Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc642b10-5c6d-49f8-aaa2-8850efea8c91.roa
File: dc642b10-5c6d-49f8-aaa2-8850efea8c91.roa (raw, json)
Hash identifier: Zof5VdjVzQ5yfmDcFjb4drXd2Xo8DNxPWyQTUx2iC+I=
Subject key identifier: 1B:89:86:2B:6D:9E:D5:61:36:D8:E1:86:4F:1F:88:DD:89:6C:F1:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 681B27F55230AEAFD56624BED6ED7245BDC392DD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc642b10-5c6d-49f8-aaa2-8850efea8c91.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.224.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1b:27:f5:52:30:ae:af:d5:66:24:be:d6:ed:72:45:bd:c3:92:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=3ac68dfd953ef45ec98f246e1441290caba181e3f396579fe9620a40a13665ac, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:c4:06:42:b2:92:a7:b6:6b:9a:66:64:6f:
26:19:1f:7f:18:47:dc:be:6d:c8:17:b3:fa:f9:26:
4e:e1:93:e1:b0:80:74:dd:52:39:56:03:7a:f7:63:
6f:0a:37:0d:61:58:ed:34:11:cc:a2:97:63:36:b7:
29:34:ab:0c:08:95:91:f1:ce:b5:30:44:c7:d0:2c:
73:12:d2:8f:ac:60:a5:a4:02:96:3f:f0:6d:27:67:
5e:23:ae:72:2a:3c:9c:06:4b:2b:51:86:ad:38:db:
78:96:fe:28:c1:1b:a7:6c:b2:c9:e8:dc:52:31:d2:
74:bc:8d:a8:74:a4:b6:ba:62:94:37:2e:fe:12:1a:
91:3e:58:18:91:56:c6:eb:c8:e2:4b:a3:86:85:c4:
7e:4c:c5:f6:3c:c2:e4:13:c6:7d:ec:8a:14:ee:8a:
71:ad:9b:f7:00:14:19:f1:cb:6b:fc:dd:38:81:fc:
c8:9e:f1:24:9c:5f:93:5a:91:74:73:31:33:2e:0a:
43:0d:d0:32:a6:bd:40:f4:72:a6:cd:f8:92:3a:5a:
cf:fd:c3:e6:bb:ab:f9:37:88:b7:a0:73:41:dc:da:
49:c0:0c:ec:d9:b7:65:53:5a:bd:f8:db:5f:3a:17:
43:f3:a7:87:9b:87:44:86:06:96:1d:47:61:d4:4d:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:89:86:2B:6D:9E:D5:61:36:D8:E1:86:4F:1F:88:DD:89:6C:F1:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc642b10-5c6d-49f8-aaa2-8850efea8c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.0.0/15
Signature Algorithm: sha256WithRSAEncryption
62:aa:79:e4:ec:eb:47:f7:0b:46:91:08:bc:78:01:9b:1f:b7:
11:70:bb:b0:ac:91:97:8a:e4:79:b9:77:d1:23:ea:c7:e8:45:
5e:17:70:56:b8:35:34:ad:a5:95:ff:e5:14:94:63:88:a2:33:
9e:2d:70:b2:05:24:4e:df:62:d2:aa:28:70:a0:72:97:05:ff:
2e:a2:b5:25:95:6d:d0:ab:5d:33:db:89:89:22:5b:32:46:c2:
c7:c0:21:89:e9:c2:c7:11:1f:e6:67:f0:c1:cb:e8:28:f7:c7:
b4:21:b9:c2:be:1e:29:4a:9b:a1:02:bb:d2:1f:34:f2:dd:13:
95:81:99:b7:e4:d4:aa:ca:f3:46:9a:c6:8c:ea:36:04:36:96:
58:fd:68:60:f9:7c:6f:89:68:18:5e:69:01:dc:ab:94:d8:ac:
83:a1:c8:1e:fa:c1:cd:c4:51:c6:03:4b:46:be:9f:90:08:03:
7f:0d:95:ba:60:bc:37:c9:d0:e7:b0:a2:8d:e0:2c:43:aa:f4:
d8:84:dd:d4:88:80:a9:c9:8d:20:a0:28:7f:eb:61:f7:85:13:
3b:2a:c2:ec:38:87:91:80:e0:3a:91:78:23:77:58:7d:3f:7c:
a3:af:c5:60:27:de:85:4f:e2:3c:e7:24:e9:44:9c:05:56:3d:
3c:bd:ee:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org