Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
File: c806309a-9e3e-4b0e-aad2-1356d070a437.roa (raw, json)
Hash identifier: O8bd3xj3Zlun9JanstRqj9BoBpgiYPQuZbG0W00rNes=
Subject key identifier: 29:A5:60:BE:BB:DF:CA:5B:9F:1A:F0:ED:2D:BE:24:8D:C4:30:57:DF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36F169E56A2ADC3A14833CCE59388C8D5FCAFD50
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f1:69:e5:6a:2a:dc:3a:14:83:3c:ce:59:38:8c:8d:5f:ca:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=c7b0ecd418750fde8d0dfa992c856efbaf1f1b2d185ee8dfa8f4c94d1cf2c10c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:70:16:4c:d5:73:a2:ea:69:c2:99:9f:5b:
5e:c7:b4:ec:90:d4:7a:15:7d:1c:e9:82:68:d7:3e:
2d:98:31:e0:56:cd:45:71:5a:25:49:50:07:6e:e4:
37:ed:73:dd:b3:49:2b:3f:cb:6a:28:a3:42:a1:f3:
10:31:94:d7:b0:ae:99:a9:0b:bd:09:d0:c3:69:19:
e9:f7:1e:97:cf:1e:98:6e:cc:ce:55:0a:96:55:d0:
67:ef:b2:17:48:51:0f:87:8b:41:f6:aa:31:49:7a:
11:7c:1c:db:d1:9b:99:5f:c9:bc:24:76:20:f2:96:
18:0c:26:58:c2:49:ec:31:ab:1e:e2:5b:b8:c0:1b:
27:c3:c6:90:32:69:e3:61:4d:de:6f:fd:79:1f:e6:
9a:35:1f:7c:43:30:fa:5d:42:62:56:e4:80:61:b1:
3c:c6:25:3a:7f:2b:b4:dc:80:9b:f5:e9:70:ef:35:
41:11:b0:b2:30:ea:ec:b5:78:dd:be:96:3b:33:45:
1d:4c:52:83:49:ef:d3:75:34:9e:e4:ce:fa:83:e2:
95:76:2e:0a:45:4b:74:c1:60:26:a9:f0:38:99:38:
7f:65:76:41:e3:27:71:3c:4c:b3:a8:bc:d9:18:49:
00:59:2a:45:99:60:06:4e:14:77:26:09:26:a4:3a:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A5:60:BE:BB:DF:CA:5B:9F:1A:F0:ED:2D:BE:24:8D:C4:30:57:DF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:13::/48
Signature Algorithm: sha256WithRSAEncryption
c4:51:96:57:b1:2b:4d:64:2a:07:91:b6:74:25:fd:55:f5:3d:
fb:bb:5d:98:46:47:30:42:c2:dc:f2:fe:91:d6:9e:8d:b5:a0:
d0:7c:b3:e3:38:a4:2c:7d:cb:cc:28:90:5d:4d:56:e4:24:8e:
5f:a4:c4:b5:82:92:c6:f9:28:ad:ad:a8:4d:85:4f:09:3a:88:
f1:ac:e8:a8:60:b6:e6:37:bf:49:7a:03:47:bd:c2:99:24:72:
b1:4d:d3:a1:ed:09:81:5f:68:32:a0:eb:14:a6:53:7f:a5:1f:
a5:2f:95:ce:c4:4b:a7:e0:6c:a7:19:54:5d:43:78:a3:7a:cd:
d0:79:d8:11:2c:3f:f6:d5:63:da:81:b5:c0:2c:96:97:16:12:
af:b6:13:07:57:54:6e:ec:56:2a:40:c6:b2:b4:9c:0c:82:02:
2a:e5:22:6b:88:bb:9f:39:30:f3:0e:65:8c:52:8a:be:e2:f9:
5e:21:44:f8:d9:aa:c5:d7:f2:32:83:f4:da:f3:5f:35:fc:9c:
d3:e7:ae:5f:02:0c:db:a1:98:77:01:c2:50:b4:19:09:48:50:
e8:56:68:3a:81:14:1b:7c:c1:94:76:0d:5b:25:18:1c:32:c4:
48:44:24:d6:04:0a:71:16:9c:c8:f6:f3:8a:ce:32:33:c5:95:
fc:c5:cd:ad
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUNvFp5Woq3DoUgzzOWTiMjV/K/VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA2MTAwMDAwMDBaFw0yNDA3MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGM3YjBlY2Q0MTg3NTBmZGU4ZDBkZmE5OTJjODU2ZWZiYWYxZjFiMmQxODVl
ZThkZmE4ZjRjOTRkMWNmMmMxMGMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANEScBZM1XOi6mnCmZ9bXse07JDUehV9HOmCaNc+LZgx4FbNRXFaJUlQB27k
N+1z3bNJKz/LaiijQqHzEDGU17CumakLvQnQw2kZ6fcel88emG7MzlUKllXQZ++y
F0hRD4eLQfaqMUl6EXwc29GbmV/JvCR2IPKWGAwmWMJJ7DGrHuJbuMAbJ8PGkDJp
42FN3m/9eR/mmjUffEMw+l1CYlbkgGGxPMYlOn8rtNyAm/XpcO81QRGwsjDq7LV4
3b6WOzNFHUxSg0nv03U0nuTO+oPilXYuCkVLdMFgJqnwOJk4f2V2QeMncTxMs6i8
2RhJAFkqRZlgBk4UdyYJJqQ6il8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQppWC+
u9/KW58a8O0tviSNxDBX3zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzgwNjMwOWEtOWUzZS00YjBlLWFhZDItMTM1NmQwNzBhNDM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBXgA
EzANBgkqhkiG9w0BAQsFAAOCAQEAxFGWV7ErTWQqB5G2dCX9VfU9+7tdmEZHMELC
3PL+kdaejbWg0Hyz4zikLH3LzCiQXU1W5CSOX6TEtYKSxvkora2oTYVPCTqI8azo
qGC25je/SXoDR73CmSRysU3Toe0JgV9oMqDrFKZTf6UfpS+VzsRLp+BspxlUXUN4
o3rN0HnYESw/9tVj2oG1wCyWlxYSr7YTB1dUbuxWKkDGsrScDIICKuUia4i7nzkw
8w5ljFKKvuL5XiFE+NmqxdfyMoP02vNfNfyc0+euXwIM26GYdwHCULQZCUhQ6FZo
OoEUG3zBlHYNWyUYHDLESEQk1gQKcRacyPbzis4yM8WV/MXNrQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:43 2024 by rpki-client on console-fra.rpki-client.org