Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa
File: e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa (raw, json)
Hash identifier: DsJ80k1kDTy9t47v2SZR1bGUVPulmCRXQk7ZZL1MCXA=
Subject key identifier: 7B:F2:26:B6:0D:6B:C1:E8:9B:E0:64:D8:98:38:FB:8F:A9:55:67:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7BABE5CAC85FAC9928BD195BC57690FC700E8F9E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.118.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ab:e5:ca:c8:5f:ac:99:28:bd:19:5b:c5:76:90:fc:70:0e:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=fffd31f822c337f10ad45b38658fd16d0e34349fa844895a00d4755bc58abe57, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a1:c3:28:81:b9:54:f8:e5:b5:ff:a5:bd:18:
21:45:71:25:17:31:cd:39:22:f0:93:7d:97:b9:df:
59:7d:df:50:80:b6:21:80:05:2a:ac:79:56:07:c3:
d6:43:fb:17:f0:55:c4:ca:1e:fd:61:4c:c9:3b:19:
e0:1e:7e:6e:ce:10:4d:e6:32:31:b6:62:cc:b1:74:
cc:02:c8:88:a4:31:9b:83:46:ce:77:59:c7:17:6c:
98:a6:ba:e0:68:ee:f6:29:fa:c8:61:bc:8e:02:94:
89:3b:93:38:50:75:30:e5:31:ce:02:5a:52:3b:41:
36:9e:00:47:f4:33:14:f2:e4:3e:40:e2:77:e1:72:
ae:f6:9b:8b:06:f4:c4:5b:49:83:cf:f3:0d:b5:25:
70:c2:d6:ea:60:d4:b6:16:c8:07:c4:3e:e8:b5:7d:
15:59:e1:68:96:d3:68:6f:44:7f:7b:ff:74:57:ec:
63:0a:03:4c:0a:94:85:b6:50:b6:f5:15:1c:4a:2d:
71:b5:1e:53:27:a6:e0:fe:80:71:01:a5:a1:9c:82:
a8:4e:df:bc:a9:0f:04:6b:ba:c0:b6:f1:72:78:f8:
62:a3:c3:d3:12:81:28:19:a4:97:21:47:52:72:ee:
47:d3:fa:d3:65:3e:b9:3d:40:8f:25:7c:4e:63:4c:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:26:B6:0D:6B:C1:E8:9B:E0:64:D8:98:38:FB:8F:A9:55:67:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.0.0/15
Signature Algorithm: sha256WithRSAEncryption
39:03:9d:80:10:58:17:8c:08:b2:c2:d8:06:84:79:8f:db:9e:
e0:ee:f8:83:de:af:5f:55:21:c3:fe:49:75:85:cc:00:4e:d4:
7b:da:24:8b:68:bb:4b:ed:d1:50:8b:73:f9:f0:83:34:92:97:
88:c8:e7:f8:58:e6:9b:8e:12:1f:eb:11:2e:98:98:2a:2b:42:
7f:39:b6:01:8d:98:5b:26:d1:09:21:5d:5e:89:e3:16:cc:4b:
50:66:7d:73:55:17:ac:42:37:0f:5a:fc:a9:4e:2e:91:f0:25:
a4:20:e7:18:98:b9:da:3b:93:78:21:23:c5:90:64:69:72:4a:
ba:de:b2:ba:ec:13:0c:cc:ef:af:2b:bb:8c:de:42:78:d9:4b:
d1:ed:7c:98:85:9f:98:aa:3a:27:d2:8e:fe:9d:55:e1:8c:94:
c1:0d:9d:40:97:e3:5a:7e:f8:47:d2:d3:fe:bd:f6:32:8c:63:
06:88:1f:a1:26:4a:46:b8:a0:c9:af:2e:8e:b5:8c:c1:3d:19:
22:e9:9f:2b:0b:2f:b9:9e:77:65:98:15:78:ca:ce:71:74:25:
79:cd:8e:da:4b:25:77:30:e7:ee:cb:c2:b1:af:64:58:28:41:
b1:85:1e:a3:02:86:ad:72:87:b2:2a:b5:7e:2e:e5:35:63:f4:
a2:e1:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:43 2024 by rpki-client on console-fra.rpki-client.org