Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
File: ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa (raw, json)
Hash identifier: OsLxxc75XPB4X2H/HB01f8uX/kiwlWT0lF7L+9B4AVQ=
Subject key identifier: E8:01:62:10:7C:5F:DE:4E:99:32:3D:39:8F:A8:41:71:C7:16:7A:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 239DAA13738842F581CACD9C54311013F9CD4DF1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9d:aa:13:73:88:42:f5:81:ca:cd:9c:54:31:10:13:f9:cd:4d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=b69b79b475861eb98e656007d8c9dfdfdae9ecfc549b2e2c011ad0f566ee71d8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:9d:39:39:aa:b5:f3:3e:7b:c1:98:28:b7:
0b:92:ce:c1:e2:bf:70:92:c2:b0:7c:39:3e:d6:99:
3c:df:e4:e6:12:07:f4:4d:a7:cb:be:11:47:58:5c:
04:e0:5f:23:25:e6:5b:8f:ba:14:ab:c0:d4:c3:41:
56:37:13:8e:05:fa:5f:26:66:0a:7f:cc:80:72:97:
0e:10:45:69:b7:f2:09:b1:1e:7a:8b:68:ae:92:c6:
38:7f:47:cc:c7:e9:31:56:f8:d9:44:df:7c:0b:18:
4a:22:d3:c6:2d:ae:8b:3f:fd:e4:28:c9:a3:e2:fc:
35:8d:f9:b5:92:90:1e:d7:f4:05:29:00:02:39:d0:
9f:01:e9:d1:3a:a0:8d:1f:69:b0:99:a8:6a:46:e3:
5d:92:b3:6b:cb:4e:7d:ee:a5:27:ed:85:c0:2c:d1:
5e:a0:68:cc:68:2d:be:9a:8f:0b:a7:cf:4d:d4:a4:
bf:a0:5c:90:79:0f:41:9a:98:4f:02:f5:e3:22:ba:
64:c7:35:e0:4a:07:e8:7c:6d:7f:69:d4:b8:ac:64:
93:b6:48:29:06:3d:a2:9d:69:c3:99:80:b4:84:2b:
d0:6c:48:a8:61:aa:d4:db:a2:5a:31:e3:f0:b1:e5:
8c:68:4b:1f:d7:4f:d3:ce:ce:78:9c:32:11:47:37:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:62:10:7C:5F:DE:4E:99:32:3D:39:8F:A8:41:71:C7:16:7A:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:6a:f7:81:f5:04:c0:76:f5:53:35:00:2a:25:61:37:37:ed:
df:d3:25:05:c0:39:e5:2e:15:70:cd:d9:e9:3c:ba:b6:1b:34:
e6:19:67:59:c9:c6:b6:aa:cf:84:dd:19:a3:37:ca:4e:e6:dc:
de:3b:fe:63:3c:e8:fe:8e:8a:d1:fb:33:9e:9d:2c:eb:f0:02:
f3:4f:07:08:b3:93:d2:94:b3:71:08:e4:8c:a8:17:9c:7c:70:
2b:4c:c9:b7:4f:58:bd:a6:6b:46:30:a2:20:5e:74:0b:7a:a6:
41:b2:50:50:13:af:d0:c0:ac:22:15:be:5d:e0:7d:54:39:9a:
a0:45:6a:97:ca:64:8c:0f:37:76:e3:3a:1f:1d:75:d7:c8:cf:
e9:39:e0:99:a5:b0:32:4e:64:1e:c1:43:e1:cf:b3:0f:19:d6:
7a:98:89:fb:d2:b2:ed:b0:be:3f:99:41:6a:b1:99:15:0a:99:
fc:10:22:df:63:4c:45:e4:e7:08:e2:db:86:ea:e8:3e:0d:ef:
69:84:fa:7b:5f:79:e6:9e:1f:69:13:0f:ea:7e:b4:29:4b:28:
56:01:06:55:70:06:be:e1:99:56:b5:6d:5f:ca:97:d0:8c:7d:
9e:c6:41:ad:91:b0:fd:90:89:58:ea:06:21:d6:a3:86:07:95:
8d:3f:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:43 2024 by rpki-client on console-fra.rpki-client.org