Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
File: ef3e6945-57bf-41fe-9e98-2db6c2800547.roa (raw, json)
Hash identifier: wipms3nLJeUWMSMg+MIXRvQOD+LCjYXq66ts+ZVHrSA=
Subject key identifier: 73:72:50:1A:CC:30:E8:26:90:8F:86:79:A3:82:9E:85:59:2B:7B:5B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1655E2AF70947845203CAAAA8121B62D4ABC1688
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.208.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:55:e2:af:70:94:78:45:20:3c:aa:aa:81:21:b6:2d:4a:bc:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=dbef7892956e24f138833faa8740dfbf2c6e6e8aad9f425423eb572a9271ed17, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:79:c4:1b:3d:cb:65:84:ce:ea:60:d5:a5:
f8:63:6a:81:f9:b4:6c:7f:fc:86:f4:68:aa:c5:d2:
e0:2b:64:31:56:20:c1:5f:06:43:f4:58:66:77:17:
cc:35:25:79:06:ab:6d:7d:c8:b3:75:5d:5e:b8:05:
04:d2:17:1e:cc:61:ed:75:38:76:b5:8e:f1:3e:69:
f8:84:5e:c9:18:3a:cf:a5:e0:ad:4f:5b:35:e4:8e:
ca:88:6e:18:c2:81:1d:15:1c:5a:b5:0a:ae:11:80:
6a:4a:ad:34:c0:41:2a:5b:04:d5:87:fc:cf:37:36:
2a:58:79:90:d7:b6:69:4f:a0:8a:f9:54:45:44:af:
10:ad:63:7f:2e:a0:25:a4:62:c5:b8:b4:d3:da:73:
96:86:d6:b9:cf:cc:00:a8:f4:17:03:00:2b:f9:fd:
a6:b0:4f:df:c6:be:b6:f7:4e:97:35:80:a0:8f:3b:
63:23:42:78:6f:ae:ef:86:31:90:86:9c:e2:ac:b8:
85:a9:ed:f6:4b:c1:d9:19:ed:a8:5e:21:26:ad:ce:
fc:87:7c:f2:6c:fa:4e:be:a1:80:1b:19:46:cd:4d:
4b:79:e3:d8:a0:d4:bc:00:65:7f:4b:41:70:95:6c:
75:9f:4a:46:cb:dd:ab:89:dc:a4:3f:cb:be:38:66:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:50:1A:CC:30:E8:26:90:8F:86:79:A3:82:9E:85:59:2B:7B:5B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.208.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ad:04:12:b3:1d:61:b8:da:94:ab:a9:2f:c8:42:bb:43:f1:a1:
f8:0c:c1:99:15:2e:81:58:65:8d:4d:7e:d6:f6:7d:42:90:de:
a7:13:18:e5:c3:64:12:e7:f0:f0:f5:a0:b3:55:75:71:83:cf:
c6:01:52:6c:77:1e:7c:e7:c5:b2:05:44:3a:f7:d9:3c:6c:0d:
8b:14:35:6c:64:15:d3:5d:8d:c1:63:ec:54:5e:ec:03:0c:52:
b6:26:f8:f0:51:63:52:f2:4b:32:8e:99:98:9e:92:0c:d9:91:
32:a9:a8:00:2c:f5:5c:a4:fb:fa:68:17:cd:fb:64:b2:99:07:
69:15:ef:17:e7:dc:ea:65:d9:10:18:87:19:92:27:f3:f4:fc:
7b:e0:3b:96:a5:b6:45:2a:27:cc:28:ec:d7:5e:ee:f4:f6:a4:
f3:92:c4:58:6e:aa:0f:f6:f1:17:58:42:51:ff:f4:03:97:96:
1b:1d:d3:9c:af:9e:e2:27:3c:13:e3:ae:b8:d0:29:aa:40:18:
a0:30:05:b1:3b:9e:96:3f:49:5c:13:3a:d9:83:2a:b9:f0:c7:
83:3f:76:a7:9a:ca:69:91:b2:ac:da:22:c5:d4:db:e4:9f:7f:
ff:db:b6:82:e3:fe:29:65:f3:06:ff:d8:b6:5e:fd:e1:82:89:
fa:64:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:40 2024 by rpki-client on console-ams.rpki-client.org