Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
File: c0cc077c-c457-49fe-8373-08e978cb64fd.roa (raw, json)
Hash identifier: 8p7azkK7biLm+U4mY2hUvKSNZD6OA92ahfj9nK7e0Sg=
Subject key identifier: 7E:79:31:DB:04:9D:9D:3A:52:0C:D1:57:6D:0D:F2:6F:3D:B5:C5:97
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1500DE5231FB2DF90508CDCE530A5504E5B94593
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:de:52:31:fb:2d:f9:05:08:cd:ce:53:0a:55:04:e5:b9:45:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=6e1865720988eaf018e5fce9dd27c345fed1a7a29bc9b666666319ba58ccdbbe, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:a7:ed:54:7b:02:fb:e6:97:c1:ed:2e:31:
f0:84:0e:0f:99:ac:85:ca:da:99:18:8d:62:86:63:
b5:e8:f1:98:3a:3a:a3:18:bd:43:7f:45:6d:7f:11:
d3:6c:2c:4b:29:f3:0b:bf:56:30:5f:17:43:a6:5d:
90:81:a1:d8:73:f0:0c:f3:e8:5a:d8:9e:22:24:18:
03:0d:75:3e:47:71:10:d1:b1:fb:8f:89:71:65:48:
de:51:14:b3:f9:31:90:2b:d0:3b:2c:75:43:a7:72:
6e:7c:ea:9c:c3:1c:70:91:57:59:90:5a:cf:73:b3:
89:96:62:42:93:0b:28:a4:31:cc:70:05:aa:5e:a8:
1e:77:ed:6f:ee:67:53:62:a2:30:96:03:f1:53:56:
10:69:95:f2:df:77:ef:a5:59:f6:04:82:e1:9a:1c:
68:67:c9:77:c9:e7:2f:2f:b5:d1:e1:76:36:0c:8b:
9e:6f:e8:fc:93:1e:d5:f2:1a:5b:6e:a6:3f:95:24:
49:6e:cc:52:69:c0:a1:88:47:48:42:15:9f:69:0b:
f5:06:10:5f:be:a8:43:9b:99:50:c2:b1:b2:4b:90:
cb:71:f8:25:fc:18:67:9b:1b:6d:67:76:ad:9a:48:
ac:17:16:27:53:3c:7a:c5:c0:13:09:a9:a5:24:5e:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:31:DB:04:9D:9D:3A:52:0C:D1:57:6D:0D:F2:6F:3D:B5:C5:97
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2f:2e:20:d7:69:d3:b2:df:96:0a:53:f6:75:f8:60:f3:23:c0:
33:8a:15:3a:56:21:9b:2f:e1:95:ab:ce:2f:98:e6:c7:f8:4a:
03:f6:cc:fd:65:af:94:34:e4:f4:93:88:e7:e9:68:53:46:86:
71:d3:ea:29:02:a0:a8:0b:71:df:ba:50:8b:bd:a5:42:5b:09:
51:ab:f1:0e:57:d8:4c:17:0b:e3:22:0e:2a:be:44:30:82:26:
ea:ce:25:27:1e:4a:31:44:2a:0b:fa:2b:af:2e:da:a8:bb:0b:
88:02:ac:d0:de:dc:2c:46:c3:92:05:91:b8:b6:48:e9:57:0f:
e7:4c:31:ca:1d:93:9d:88:19:bd:f1:89:91:bc:9b:73:ce:e7:
fc:5f:7d:ce:77:63:6b:b8:ed:3e:32:49:ee:ff:e2:f6:64:3d:
8e:63:fb:37:9d:20:b3:cb:d0:d4:41:2d:e7:73:6a:d8:57:f9:
1b:a7:08:1b:44:b6:71:93:6f:66:b8:72:c8:52:71:8d:11:8c:
75:27:a1:bd:bf:22:5a:94:ed:9c:88:12:81:7b:68:36:ff:fd:
5f:2a:22:f1:72:f3:15:76:68:85:57:02:c9:8f:15:5d:cd:88:
a0:98:4f:e8:f0:4e:a4:5c:38:33:37:b3:4c:df:7e:5b:70:0b:
b1:57:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org