Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09fd926-3f61-4391-9843-738e03da5e6a.roa
File: f09fd926-3f61-4391-9843-738e03da5e6a.roa (raw, json)
Hash identifier: 37dZaS3kSZqtC+8Sg9iVt9obJ+4xJuVMb3yiF7rDIVw=
Subject key identifier: B2:E1:CE:9D:21:23:43:1E:1D:9F:47:C9:92:D9:77:AA:51:8B:29:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7B58929DD1FBC69231C33A66A4900605CA2466F8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09fd926-3f61-4391-9843-738e03da5e6a.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 200.197.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:58:92:9d:d1:fb:c6:92:31:c3:3a:66:a4:90:06:05:ca:24:66:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=33f2d2c6885fa66e28069bf7dd989ca8989cd4edb7f40e7ff4743b0928f8ce4f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:3f:e3:e7:9a:fd:ec:35:5e:53:a0:3a:cf:
1f:d7:69:1e:cf:8e:43:2f:56:59:7a:62:0a:3a:7d:
4a:4d:7a:6e:2b:13:53:c6:20:d0:fd:25:9b:b9:cc:
59:ff:a4:ad:80:7a:e4:9a:4e:a2:69:af:df:66:d8:
4c:0e:45:04:f5:72:d2:4f:3b:81:3b:1a:25:5b:10:
0e:de:76:65:92:08:98:49:10:02:5b:98:5b:9e:9a:
ad:09:b4:49:ee:ca:77:cb:56:fc:60:21:6c:10:4f:
3b:72:55:ac:58:67:fc:85:8a:1f:24:69:47:25:81:
86:7c:8a:4b:96:df:5b:77:8f:5d:ba:e0:96:07:aa:
e8:b7:1e:6f:ef:b4:81:68:9e:cb:0b:19:ef:97:d6:
07:fb:6c:ff:c9:3d:d3:3b:dc:e4:ba:38:7a:1e:a5:
63:0f:ba:10:12:1a:7e:d2:3b:95:aa:ea:4b:13:d9:
2a:e4:0f:50:98:21:f3:1a:67:c4:66:f9:d9:23:69:
19:76:5e:17:41:9b:2f:5d:ef:12:65:b8:ca:1d:b6:
77:da:7d:09:b9:ce:9d:26:c2:73:fd:5b:ec:31:fe:
7c:b2:aa:b7:ef:de:ed:1f:70:d4:b6:9d:cd:79:7b:
9f:ee:82:4f:a2:77:03:7f:5c:35:5d:41:99:32:2e:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E1:CE:9D:21:23:43:1E:1D:9F:47:C9:92:D9:77:AA:51:8B:29:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09fd926-3f61-4391-9843-738e03da5e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:a5:8e:3c:a7:ad:13:90:b6:e2:1d:aa:3d:4f:cc:ba:32:0f:
30:9e:37:24:80:6d:bb:9a:aa:11:3f:a5:60:44:62:08:5c:2d:
9a:00:37:48:da:32:0e:eb:fd:de:e8:d9:20:8e:20:73:e0:34:
a7:8d:b6:d7:24:54:de:0e:9a:8a:ec:a3:f1:9d:4c:ca:56:f8:
0c:90:1c:a8:7c:c2:d9:ff:80:52:65:ab:09:3b:a9:6d:17:d2:
2c:00:f8:16:da:5e:8f:6e:2c:d0:11:eb:45:de:78:af:88:f9:
29:78:20:32:8d:c6:58:5d:fc:1a:82:94:de:42:25:ca:c4:e5:
93:5b:7b:60:dc:a6:c7:d2:0b:35:32:a1:ec:83:ae:01:fb:e3:
9a:63:f8:22:ff:ed:b1:ac:75:7c:df:f0:97:86:0e:66:63:2b:
d5:e2:2b:64:ce:c3:d7:23:d9:dc:1a:df:15:61:fc:44:51:16:
d7:e6:0d:f0:85:ad:75:25:81:7a:38:62:f9:89:b1:06:6b:fd:
58:17:df:db:9c:85:74:f2:f3:9b:dd:9e:e2:cf:04:ac:f6:b6:
82:5f:11:e9:98:38:be:38:d2:11:d2:37:40:70:4d:18:b2:31:
20:fd:c6:f7:67:69:6e:d6:1e:29:c8:2b:8c:c0:98:07:ef:95:
11:b5:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org