Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc3cc874-29b0-4f9c-90aa-906fa9dca22a.roa
File: dc3cc874-29b0-4f9c-90aa-906fa9dca22a.roa (raw, json)
Hash identifier: oTNvbxSLJOLmbqFmCz4c1ET5bl/ab3AA8LBdJuUCREc=
Subject key identifier: 15:4D:0E:3B:F7:71:17:45:4D:21:37:47:AD:6F:0D:1B:53:4A:88:F8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 29488920C6F04EAD7D82F6C1F453F761DDCD6A88
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc3cc874-29b0-4f9c-90aa-906fa9dca22a.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 2a01:578:1010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:48:89:20:c6:f0:4e:ad:7d:82:f6:c1:f4:53:f7:61:dd:cd:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=552999bceffdc104885da7e1abaec54e39edc00d11d4403193b22ce9de3014a5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:1f:62:ce:56:4f:ac:e7:3f:91:dc:99:67:
4f:b5:d9:fe:65:34:da:94:93:76:d4:de:c3:f0:8a:
3e:40:85:2f:08:d9:c6:87:11:47:2d:92:75:29:5c:
b2:67:fd:bd:a4:14:dd:01:6d:8b:79:67:db:3b:68:
a2:44:3a:dc:d5:43:e5:a5:82:28:fe:d2:60:dd:a1:
ec:c3:4c:33:ce:35:d5:41:24:26:41:25:e5:bf:b6:
e2:e3:b5:de:9f:8b:12:d5:c5:12:27:20:89:1a:a2:
8f:cd:ce:0e:01:79:35:0a:ca:69:49:00:d6:91:b0:
e9:a1:06:47:41:dc:52:40:3c:38:71:3d:1d:61:11:
22:fe:4d:4c:e1:14:91:aa:c2:06:a3:7a:14:2e:b4:
35:e0:9f:75:41:dc:36:ee:0a:c9:b4:0e:8e:19:7a:
31:c2:53:59:98:50:d6:30:17:a0:cb:aa:8e:46:d8:
2e:21:eb:68:7c:f0:0d:76:00:e7:18:92:f5:5f:70:
df:07:f9:94:e4:8a:44:e9:db:3c:c5:5c:32:e5:e3:
96:82:c4:21:da:13:bd:f8:31:45:03:95:96:6f:f3:
d0:2e:d9:06:ed:0d:5d:8b:e1:d4:82:e1:8b:f4:9f:
bb:65:4e:4f:15:ae:61:70:b8:0e:ef:a0:d6:b0:ed:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:0E:3B:F7:71:17:45:4D:21:37:47:AD:6F:0D:1B:53:4A:88:F8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc3cc874-29b0-4f9c-90aa-906fa9dca22a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1010::/44
Signature Algorithm: sha256WithRSAEncryption
96:91:f2:9a:31:28:86:70:db:f4:84:00:5d:88:69:9a:3a:f5:
6f:2e:59:96:6a:ec:a8:13:5d:9d:f9:4a:21:9a:86:5e:d1:55:
9b:5d:d0:76:cb:26:36:69:62:37:6e:6d:a0:b7:e0:d6:8d:28:
e8:42:2d:96:d3:27:23:17:3d:97:57:d2:04:61:b5:a8:f2:b3:
07:21:0b:78:76:fe:dd:eb:79:6b:d3:e7:7c:a0:70:3e:64:91:
68:1e:cd:0f:a2:93:a3:6b:e9:a6:8d:ae:78:bc:3f:92:b0:ab:
25:4f:f8:3e:9e:98:4a:bf:de:96:e6:71:64:92:b7:4a:c1:18:
86:21:9b:33:5c:ec:1d:ea:26:ad:c7:cd:01:a9:55:c9:17:36:
b0:0f:a4:df:d0:2e:c3:fa:4a:05:9b:ee:c6:43:89:54:6d:45:
b2:42:f9:66:7f:4b:2b:48:6a:d3:a6:25:aa:e6:3a:da:ad:72:
0e:39:25:1e:d3:ff:63:43:a7:8d:3c:d0:dc:4b:90:e8:24:12:
fa:fe:7e:6a:c1:5d:6a:88:fd:c0:fa:73:f3:e6:c1:73:ac:4d:
50:d4:8f:1c:2d:b7:4f:88:5b:da:b0:de:88:8e:f7:b0:7e:d1:
3a:61:62:35:68:46:fa:3d:80:51:78:90:f1:33:a2:2c:69:4a:
03:87:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org