Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e13da95c-db81-44f8-9505-033de114acce.roa
File: e13da95c-db81-44f8-9505-033de114acce.roa (raw, json)
Hash identifier: xQhLfRxGvAcJ79pZCUTJWqtryp1aOuTob6PjL5BDvN4=
Subject key identifier: C6:C0:02:2C:6C:73:55:B3:05:40:EF:17:6B:86:F9:73:8F:A1:56:1E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7E7E46C50E766BCE92122483B29BC139E746D165
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e13da95c-db81-44f8-9505-033de114acce.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.152.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7e:46:c5:0e:76:6b:ce:92:12:24:83:b2:9b:c1:39:e7:46:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=4cbfac69976db7fbbbe6c9308439751f1fedc48c94936b164498c3df1ad7fff1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:ba:9d:1b:8f:5b:4f:1f:67:2e:45:c1:45:
a4:d7:f7:ba:26:b2:9e:fe:70:0d:01:41:29:78:fe:
d0:ff:f4:b7:ae:19:21:f6:11:dd:a9:7a:5c:16:50:
81:75:52:4f:1d:0f:12:7d:5f:1f:bf:96:a8:15:4c:
65:ff:20:bb:64:3f:a9:ae:d4:fe:66:ef:c6:c9:06:
07:cf:a8:b1:0f:ce:c8:c9:6f:61:84:77:7e:e7:b5:
25:d9:e2:74:8c:36:76:7f:19:2e:3d:66:79:9b:ba:
5d:38:ce:f2:ff:d9:07:08:31:5b:d5:db:5b:d0:9a:
8f:e5:01:c6:56:cb:76:e5:85:99:79:b5:99:c5:92:
8d:8c:90:4b:30:93:05:a4:8d:77:20:08:69:67:77:
76:46:0c:fa:1a:6b:62:96:89:9f:6a:79:f9:10:3c:
b8:2c:f5:bb:ec:7f:4e:88:62:e4:8a:15:7d:58:eb:
8d:43:04:4e:2f:12:00:40:4a:06:51:52:c6:99:7f:
05:27:36:f6:35:ce:65:36:37:5f:13:47:d9:55:d6:
8d:4f:46:d8:5f:3f:f0:8a:8d:b4:ff:7f:e2:9c:23:
af:ca:a8:5f:75:70:e8:19:7d:ec:6f:62:00:41:37:
db:20:ee:18:be:e9:18:8c:51:a9:63:c8:c9:b3:83:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:02:2C:6C:73:55:B3:05:40:EF:17:6B:86:F9:73:8F:A1:56:1E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e13da95c-db81-44f8-9505-033de114acce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.152.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d7:ce:47:07:31:80:ed:2f:79:1c:4b:62:c0:aa:f2:65:86:81:
22:59:23:06:a0:f0:e5:74:f7:76:fc:b7:9e:71:89:2c:a9:f2:
ad:b3:f2:cc:cf:76:6c:cc:62:73:c5:c8:49:83:b2:99:7c:c8:
c9:37:bd:f7:59:ed:8f:32:c8:a2:d5:95:8e:01:fb:46:e8:af:
dd:fb:0b:67:1a:b0:b9:bd:4f:0c:4e:c0:e2:af:01:5a:cb:c4:
fd:c9:42:3b:e8:5a:2c:20:9f:fb:bf:81:5a:36:50:ab:aa:57:
8f:b5:d2:ee:a9:82:d4:91:0c:72:3c:5d:47:e0:91:14:fb:67:
9b:10:81:5d:2f:01:57:59:95:82:7f:2a:30:e3:a1:bd:04:b0:
c5:c9:d8:7b:5d:be:97:18:ba:c9:ce:5f:7a:3c:cc:29:40:a8:
92:86:57:12:f1:02:c3:57:8e:88:5c:5f:f2:a2:75:69:42:1a:
47:1e:3b:3d:06:5a:2a:c4:4d:3c:72:e4:2d:54:00:85:cc:0a:
88:16:e4:a3:e2:8d:08:85:1b:0f:45:6d:d5:70:85:da:86:01:
6b:8a:de:a6:68:9d:1d:72:76:e3:d3:74:66:bd:ac:4a:2f:5a:
c3:24:91:43:59:89:61:e3:a3:14:05:cf:6e:6c:bd:3d:54:41:
c3:80:fc:c0
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUfn5GxQ52a86SEiSDspvBOedG0WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MjYwMDAwMDBaFw0yNDA1MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDRjYmZhYzY5OTc2ZGI3ZmJiYmU2YzkzMDg0Mzk3NTFmMWZlZGM0OGM5NDkz
NmIxNjQ0OThjM2RmMWFkN2ZmZjExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMUFup0bj1tPH2cuRcFFpNf3uiaynv5wDQFBKXj+0P/0t64ZIfYR3al6XBZQ
gXVSTx0PEn1fH7+WqBVMZf8gu2Q/qa7U/mbvxskGB8+osQ/OyMlvYYR3fue1Jdni
dIw2dn8ZLj1meZu6XTjO8v/ZBwgxW9XbW9Caj+UBxlbLduWFmXm1mcWSjYyQSzCT
BaSNdyAIaWd3dkYM+hprYpaJn2p5+RA8uCz1u+x/Tohi5IoVfVjrjUMETi8SAEBK
BlFSxpl/BSc29jXOZTY3XxNH2VXWjU9G2F8/8IqNtP9/4pwjr8qoX3Vw6Bl97G9i
AEE32yDuGL7pGIxRqWPIybODY+8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTGwAIs
bHNVswVA7xdrhvlzj6FWHjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTEzZGE5NWMtZGI4MS00NGY4LTk1MDUtMDMzZGUxMTRhY2NlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOYMA0G
CSqGSIb3DQEBCwUAA4IBAQDXzkcHMYDtL3kcS2LAqvJlhoEiWSMGoPDldPd2/Lee
cYksqfKts/LMz3ZszGJzxchJg7KZfMjJN733We2PMsii1ZWOAftG6K/d+wtnGrC5
vU8MTsDirwFay8T9yUI76FosIJ/7v4FaNlCrqlePtdLuqYLUkQxyPF1H4JEU+2eb
EIFdLwFXWZWCfyow46G9BLDFydh7Xb6XGLrJzl96PMwpQKiShlcS8QLDV46IXF/y
onVpQhpHHjs9BloqxE08cuQtVACFzAqIFuSj4o0IhRsPRW3VcIXahgFrit6maJ0d
cnbj03RmvaxKL1rDJJFDWYlh46MUBc9ubL09VEHDgPzA
-----END CERTIFICATE-----
Generated at Sat May 4 22:06:51 2024 by rpki-client on console-ams.rpki-client.org