Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa
File: d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa (raw, json)
Hash identifier: +2I3ZAJutS1Jr7kkVEom/W4qAZ/bOFI/qWwosQPTlj0=
Subject key identifier: 04:CB:9B:84:9F:03:FD:26:06:48:79:10:FD:64:5D:6F:13:7A:46:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 69A12CA97D779EB0FFDF6F702DBFC2F53D4DBBB1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 57.104.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a1:2c:a9:7d:77:9e:b0:ff:df:6f:70:2d:bf:c2:f5:3d:4d:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=4f345802b1af05ee20fc95f4990aaa0a527a572a1df16616a2a7317e51c6cf62, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:ff:24:cb:2e:70:9c:91:7f:7e:d0:9e:01:
92:cc:f6:eb:9d:d1:0b:03:c8:77:9f:9a:bf:8d:5b:
90:cc:30:54:40:d5:d5:d4:67:c3:16:a1:18:55:fd:
a8:9f:dd:da:3b:da:d1:f8:44:31:68:34:24:0e:9e:
8b:79:c4:b5:a3:4a:e2:56:4c:2e:5a:7f:87:5c:b6:
db:d6:12:b4:e2:da:d9:26:27:18:89:a3:17:03:4f:
aa:38:b5:d6:44:a6:ab:43:e1:26:90:15:c2:bd:e0:
41:00:d0:65:f2:e1:5c:93:bc:17:1d:30:87:76:11:
ed:37:c0:4c:54:2f:6d:ea:63:53:ea:15:c4:3c:0b:
86:46:4f:47:22:54:ac:f4:f6:7a:8f:b0:4c:d7:e7:
8c:81:15:10:0d:ef:bc:cd:73:34:b7:3e:3c:57:cb:
96:80:bf:75:a6:46:21:f2:6a:2c:0c:14:70:d8:af:
99:68:23:67:36:fd:08:8b:d7:c7:2e:7a:91:36:14:
03:7a:e8:15:4c:92:03:02:0a:e1:01:3c:e4:88:4e:
2e:a5:68:af:f1:59:17:df:94:39:da:03:28:8e:6c:
87:a2:29:e0:b2:c7:0b:65:be:6b:8c:c3:e2:29:c0:
da:93:0f:02:e9:01:dc:21:17:bc:65:8b:a9:dc:d9:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:9B:84:9F:03:FD:26:06:48:79:10:FD:64:5D:6F:13:7A:46:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.104.0.0/13
Signature Algorithm: sha256WithRSAEncryption
4e:3b:dd:24:51:57:77:b7:a9:2a:9a:b7:3e:9f:15:1a:73:b2:
7b:4b:1c:bd:9c:46:d3:3e:07:ca:44:ee:3d:61:d4:28:fc:19:
ed:36:88:e9:24:16:eb:cb:80:3f:1c:a7:5d:f1:2b:08:e0:99:
4f:06:27:85:11:25:ea:0e:d2:6e:f7:9f:6e:8a:71:c2:7c:83:
01:6d:50:67:33:cf:ba:36:9b:04:b2:e7:e3:38:61:ab:a4:42:
66:32:f6:7f:3b:02:8c:39:5b:f7:36:b2:84:3a:e3:22:5b:b3:
93:99:d1:86:03:d7:88:8d:89:a2:a0:1d:b5:15:bb:87:15:9e:
af:67:23:d4:3b:8b:56:41:6c:3f:f3:f4:68:06:e2:b3:65:39:
60:63:8a:90:0c:2f:d3:3a:6b:8b:5f:4a:6a:10:61:56:16:91:
87:94:d4:74:2d:04:ed:31:6c:37:d8:20:8c:a0:9b:6f:df:e7:
49:e1:f4:1b:aa:23:58:88:46:be:f7:59:e6:2c:8f:38:3e:45:
70:8c:e0:ca:17:36:3c:31:23:f3:cb:df:b3:cd:be:76:9e:e9:
d4:a3:da:6d:b7:26:de:92:c2:fa:53:c7:5b:e2:c3:13:90:3d:
59:5d:74:a0:9b:cd:55:27:3d:b7:e3:be:f5:29:9b:c4:6c:6d:
da:07:a9:d9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUaaEsqX13nrD/329wLb/C9T1Nu7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjIwMDAwMDBaFw0yNDA1MjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDRmMzQ1ODAyYjFhZjA1ZWUyMGZjOTVmNDk5MGFhYTBhNTI3YTU3MmExZGYx
NjYxNmEyYTczMTdlNTFjNmNmNjIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6m/yTLLnCckX9+0J4Bksz2653RCwPId5+av41bkMwwVEDV1dRnwxahGFX9
qJ/d2jva0fhEMWg0JA6ei3nEtaNK4lZMLlp/h1y229YStOLa2SYnGImjFwNPqji1
1kSmq0PhJpAVwr3gQQDQZfLhXJO8Fx0wh3YR7TfATFQvbepjU+oVxDwLhkZPRyJU
rPT2eo+wTNfnjIEVEA3vvM1zNLc+PFfLloC/daZGIfJqLAwUcNivmWgjZzb9CIvX
xy56kTYUA3roFUySAwIK4QE85IhOLqVor/FZF9+UOdoDKI5sh6Ip4LLHC2W+a4zD
4inA2pMPAukB3CEXvGWLqdzZzPcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQEy5uE
nwP9JgZIeRD9ZF1vE3pG6DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZDBiMGFiZmEtODBiZS00ZGJiLTkxN2UtYWYxN2Q1ZWQ5ZGI5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAzloMA0G
CSqGSIb3DQEBCwUAA4IBAQBOO90kUVd3t6kqmrc+nxUac7J7Sxy9nEbTPgfKRO49
YdQo/BntNojpJBbry4A/HKdd8SsI4JlPBieFESXqDtJu959uinHCfIMBbVBnM8+6
NpsEsufjOGGrpEJmMvZ/OwKMOVv3NrKEOuMiW7OTmdGGA9eIjYmioB21FbuHFZ6v
ZyPUO4tWQWw/8/RoBuKzZTlgY4qQDC/TOmuLX0pqEGFWFpGHlNR0LQTtMWw32CCM
oJtv3+dJ4fQbqiNYiEa+91nmLI84PkVwjODKFzY8MSPzy9+zzb52nunUo9pttybe
ksL6U8db4sMTkD1ZXXSgm81VJz234771KZvEbG3aB6nZ
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org