Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cefec67c-4401-4bc7-ac7b-46a110be0c45.roa
File: cefec67c-4401-4bc7-ac7b-46a110be0c45.roa (raw, json)
Hash identifier: p9JuA2x9yLoh8mXllknfZBqz1PeH3BVDCxkCYjAgM/4=
Subject key identifier: 86:10:42:3C:F3:42:63:AF:D3:C3:85:25:38:7A:5B:43:78:85:86:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5367F21004F6B45AFDB824EE15C456FAF3FDA239
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cefec67c-4401-4bc7-ac7b-46a110be0c45.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.192.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:67:f2:10:04:f6:b4:5a:fd:b8:24:ee:15:c4:56:fa:f3:fd:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=16dfb97e652517c7103837c4ab97b87fb1a3f35c1ac0a8bbed97bbaf41733eca, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:79:a0:35:0d:cc:a5:94:37:81:38:40:12:
f2:24:5f:33:d7:13:14:42:e9:4c:85:04:d7:03:2b:
30:6b:38:42:6a:40:4e:e8:97:de:6d:3f:83:0a:18:
30:20:db:55:18:cf:89:8a:d3:0a:13:e6:62:66:c8:
40:9d:94:84:34:b6:aa:22:c2:87:61:59:84:c6:da:
d2:6f:a5:e2:5d:d3:f7:97:73:d3:92:cf:82:23:a6:
c6:e3:eb:14:33:43:bb:07:78:1a:d9:e1:36:92:3b:
5a:4a:e0:bf:c0:6e:aa:1e:41:f6:1a:7d:f5:93:70:
b8:b0:b6:c1:e7:df:63:68:e4:3b:56:36:20:20:6d:
b0:48:d9:89:d0:ac:d4:bd:ff:70:1b:1f:a4:aa:0b:
96:72:e9:5b:34:11:12:35:93:f0:cd:ce:60:2a:6b:
1c:67:33:eb:d5:93:99:ce:b9:8c:3f:e7:8b:cb:ed:
e0:29:99:17:bb:ad:cd:47:d2:d6:07:07:04:9c:ae:
8d:ff:cf:f1:bd:de:53:4d:55:e5:51:b1:ae:f6:66:
b5:c5:40:33:49:c4:40:69:a0:e2:91:f7:9d:cc:af:
d3:3e:3e:4c:4b:b3:5f:a0:e1:cf:1c:fa:81:5e:5e:
f2:2b:f1:b3:d6:af:ce:ef:75:92:d2:40:b7:28:16:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:42:3C:F3:42:63:AF:D3:C3:85:25:38:7A:5B:43:78:85:86:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cefec67c-4401-4bc7-ac7b-46a110be0c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ad:0a:d8:f4:df:92:31:47:0d:9b:79:ae:d5:01:c2:f9:33:97:
0b:a6:a6:04:c0:7c:dc:74:46:70:80:01:d4:a2:a8:77:ef:01:
80:01:9b:2a:68:2a:be:a0:15:93:a8:ac:ac:87:13:df:7b:87:
cb:6d:f2:e8:e9:bf:7f:c7:e0:4a:14:2f:d1:7a:f3:15:39:15:
a0:b1:fd:f0:9e:a4:2b:91:3f:0e:4f:0f:98:b4:0b:b0:31:1c:
7c:23:84:4b:48:3e:0d:eb:32:4b:df:26:ae:84:75:a3:03:85:
bb:5b:ed:00:ff:37:e3:92:5b:3b:0b:b9:78:89:fd:90:93:6a:
55:1e:b5:f6:4d:f0:04:18:93:5f:69:f4:0a:62:30:89:fc:20:
29:7f:77:ca:26:ac:f8:74:c0:13:fb:4b:60:56:50:d6:5f:de:
fc:a0:6e:c0:40:a4:be:be:8a:be:c5:18:f3:8d:8c:09:ad:97:
1b:89:7d:9d:53:9c:82:84:fd:68:85:3f:61:83:3c:a3:74:3e:
c1:a9:57:cb:a3:66:df:fc:32:e0:f0:6d:cc:1f:30:7c:06:c2:
a1:1f:30:d1:06:3b:54:fd:04:a8:d5:67:65:c6:1e:42:b8:f5:
18:e7:cc:34:e8:d3:1d:a6:d6:99:3d:b1:b1:08:ca:9d:9a:b8:
a1:84:64:22
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUU2fyEAT2tFr9uCTuFcRW+vP9ojkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2ZGZiOTdlNjUyNTE3YzcxMDM4MzdjNGFiOTdiODdmYjFhM2YzNWMxYWMw
YThiYmVkOTdiYmFmNDE3MzNlY2ExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ0GeaA1DcyllDeBOEAS8iRfM9cTFELpTIUE1wMrMGs4QmpATuiX3m0/gwoY
MCDbVRjPiYrTChPmYmbIQJ2UhDS2qiLCh2FZhMba0m+l4l3T95dz05LPgiOmxuPr
FDNDuwd4GtnhNpI7Wkrgv8Buqh5B9hp99ZNwuLC2weffY2jkO1Y2ICBtsEjZidCs
1L3/cBsfpKoLlnLpWzQREjWT8M3OYCprHGcz69WTmc65jD/ni8vt4CmZF7utzUfS
1gcHBJyujf/P8b3eU01V5VGxrvZmtcVAM0nEQGmg4pH3ncyv0z4+TEuzX6Dhzxz6
gV5e8ivxs9avzu91ktJAtygWUCsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSGEEI8
80Jjr9PDhSU4eltDeIWGvzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Y2VmZWM2N2MtNDQwMS00YmM3LWFjN2ItNDZhMTEwYmUwYzQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPAMA0G
CSqGSIb3DQEBCwUAA4IBAQCtCtj035IxRw2bea7VAcL5M5cLpqYEwHzcdEZwgAHU
oqh37wGAAZsqaCq+oBWTqKyshxPfe4fLbfLo6b9/x+BKFC/RevMVORWgsf3wnqQr
kT8OTw+YtAuwMRx8I4RLSD4N6zJL3yauhHWjA4W7W+0A/zfjkls7C7l4if2Qk2pV
HrX2TfAEGJNfafQKYjCJ/CApf3fKJqz4dMAT+0tgVlDWX978oG7AQKS+voq+xRjz
jYwJrZcbiX2dU5yChP1ohT9hgzyjdD7BqVfLo2bf/DLg8G3MHzB8BsKhHzDRBjtU
/QSo1Wdlxh5CuPUY58w06NMdptaZPbGxCMqdmrihhGQi
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org