Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
File: d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa (raw, json)
Hash identifier: oPCdPg0cyoM0BHL6vrB6eGVPgThl6P+ylzEZdkGbd+4=
Subject key identifier: 84:0D:F2:55:AD:A8:5F:CD:06:34:B3:B0:AD:3B:BB:7D:24:FD:D9:B4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 376E8F0A1DB6B480C1FEE5CAC91825591DAB7AB0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:6e:8f:0a:1d:b6:b4:80:c1:fe:e5:ca:c9:18:25:59:1d:ab:7a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=68068b95556283e475bbe965bd3d72024042aab84f36f34e855c155d85d08203, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:56:8a:be:e3:ab:de:0b:29:7c:6b:39:8a:
f2:7d:72:cc:18:ce:84:7a:34:8a:c0:1b:56:55:b7:
a3:a3:c9:e9:2f:bf:8c:ec:41:7f:db:e4:93:c5:db:
42:82:9e:1c:be:10:7d:c2:2d:85:f6:62:01:e0:13:
4d:8a:58:8b:25:8c:ae:6e:d7:6a:d6:6b:2e:35:84:
2f:95:5f:4b:b5:61:45:60:d5:5d:a4:ba:5d:f4:4b:
9b:64:68:67:65:20:57:6b:27:85:70:82:bd:41:bb:
0c:26:0f:ea:8e:41:79:fa:fb:78:53:0a:ed:1b:8e:
4f:a0:76:d1:43:fa:5c:19:ad:a5:c8:82:d4:02:64:
0c:01:87:09:fd:d6:a9:ce:92:1a:2f:a1:c6:ce:22:
62:76:28:ba:c2:76:62:39:22:25:fa:e6:b7:d1:c9:
1e:89:23:d1:19:ff:16:c3:78:d0:dd:d5:00:e6:ef:
f2:f1:7d:0d:87:69:4a:6b:9f:fe:6f:cc:f1:6c:92:
8b:3a:d2:70:42:5f:40:3f:70:9c:91:1d:7e:80:5a:
c8:8a:6b:3c:79:60:ee:97:8d:f6:a2:15:fb:77:00:
b7:6b:f5:b0:c9:bd:10:48:07:10:0b:6e:2e:4e:2c:
ed:41:09:d0:06:7a:5a:c1:94:34:47:10:d8:0b:f4:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:F2:55:AD:A8:5F:CD:06:34:B3:B0:AD:3B:BB:7D:24:FD:D9:B4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:6b:00:69:18:cc:7d:3a:48:cd:21:dc:c4:60:37:9a:43:79:
ca:16:2f:0e:77:d8:62:76:c5:90:68:9c:b3:62:5a:2b:14:02:
fa:fe:2f:9c:9d:a3:86:60:46:7a:d5:d4:e6:29:ef:bb:aa:2b:
45:39:e2:bb:5d:98:e3:83:bf:7e:06:e3:1a:1a:97:a7:54:30:
ee:d5:28:f0:98:fc:bc:86:fe:7f:8b:52:b4:09:70:e2:9f:99:
99:c7:3a:99:33:2b:ce:c4:16:74:8d:64:d7:08:f9:d1:3c:b6:
e9:e1:65:0e:06:8f:74:aa:0e:51:2f:f3:86:51:40:58:2e:3c:
ca:54:f7:0a:d5:2a:64:15:aa:d0:3a:b8:ef:54:28:53:d3:7f:
91:71:69:71:31:03:c3:db:6f:6c:37:c0:e6:b5:10:da:93:88:
23:3d:98:15:fe:15:fe:60:a9:40:57:f1:05:b5:a7:c3:2c:a8:
55:ae:29:3b:6e:15:80:6c:2c:2c:a4:ce:96:5e:04:f5:d1:20:
36:a1:3e:79:c5:86:65:69:4d:0d:4f:6e:e7:a0:a8:cc:2a:6c:
69:99:f2:d0:4d:d0:e2:2d:07:94:77:03:a8:45:44:f5:c9:e6:
12:11:8c:12:12:35:db:75:3e:fa:4a:12:aa:a4:de:2d:f1:9e:
e5:e0:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org