Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c2c395e2-491c-4141-ba1e-1b3717841063.roa
File: c2c395e2-491c-4141-ba1e-1b3717841063.roa (raw, json)
Hash identifier: 9J+6rCJjgkpBbFVuC9u0pxdkdvJR3E7EvZXIdAT39Oo=
Subject key identifier: 55:2D:F9:75:A4:53:2B:06:8D:16:73:A6:29:15:99:51:97:EF:21:65
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 8D517BC99982EA206DD8B0FF183F65953AD682
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c2c395e2-491c-4141-ba1e-1b3717841063.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.152.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8d:51:7b:c9:99:82:ea:20:6d:d8:b0:ff:18:3f:65:95:3a:d6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=cf04c3280a4c4ff3e4e59ab542315bbb84a2ea9b920c7af31b7bb67ddcfd87bc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:73:a8:ac:da:ed:14:e7:3e:bf:41:4d:8e:
ce:66:cc:9e:43:7b:1d:19:36:30:e8:bf:0d:28:38:
12:ab:e4:a2:33:6d:be:b0:98:34:3d:54:83:78:d3:
0b:df:76:6b:8a:92:54:e2:05:76:68:3d:b5:11:05:
bb:42:c4:0c:f0:08:1a:fa:1c:cb:51:75:4c:f3:59:
0f:85:d8:fb:a1:7f:a9:aa:7b:d3:90:a5:1d:bc:ce:
f6:6a:b2:1c:c2:31:88:2f:37:27:f3:b9:39:db:5c:
60:09:a7:51:a7:e3:46:df:d7:80:53:41:12:f1:50:
4b:77:ee:18:0c:96:b7:70:04:71:2e:f0:52:f8:22:
ff:fc:5d:e9:2c:6e:ab:62:d9:25:32:83:c8:c4:e2:
11:52:37:19:13:02:cd:25:9e:1d:b9:ca:b7:d9:cb:
83:a5:80:c4:39:2b:2c:3b:d5:3c:cf:b1:bc:0e:5d:
91:99:c3:0e:f1:46:06:35:c1:b8:58:84:6d:e7:45:
20:c3:e9:53:ab:1f:0e:4b:94:fe:a6:f5:7e:56:e9:
7c:6a:c8:82:59:fe:8f:f7:4e:11:99:91:8e:27:1e:
8e:b6:d9:c0:11:e1:66:04:27:73:fd:c9:46:4c:d7:
2d:71:f6:36:08:11:01:3e:05:a6:c1:27:4c:db:ae:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:F9:75:A4:53:2B:06:8D:16:73:A6:29:15:99:51:97:EF:21:65
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c2c395e2-491c-4141-ba1e-1b3717841063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.152.0.0/15
Signature Algorithm: sha256WithRSAEncryption
cf:75:b4:3e:a0:53:8e:5c:1a:92:03:6c:24:71:22:64:ef:3b:
97:a1:7d:2e:f8:24:f0:70:bd:58:17:39:9a:d1:d9:72:bc:2e:
02:0c:99:9c:5a:71:a7:26:74:c1:e1:e2:44:b6:3a:91:cb:4f:
fc:fe:22:85:3c:69:68:53:93:75:7a:8a:69:8a:24:18:5e:14:
5c:59:f3:22:a0:98:12:fe:56:ba:5f:27:db:2a:56:b3:f4:2c:
91:31:a3:0c:5e:fb:14:a3:8f:57:44:24:67:c7:a7:9e:81:82:
cd:cc:9c:ff:f0:59:c0:f9:04:36:12:b8:5f:e4:7c:0e:b7:cf:
08:73:50:0c:d8:cc:51:95:63:82:ed:90:73:d6:2e:f3:00:a0:
a6:cb:ad:4d:e9:6c:65:a2:47:73:d5:6c:68:51:43:1a:e0:42:
06:5a:bb:c6:df:fa:76:5f:52:28:21:bd:ac:d2:b0:48:dc:47:
4c:03:94:65:e5:76:b4:45:24:77:fc:d6:9f:23:82:f4:2e:b2:
47:f5:de:88:ec:9d:36:ae:da:6c:ed:75:d5:34:a4:b0:24:87:
d0:59:30:cf:86:1f:d1:d1:a3:d5:34:7e:9a:62:81:6c:c1:cd:
72:71:c7:55:a0:d7:ca:ee:51:b6:b9:0a:60:e8:fe:a5:43:53:
fd:05:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org