Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18380f1-6ccd-4170-b605-ff97745298e0.roa
File: e18380f1-6ccd-4170-b605-ff97745298e0.roa (raw, json)
Hash identifier: w2PicZSzG4NBseP5BBaJ3lQCKXjDOSwoFiQ5yVIPGD4=
Subject key identifier: A5:35:1D:BB:A1:41:9B:B7:40:F4:0C:7F:C9:3A:4D:F6:41:61:BD:CC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3FC40AF08121560CE512CF0DB60A3A643960C6B3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18380f1-6ccd-4170-b605-ff97745298e0.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c4:0a:f0:81:21:56:0c:e5:12:cf:0d:b6:0a:3a:64:39:60:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=d08d1b7d1be5c81160104c6295a7c7a5af01c4573d9f46df22483ebd05a1eb3a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:6a:38:7f:05:ba:ac:8e:de:3e:b4:78:09:
78:90:28:fb:d9:af:14:ac:d2:d3:91:dd:76:d5:11:
8e:f7:00:70:2a:fa:ef:19:96:5d:db:1d:0d:85:55:
3d:a4:73:b1:f6:cf:91:29:30:df:6f:91:50:51:1a:
2b:5c:dc:08:4f:57:9a:e8:1f:50:75:4d:f5:90:b6:
ce:de:f4:61:24:e2:70:09:2f:15:7c:a0:a6:50:2d:
c7:de:cf:5f:af:4e:c7:d5:10:93:3c:6b:f4:05:3b:
58:ad:e8:ad:7e:df:78:83:a7:26:d6:00:97:8a:02:
79:5c:c2:d8:42:42:33:c5:cd:5e:80:5b:0c:b3:0d:
7a:2e:bc:81:70:fc:89:5c:c2:81:f7:52:5e:ed:b3:
75:82:2b:a3:55:53:4d:27:dd:85:dc:f3:68:f7:92:
cb:b9:41:cb:ac:aa:b4:d2:41:d6:ab:87:b1:d7:10:
2c:0e:ff:27:03:e4:8c:b8:f4:6c:68:13:01:72:59:
1f:f5:a0:99:1a:40:10:e2:69:f1:97:b2:f0:ae:28:
d0:3b:81:51:0f:ba:9a:f6:70:cf:63:fd:f1:4c:62:
0f:f8:62:d7:1a:98:8e:9d:3a:0c:2f:50:a5:fa:b2:
e2:52:b7:c4:97:ea:19:4e:f7:2a:83:25:05:02:72:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:1D:BB:A1:41:9B:B7:40:F4:0C:7F:C9:3A:4D:F6:41:61:BD:CC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18380f1-6ccd-4170-b605-ff97745298e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:9d:b0:4b:29:c0:9c:e5:b6:51:f9:4d:9e:41:a9:64:1a:11:
18:4c:b7:31:80:6a:97:b4:1a:0c:27:83:ca:f3:20:99:b3:53:
75:82:70:49:71:4f:73:a7:ad:b3:ee:af:c9:2d:42:38:ca:aa:
84:2f:4f:37:57:e5:7f:ec:4c:89:8c:0d:6a:e3:16:b2:af:59:
bc:d4:64:27:9b:9e:a7:51:85:ff:df:e0:e7:e0:af:89:91:b2:
c2:d5:b2:b2:8d:22:d7:f8:15:f3:93:87:32:4e:06:97:6a:b0:
7b:50:51:ca:c1:32:09:b6:b5:cf:72:ff:de:e3:ee:23:45:67:
c3:67:06:4b:d2:55:7f:56:f1:53:fc:81:fa:62:97:07:6e:6c:
4c:30:f7:f9:83:3a:0e:8d:f1:b0:91:91:9f:17:bf:71:f0:fe:
36:5b:4f:22:22:5a:dd:dc:c2:0a:15:40:db:68:9a:ae:52:0d:
c0:33:d6:58:ed:e3:d0:99:2a:f5:77:32:1b:ec:e5:89:55:ac:
72:69:47:b2:34:c6:fd:25:3b:8d:81:40:70:bf:7f:93:32:f4:
e4:69:f6:81:6d:fc:34:a7:eb:c7:a9:d6:76:5f:90:3c:ef:bc:
28:cf:d8:94:1d:39:96:49:bb:82:36:40:b9:83:6a:bb:2f:b4:
52:b4:40:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org