Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
File: d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa (raw, json)
Hash identifier: sjdFIC87D0cOQbZ7qPz+zHlyrc3ZYkqsI/6Gz1oq2q4=
Subject key identifier: E3:43:66:D8:A1:E1:70:53:81:6B:93:8D:A5:22:F3:21:80:AD:9B:58
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 629C68054F9B59CA9FAEAA8F88EF3CA401639B7A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9c:68:05:4f:9b:59:ca:9f:ae:aa:8f:88:ef:3c:a4:01:63:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=559d10bacb1c44b3809cd8a0b0f1dd19f20d855b7789e769e80285bc0840e708, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:aa:da:4b:5e:ba:80:f4:06:a6:4e:a4:5c:
a3:b7:49:6d:89:9d:5d:c4:c5:b7:16:4e:a7:c1:49:
ac:22:5c:81:e5:10:32:28:b7:5f:c6:be:71:24:b4:
e6:15:cf:18:35:83:f9:76:03:46:01:c9:88:4c:82:
75:23:69:75:71:c6:90:b5:bb:21:0d:83:8d:02:af:
1c:53:8e:53:e3:ca:7e:e9:db:67:01:7a:08:27:45:
e7:2f:36:a1:e5:54:fd:a6:34:f8:6a:70:41:69:f6:
5b:a4:a5:26:02:a0:e5:2a:cd:e8:51:98:37:28:a6:
dd:97:8c:65:5f:83:d5:d5:54:23:9f:70:ad:13:24:
2a:f9:3a:58:60:38:b2:17:81:fa:72:df:ee:fb:42:
32:19:e0:b7:6e:3c:90:a4:07:62:01:50:5d:cb:28:
c7:0d:e2:a0:21:c4:cf:14:62:d7:71:74:be:a3:dc:
77:f1:29:10:bc:40:e9:e7:90:49:f5:12:a1:94:14:
2c:44:a7:a5:15:77:b2:fa:c9:67:72:c6:6e:43:f7:
35:e7:20:87:25:b8:2d:dc:92:e3:d0:79:16:c0:52:
45:36:01:33:46:a8:cc:bf:7d:35:b6:4b:7c:7b:bb:
8e:87:56:c4:9e:ce:6c:a9:21:ea:da:65:97:5a:03:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:66:D8:A1:E1:70:53:81:6B:93:8D:A5:22:F3:21:80:AD:9B:58
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:a5:5c:2f:37:19:17:89:2b:16:37:d9:9e:fb:9a:db:c3:67:
9f:52:c1:7b:0e:80:2c:84:6d:63:3d:70:6a:49:6d:ed:18:91:
ec:a0:4e:a9:d1:2d:c3:9d:3c:25:97:79:32:e2:4e:e7:b8:2e:
00:56:66:8d:4b:da:cd:a4:8f:c5:a7:cb:8f:82:32:33:f8:bb:
a8:5c:b0:77:17:95:c8:29:75:b3:36:11:b3:bc:2c:33:33:e9:
37:a9:04:13:89:65:a6:77:5b:f7:07:fb:a0:a8:52:63:86:93:
0e:ef:96:86:45:90:5d:e6:40:3f:97:ee:0d:ff:c6:36:1b:51:
23:c9:ae:96:64:c2:2a:4d:bc:cf:56:5b:99:fd:d5:eb:6f:ae:
5e:e4:13:8f:b5:b0:59:24:a8:80:9d:5b:ca:31:63:32:2f:09:
53:91:0b:ef:60:11:78:94:2a:f0:1b:05:77:31:bd:2d:9e:42:
83:99:a4:43:eb:2c:b3:10:a1:a8:cd:83:9a:08:85:89:6c:85:
14:1b:09:e2:d4:08:a6:5a:ee:36:27:71:29:5c:6b:e6:ff:28:
8f:7f:3d:a7:0f:f0:59:09:67:52:1d:c5:6c:e6:00:66:2e:90:
af:25:9d:cb:48:8e:f0:b2:19:92:93:6f:6e:a5:05:bc:65:7a:
9d:6c:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:43 2024 by rpki-client on console-fra.rpki-client.org