Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ebe19f-8477-476a-894a-ce55eb72ce4b.roa
File: c7ebe19f-8477-476a-894a-ce55eb72ce4b.roa (raw, json)
Hash identifier: 9k2p+VHNNE6aIfmqRaPtKnVqV/W6zllDU5vPbkYDcN4=
Subject key identifier: 23:A6:4B:EB:66:DF:5F:F4:AE:DE:AF:E2:88:02:98:99:7C:8F:18:35
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2525B0C13E51AF5967FBEB2FB92064F0CB2056B7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ebe19f-8477-476a-894a-ce55eb72ce4b.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:25:b0:c1:3e:51:af:59:67:fb:eb:2f:b9:20:64:f0:cb:20:56:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=429e9dbf536bae022104e44a09efe4a071908720076b45ff2e737140ff08c5aa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:39:43:8e:6d:02:63:c0:25:27:42:78:9e:
1f:a0:43:f1:67:ee:7d:fb:f6:12:b8:33:21:e0:9f:
b8:f3:a8:52:e2:6d:52:b4:4a:34:25:43:1d:27:06:
1f:38:45:df:84:c5:f6:9a:76:2e:0b:9f:8a:aa:b6:
99:88:36:87:71:c6:94:fa:52:02:b0:40:eb:18:fd:
23:d5:5b:71:8b:65:65:ad:16:b6:df:13:67:f6:34:
54:a8:85:a3:37:78:f0:3a:a7:f6:09:ed:44:b8:60:
74:58:1f:1d:5a:b5:9b:34:e2:95:67:b6:36:18:79:
29:9d:2a:87:0a:58:7b:69:00:ca:12:3f:b9:6f:55:
0a:f2:26:f9:39:4a:e7:f6:e7:1b:6c:1b:33:49:c8:
cb:49:15:81:df:fd:fd:db:4e:36:bd:a3:b4:db:0b:
d3:94:39:63:42:92:de:b5:74:bc:88:02:90:0e:31:
72:23:b0:cf:5f:8b:62:68:af:1d:aa:24:38:ff:65:
f0:5d:77:0d:0b:21:29:1c:73:82:ef:72:32:e3:f0:
61:73:6c:66:11:d0:90:0c:95:b4:57:6e:eb:01:91:
6e:af:3a:50:c3:25:5e:b2:61:5a:c4:56:68:cf:e9:
74:9d:29:e9:8a:c8:84:cc:e4:2f:b6:8a:5f:3c:3e:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:4B:EB:66:DF:5F:F4:AE:DE:AF:E2:88:02:98:99:7C:8F:18:35
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ebe19f-8477-476a-894a-ce55eb72ce4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
20:7b:bd:6d:ac:e4:d7:c8:51:47:2b:25:30:d0:24:2c:b6:03:
f8:25:78:fe:ea:69:44:00:b7:93:1a:01:28:a1:ec:d5:20:55:
9d:76:e7:ca:c9:63:43:3b:d3:bc:06:fe:26:7a:29:ca:a7:c3:
09:be:86:70:24:c0:b6:db:27:ba:a3:1d:98:5f:96:f6:32:c3:
1d:6d:db:95:31:d2:e9:34:2f:de:ec:d9:86:9c:ed:4a:9b:fc:
3c:e7:32:9b:51:85:7d:7d:52:73:72:52:b7:46:42:ec:70:e7:
ea:2f:d8:4a:cc:c8:55:43:33:9c:79:c4:db:5d:94:67:4a:fc:
42:95:e5:8a:dd:1d:ab:4e:79:00:17:6a:bb:19:97:0b:7e:f8:
98:5c:40:94:1b:e7:40:29:50:8f:b3:ef:d8:0d:00:f4:27:6e:
c1:70:42:1b:56:0a:24:e0:72:cc:97:b1:80:cb:a8:c6:df:b0:
21:10:96:2d:d9:07:3b:00:7d:38:80:35:0a:f2:30:56:d4:11:
f0:45:dd:7e:3b:c5:7c:44:81:db:f9:5a:b8:83:31:d8:72:cc:
bd:e1:03:09:36:87:a5:8a:84:f2:fb:ac:77:ac:ce:35:5f:1a:
29:06:96:32:ac:fd:e3:08:1b:ab:76:61:89:ec:d7:f3:ec:1f:
2b:6a:44:0d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUJSWwwT5Rr1ln++svuSBk8MsgVrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjYwMDAwMDBaFw0yNDA1MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDQyOWU5ZGJmNTM2YmFlMDIyMTA0ZTQ0YTA5ZWZlNGEwNzE5MDg3MjAwNzZi
NDVmZjJlNzM3MTQwZmYwOGM1YWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKJgOUOObQJjwCUnQnieH6BD8Wfuffv2ErgzIeCfuPOoUuJtUrRKNCVDHScG
HzhF34TF9pp2Lgufiqq2mYg2h3HGlPpSArBA6xj9I9VbcYtlZa0Wtt8TZ/Y0VKiF
ozd48Dqn9gntRLhgdFgfHVq1mzTilWe2Nhh5KZ0qhwpYe2kAyhI/uW9VCvIm+TlK
5/bnG2wbM0nIy0kVgd/9/dtONr2jtNsL05Q5Y0KS3rV0vIgCkA4xciOwz1+LYmiv
HaokOP9l8F13DQshKRxzgu9yMuPwYXNsZhHQkAyVtFdu6wGRbq86UMMlXrJhWsRW
aM/pdJ0p6YrIhMzkL7aKXzw+sa0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQjpkvr
Zt9f9K7er+KIApiZfI8YNTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzdlYmUxOWYtODQ3Ny00NzZhLTg5NGEtY2U1NWViNzJjZTRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB8P+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAIHu9bazk18hRRyslMNAkLLYD+CV4/uppRAC3kxoB
KKHs1SBVnXbnysljQzvTvAb+JnopyqfDCb6GcCTAttsnuqMdmF+W9jLDHW3blTHS
6TQv3uzZhpztSpv8POcym1GFfX1Sc3JSt0ZC7HDn6i/YSszIVUMznHnE212UZ0r8
QpXlit0dq055ABdquxmXC374mFxAlBvnQClQj7Pv2A0A9CduwXBCG1YKJOByzJex
gMuoxt+wIRCWLdkHOwB9OIA1CvIwVtQR8EXdfjvFfESB2/lauIMx2HLMveEDCTaH
pYqE8vusd6zONV8aKQaWMqz94wgbq3ZhiezX8+wfK2pEDQ==
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org