Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cc65de9d-dc78-4e7d-96ff-16c3294057be.roa
File: cc65de9d-dc78-4e7d-96ff-16c3294057be.roa (raw, json)
Hash identifier: kb2GPU6RcTxuN2whGBu/9HozKOwh+Ha21L3ReOCju+E=
Subject key identifier: 75:2D:F6:54:60:4B:DF:7A:F9:19:95:2F:45:FB:B1:B2:9A:61:84:30
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3F7C7D268C908B1A055BC1636A3705AE897A1728
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cc65de9d-dc78-4e7d-96ff-16c3294057be.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7c:7d:26:8c:90:8b:1a:05:5b:c1:63:6a:37:05:ae:89:7a:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=acb275e479ede04dd9af72b9558876350aff7fd89d4c2bfce2bd90418414cf9e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:62:6f:4e:ae:2e:3a:00:57:36:91:af:14:
6a:5a:ba:0a:e4:69:9a:4c:48:b0:28:31:17:17:84:
ad:5b:63:27:6a:f1:a8:86:16:1a:2d:83:67:53:57:
b5:26:56:f6:37:1a:37:42:2b:b9:44:9b:97:f4:dd:
09:4f:88:35:79:41:fc:cf:21:98:28:0c:7d:a0:3a:
f6:8f:14:02:48:ea:70:6a:6c:10:25:68:5f:f1:c9:
60:e5:cc:a0:a6:42:05:3a:49:66:3f:5e:01:be:3e:
f7:e2:11:e6:a4:e7:8d:10:a7:19:ea:84:ab:31:4f:
5e:42:2c:88:16:6e:ed:bb:30:b9:25:d9:7f:00:cc:
f4:79:18:2b:f2:b3:73:96:e4:38:2a:db:83:f6:11:
7e:da:66:14:b7:d1:e4:90:2c:02:c7:40:fd:1d:c4:
68:63:00:73:39:53:18:71:5b:0a:37:39:fb:ed:8d:
4f:43:7e:0b:86:7a:b1:f3:a3:e9:75:75:f7:40:7a:
00:e6:cd:0d:56:39:cc:2e:b8:f9:89:6d:5a:64:c9:
47:c9:1e:e9:89:07:ba:91:7d:1d:c2:50:a0:b1:bc:
c0:1a:35:5e:0c:f7:5d:44:dc:0e:2c:bf:8d:14:8b:
2e:76:77:9f:16:78:83:4d:08:e9:60:98:98:1f:7a:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:F6:54:60:4B:DF:7A:F9:19:95:2F:45:FB:B1:B2:9A:61:84:30
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cc65de9d-dc78-4e7d-96ff-16c3294057be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:ec:d9:1c:96:4d:ad:42:8f:51:36:f8:ff:61:47:1c:87:2e:
b5:d3:94:94:9b:e2:a1:50:cd:34:55:0c:ce:85:f7:21:40:41:
a5:c0:c3:a3:73:f9:36:b4:dd:82:a6:f0:68:3b:3c:b9:e4:a9:
d4:9e:a4:6b:8e:77:ac:fd:eb:35:ed:e0:a0:77:10:4f:3a:f5:
80:27:d7:eb:6d:f5:7d:1e:26:17:43:3a:70:89:61:67:c7:a6:
35:78:c3:b7:8a:5c:78:5b:de:35:9d:06:fb:ab:9e:27:d8:79:
de:ec:36:b2:12:ba:07:0d:a1:73:6f:ca:41:25:9d:d2:c6:eb:
7f:23:8b:a6:0b:05:8c:68:29:38:98:fd:48:9c:aa:34:12:3e:
5a:bb:70:8a:42:ae:5b:e6:53:69:cf:b6:ed:d1:89:1d:41:d0:
0d:d1:f7:d2:e1:23:8c:81:fa:8a:f9:3f:ca:1b:bb:bc:cd:e9:
f9:53:83:89:8c:97:b8:23:76:ce:35:c2:27:18:c5:f7:64:b2:
2a:f2:25:b1:01:c7:e0:e4:a1:6b:85:9d:b2:7c:30:1f:e1:f6:
8b:76:bf:e2:f2:6b:5a:4b:04:53:2f:15:15:ac:63:af:7b:82:
c4:13:9d:1d:d1:09:6a:ee:4c:a6:ee:37:59:46:ab:50:29:ed:
4b:21:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org