:be:28:d9:01:6a:57:37:6d:a3:0a:dc:a4:85:
fe:3f:fe:b4:f6:03:a2:b5:8f:2d:5b:90:e0:7a:73:4b:db:10:
63:03:a8:dd:bd:a4:ab:30:4b:3f:16:9e:da:1d:78:f4:2e:a5:
d1:c3:6c:ed:92:c0:da:22:e6:02:ba:52:65:6e:d1:c5:c3:3f:
84:33:8f:1b:bc:13:6b:88:7b:cf:ab:cf:bb:9d:98:57:9b:49:
4f:dc:b4:3b:10:3b:4f:3f:68:66:c4:19:6c:70:9a:3d:61:e6:
fe:4e:f3:f4:2f:8d:b5:ff:86:0f:fc:24:b7:dd:c8:6d:49:22:
d7:fc:14:03:4d:31:68:b3:f5:ec:23:99:53:61:61:39:8e:b2:
4a:73:54:a5:b4:fd:5b:c7:cf:49:b8:cd:6e:e1:07:0c:0a:1b:
80:62:85:3d:0a:27:1e:d0:35:fd:0f:61:77:34:5b:86:57:20:
d5:22:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org