Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
File: ea779843-e76c-4279-b4b3-012bda8763a2.roa (raw, json)
Hash identifier: v/JY9gYn8WZHLsqBzWdXDBv251DvOsqJvKZ6tv5fOvY=
Subject key identifier: AA:44:6B:86:E6:98:F6:C8:02:08:F3:23:B6:4D:39:4D:D1:94:D6:32
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7A8025D1FBE6C1562EAC95BAEA1204F27E530369
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
Signing time: Tue 11 Jun 2024 00:00:00 +0000
ROA not before: Tue 11 Jun 2024 00:00:00 +0000
ROA not after: Tue 16 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1040::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:80:25:d1:fb:e6:c1:56:2e:ac:95:ba:ea:12:04:f2:7e:53:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 11 00:00:00 2024 GMT
Not After : Jul 16 23:59:59 2024 GMT
Subject: serialNumber=7a8c08fd103bd77bca89fbcd7ed79fa4401765e3922ac77bea3025e0e169391d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:52:05:dd:cc:17:2f:07:8a:01:ea:3b:39:
8a:41:26:60:eb:4f:53:e1:ef:03:7f:7d:10:9c:96:
c0:3b:93:1b:a6:95:28:5f:ef:2c:ad:ef:ba:1a:52:
3f:42:f1:e7:5f:11:8c:78:71:22:65:5e:3a:15:3e:
58:63:2f:b9:5c:d4:03:f4:c1:f9:c6:00:d1:46:6f:
1a:79:6a:20:8a:da:6a:bd:58:0d:a1:93:10:62:04:
ef:6b:14:a9:f0:d1:67:76:9f:7d:b5:84:33:ed:ec:
c7:a3:96:94:a2:f9:6d:65:7d:84:d2:ac:1f:ee:be:
db:6d:64:f1:7f:d2:f2:46:00:10:ac:0e:61:02:4b:
61:cd:20:d4:07:0e:e2:de:de:6e:e1:34:d9:f0:46:
6c:e1:03:5e:6b:12:ad:30:86:ae:ab:de:74:52:ae:
89:95:5f:6e:01:bd:f1:93:15:d9:70:79:46:73:f4:
50:0f:d7:22:07:f4:de:60:91:12:65:3d:66:e0:0b:
f3:cf:e0:fd:26:59:0b:0e:97:69:23:ae:f3:3b:d6:
a6:e4:5b:7e:88:ad:ca:6b:11:3d:20:06:f9:12:88:
d8:a1:4c:eb:05:6f:a8:23:ac:f3:6b:e1:e3:cb:34:
94:a2:02:2b:1e:19:7e:39:31:b7:61:07:1e:41:92:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:6B:86:E6:98:F6:C8:02:08:F3:23:B6:4D:39:4D:D1:94:D6:32
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1040::/42
Signature Algorithm: sha256WithRSAEncryption
15:54:85:c4:6e:8d:7c:8a:5c:4e:73:a8:dd:67:03:59:a2:71:
60:34:58:73:17:b5:a6:0a:ee:7b:f9:f0:79:73:c5:b4:93:ab:
ab:13:8f:9e:3d:be:f2:f2:55:ba:bb:bb:3f:da:cd:d6:db:57:
10:52:e6:39:95:40:c0:45:2d:4e:4d:75:51:30:9f:cf:a3:2e:
cf:fd:08:9e:50:27:ee:b8:b5:47:2b:92:10:fc:ae:07:7e:40:
e0:ce:1a:8e:e1:1a:cb:25:0e:17:de:38:75:bc:d4:0d:48:8c:
c1:f0:ca:2b:da:c3:35:a8:24:5e:0e:6e:a0:08:17:9c:24:7a:
51:fc:00:23:a6:08:04:18:39:72:09:a0:22:f4:82:fb:b1:a9:
58:53:9d:af:59:91:3c:da:70:45:5b:de:41:2d:c7:ea:79:fe:
45:14:17:6e:93:cd:4e:1a:d6:c0:4a:95:91:3c:94:f7:c6:02:
a4:1e:fc:74:17:8b:12:88:9c:18:9a:b1:5c:76:22:68:3a:1b:
4f:57:1b:39:f0:97:10:d7:4e:5d:cf:5f:bd:b9:c5:6b:2c:63:
d4:82:e9:2c:97:43:3c:3f:1a:fd:5b:f7:7b:68:2c:a6:4e:dc:
23:3e:cf:12:16:aa:33:18:5a:1f:ab:80:4d:23:5c:09:42:6e:
84:0e:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:40 2024 by rpki-client on console-ams.rpki-client.org