Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
File: d485a465-65e9-4a19-a397-f29d1a36d166.roa (raw, json)
Hash identifier: QSkKxj0T8N5GO8j8OzOCVtaIPvT0FsdwjB4iAK7YtR0=
Subject key identifier: CA:20:83:79:05:C4:42:4A:F0:3C:52:CE:37:21:DA:0E:47:67:F2:D7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5FFE9EC2A3D931F57E0D83418F6907A8F7ECF18B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fe:9e:c2:a3:d9:31:f5:7e:0d:83:41:8f:69:07:a8:f7:ec:f1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=62baeba776f390daf15a607e97d6e5084c1aa125b43d4bd1886273c00881364d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:04:4c:75:7e:bb:09:92:f6:46:a3:d1:9c:
74:5a:d3:e8:4c:c1:7e:68:ee:3c:3c:84:4b:83:39:
17:08:cb:6a:c6:f3:e5:82:6d:06:0e:9c:6a:f7:6a:
f0:7c:a7:53:ed:4e:8c:50:7b:80:42:00:35:9c:f3:
54:eb:91:8b:3b:b5:ca:f0:8a:8b:7c:c2:69:53:42:
f3:c5:05:00:12:43:e9:17:38:27:20:b1:51:61:7d:
c9:48:58:4c:ef:6a:d4:7c:e4:ae:f5:a6:33:c1:79:
39:ab:f6:fe:b2:62:0b:e1:37:27:52:d2:d6:80:66:
c2:01:13:df:96:ea:59:23:37:5f:2e:47:6f:e2:ef:
cc:01:21:37:7c:3a:15:03:ac:f6:05:60:27:83:e4:
aa:3e:ac:50:ad:f3:2b:b5:36:b5:bc:14:fc:1d:ff:
c7:ca:e5:dc:ca:0a:76:01:46:08:f5:af:dc:e4:00:
f9:31:7b:14:fe:d2:e9:67:9a:89:eb:18:c9:df:c6:
6c:1a:40:12:dc:0f:2a:fe:f8:9c:fe:ae:95:23:11:
cc:7f:1c:d8:d3:6f:c4:71:ae:43:13:07:8b:e1:30:
05:d3:81:bd:de:c1:86:0f:ef:f5:77:26:92:db:33:
fc:6e:dd:88:27:c8:46:0a:a0:2f:bf:74:64:ba:90:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:83:79:05:C4:42:4A:F0:3C:52:CE:37:21:DA:0E:47:67:F2:D7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:e0:6d:73:2f:d1:f1:6f:a2:54:cb:10:56:26:af:81:06:
c3:90:2c:19:5c:a8:c8:77:7c:1d:d7:0f:fb:13:dd:73:1a:1e:
a1:07:80:0f:45:f2:ef:23:ef:4a:aa:30:a3:cd:7a:d1:f5:b6:
54:f7:a7:11:c7:88:07:af:85:13:0a:74:9d:60:e2:78:42:c4:
0c:34:02:8d:88:b1:1d:00:b4:f7:57:73:d4:9b:e6:b1:6b:73:
09:30:b4:d9:c2:27:d0:db:d4:ea:f7:a7:d0:d6:3d:0c:56:52:
51:ef:10:b9:37:0d:11:04:b1:ad:b7:62:03:5b:f1:43:f6:21:
8b:2c:9a:b6:a8:a1:2f:cf:9f:35:e9:cf:49:31:7f:72:61:83:
79:d0:23:33:a3:3d:8c:a4:08:0a:b9:0f:8c:c6:12:77:42:9f:
f8:45:ed:15:65:7c:e6:8a:fb:19:e6:5f:04:d9:77:8b:73:b8:
19:ae:da:a1:8c:46:9e:1f:2f:f7:2b:ac:fc:d7:6f:c7:ab:ae:
a6:c4:3f:1e:b5:ec:d3:35:d8:d5:24:63:fe:ac:87:f3:28:60:
97:b1:f8:9b:49:3e:cb:a2:5b:ef:71:fd:74:2b:f7:34:f9:3c:
71:60:11:9d:b7:2c:85:12:be:34:00:a6:ac:a3:ec:a1:0f:cf:
99:d8:2a:4a
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUX/6ewqPZMfV+DYNBj2kHqPfs8YswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDYyYmFlYmE3NzZmMzkwZGFmMTVhNjA3ZTk3ZDZlNTA4NGMxYWExMjViNDNk
NGJkMTg4NjI3M2MwMDg4MTM2NGQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKe3BEx1frsJkvZGo9GcdFrT6EzBfmjuPDyES4M5FwjLasbz5YJtBg6cavdq
8HynU+1OjFB7gEIANZzzVOuRizu1yvCKi3zCaVNC88UFABJD6Rc4JyCxUWF9yUhY
TO9q1HzkrvWmM8F5Oav2/rJiC+E3J1LS1oBmwgET35bqWSM3Xy5Hb+LvzAEhN3w6
FQOs9gVgJ4Pkqj6sUK3zK7U2tbwU/B3/x8rl3MoKdgFGCPWv3OQA+TF7FP7S6Wea
iesYyd/GbBpAEtwPKv74nP6ulSMRzH8c2NNvxHGuQxMHi+EwBdOBvd7Bhg/v9Xcm
ktsz/G7diCfIRgqgL790ZLqQYy0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTKIIN5
BcRCSvA8Us43IdoOR2fy1zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZDQ4NWE0NjUtNjVlOS00YTE5LWEzOTctZjI5ZDFhMzZkMTY2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMRADAN
BgkqhkiG9w0BAQsFAAOCAQEAnJTgbXMv0fFvolTLEFYmr4EGw5AsGVyoyHd8HdcP
+xPdcxoeoQeAD0Xy7yPvSqowo8160fW2VPenEceIB6+FEwp0nWDieELEDDQCjYix
HQC091dz1JvmsWtzCTC02cIn0NvU6ven0NY9DFZSUe8QuTcNEQSxrbdiA1vxQ/Yh
iyyatqihL8+fNenPSTF/cmGDedAjM6M9jKQICrkPjMYSd0Kf+EXtFWV85or7GeZf
BNl3i3O4Ga7aoYxGnh8v9yus/Ndvx6uupsQ/HrXs0zXY1SRj/qyH8yhgl7H4m0k+
y6Jb73H9dCv3NPk8cWARnbcshRK+NACmrKPsoQ/PmdgqSg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:39 2024 by rpki-client on console-ams.rpki-client.org