Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
File: c0405df2-d412-488a-b5ee-d265912dd3cc.roa (raw, json)
Hash identifier: L5FU1LFEspEtt1hBXy//tYgUxj+P2yIna/EH1ukqFS4=
Subject key identifier: 88:88:8E:AD:58:C0:21:A7:FA:F9:F6:87:A7:40:C2:7B:A1:8C:4F:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 413BD31ECB4748D9D39C8FDE3394CCA61989B519
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 83.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3b:d3:1e:cb:47:48:d9:d3:9c:8f:de:33:94:cc:a6:19:89:b5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=51fe2ac81287ae8d75adf3808d4cad5301fefa371b5cdc9c901a9642ef432341, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:42:be:7c:b7:96:5e:a8:bc:ee:8a:f0:46:
aa:d6:55:29:b0:54:db:0e:ce:e1:ab:b7:95:36:bc:
01:d2:d0:7c:81:b4:6c:a7:8f:4b:d5:04:58:d6:c8:
8d:fc:33:35:29:6f:b5:e4:25:da:bf:f3:f5:bb:1e:
43:bf:9f:94:bc:c7:8e:33:d0:d2:6c:7a:8a:72:e7:
01:ba:85:67:a1:ca:6e:3a:20:ab:bf:32:13:61:cc:
eb:24:7a:b3:74:24:81:bb:bf:44:56:55:4e:67:78:
d8:cb:a2:8e:40:ab:4f:42:4a:c1:4c:32:74:a3:85:
dd:8b:ac:d8:6c:52:68:16:1f:85:d8:76:39:9f:f6:
dd:79:58:42:d4:74:a0:dd:10:01:de:77:e9:5c:a3:
65:68:31:9f:30:fb:9a:62:60:ff:e6:a8:2d:bd:25:
7b:26:b7:cb:f3:8d:26:ab:67:a4:d1:32:79:60:87:
24:0e:fc:bf:20:d6:7d:02:80:43:42:5a:15:41:62:
bb:ed:be:3e:e4:4b:82:b0:2c:c9:ae:53:9c:05:55:
1b:5a:97:a7:10:1f:f7:7a:85:d7:fb:2b:52:05:72:
72:bc:24:d9:f0:6f:85:63:17:90:12:32:25:8a:aa:
7d:c7:c1:f8:96:97:6d:c0:ff:e8:5e:0c:91:98:5d:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:8E:AD:58:C0:21:A7:FA:F9:F6:87:A7:40:C2:7B:A1:8C:4F:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:15:ae:a0:55:74:36:44:9b:c9:83:59:53:a0:2b:43:25:04:
58:be:e9:4c:60:99:5e:81:d9:02:4c:5e:05:92:08:01:0f:46:
5b:ea:71:f6:2a:f7:8d:a0:a7:55:e0:f3:4f:ea:f6:7b:26:a7:
93:25:c2:01:e8:9d:20:fb:6d:8b:04:09:1a:b3:97:6e:9d:f9:
59:57:ba:12:64:ba:af:2c:82:f1:96:24:f1:5e:b3:67:2c:f1:
17:3d:d0:f4:32:dc:ef:ad:ea:e2:74:c2:f7:c6:18:00:ab:5c:
14:a1:ab:ec:9a:6b:12:ed:d6:ae:a9:00:75:ed:05:a1:34:12:
47:22:b7:c0:1b:48:8a:cb:97:7e:78:c4:db:36:f4:2d:32:e5:
50:07:e1:56:26:b2:ae:e6:8c:91:f9:55:ff:2e:9b:81:a5:41:
47:01:31:4b:d7:1f:99:2c:c4:58:6c:22:04:f1:f5:52:2e:aa:
87:e4:54:e2:1f:64:05:1b:a2:ce:db:ea:48:61:7f:95:a4:6d:
d4:39:a7:10:9d:f4:53:bd:1c:99:ca:46:fb:c4:ac:90:68:fc:
89:7e:7d:17:df:57:6c:32:e7:be:06:6a:44:b8:37:80:bf:9b:
2a:9e:a9:60:1f:f8:19:2d:31:0c:d2:51:52:96:f4:85:c3:91:
88:29:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org