Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
File: f0b62efe-867d-4733-9b0c-8354a04195f8.roa (raw, json)
Hash identifier: FojuNbe6WOnkm5G3S9wOcAYoicvRo/0vJ6eq+vr8PSs=
Subject key identifier: 2F:FA:97:49:D8:40:50:1F:1E:5D:59:A3:31:58:C8:A6:77:C4:F7:81
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48CE42C37A84877699AC9038B7C63401E9B9FA75
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.128.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ce:42:c3:7a:84:87:76:99:ac:90:38:b7:c6:34:01:e9:b9:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8168f4a4f7df90a05e3b46bc6d06057a34b444e81db49852152b76518d16e477, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:8a:f6:6d:3a:bd:24:4a:45:f4:c6:9c:16:
5c:b8:83:f1:bd:d4:51:d6:8c:49:7e:09:ee:6e:8b:
ba:21:20:97:64:21:e5:49:60:ef:0e:df:c3:ab:1e:
73:1f:af:5b:4e:79:d0:b7:cd:05:12:f2:45:3c:c9:
4b:e8:fc:1b:e5:31:ce:d6:72:ea:fe:d4:7f:c7:50:
fc:78:22:d5:01:63:03:7b:39:6f:bd:ff:bf:98:c3:
73:5a:d4:99:de:43:5f:e8:5d:13:c7:13:f8:c8:07:
eb:3a:94:9b:80:98:63:83:aa:89:44:0c:79:ff:e8:
b7:d4:95:f0:d3:be:75:de:24:86:19:2b:32:74:3c:
5f:3e:f2:29:2b:ac:09:7d:b5:18:f8:3b:8d:51:4f:
fa:0c:36:cb:8c:d1:92:95:01:82:c0:1a:77:a5:57:
9e:68:b0:bf:45:6c:6a:4c:96:78:55:5b:69:49:fe:
f1:bc:79:4d:cb:af:37:22:19:45:91:f7:f0:62:67:
94:9e:28:e2:08:89:df:2a:52:50:e4:ab:5f:d1:02:
50:6c:c6:27:ed:6d:1f:5b:2c:28:b0:dd:b5:43:89:
9d:e7:03:cd:e0:0f:b3:d5:cc:09:c8:c3:bc:e8:fa:
d3:33:14:2a:3d:c9:f0:79:bf:ec:30:74:d0:f5:14:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FA:97:49:D8:40:50:1F:1E:5D:59:A3:31:58:C8:A6:77:C4:F7:81
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:7c:ab:ab:f2:05:0e:ff:be:d6:ab:57:18:aa:db:50:c5:39:
c1:d1:c9:c4:f4:b4:69:1b:01:f4:07:e9:67:5c:d5:77:13:cc:
16:33:b2:7a:96:6e:e6:74:9b:be:0e:58:39:f0:fa:47:e1:76:
8e:85:2c:d0:8a:1c:18:43:97:ed:07:c6:49:da:da:b7:e4:4e:
36:7b:b8:93:64:9b:81:18:10:c6:fb:22:fc:ea:61:89:3a:3a:
f3:36:97:3e:4a:b2:6c:e3:69:b9:3e:5e:0d:66:62:24:8e:9f:
1a:86:f2:c2:cf:eb:bf:23:29:6b:16:5e:60:88:93:60:b5:90:
14:8c:fb:8b:da:7f:46:b5:a9:f6:1a:b9:e4:6c:85:90:4b:f5:
fb:d9:86:80:7e:36:64:25:06:6b:43:f2:46:fa:b0:79:30:a8:
76:76:e1:01:03:5e:22:09:38:f1:ed:e9:01:24:54:82:f6:63:
7d:28:1d:8e:f0:bc:c4:3d:34:de:2b:9e:91:ac:30:2b:ca:73:
f4:41:9a:07:a2:8b:bb:f5:7f:17:88:60:d8:7b:43:11:89:a6:
49:8e:74:e0:95:6c:93:e8:0f:7c:87:44:2a:67:d6:d6:f8:b4:
1c:16:78:ea:b1:1e:c2:25:80:6c:51:51:d0:29:3c:e3:7e:5a:
85:b6:8e:49
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSM5Cw3qEh3aZrJA4t8Y0Aem5+nUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDgxNjhmNGE0ZjdkZjkwYTA1ZTNiNDZiYzZkMDYwNTdhMzRiNDQ0ZTgxZGI0
OTg1MjE1MmI3NjUxOGQxNmU0NzcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKABivZtOr0kSkX0xpwWXLiD8b3UUdaMSX4J7m6LuiEgl2Qh5Ulg7w7fw6se
cx+vW0550LfNBRLyRTzJS+j8G+UxztZy6v7Uf8dQ/Hgi1QFjA3s5b73/v5jDc1rU
md5DX+hdE8cT+MgH6zqUm4CYY4OqiUQMef/ot9SV8NO+dd4khhkrMnQ8Xz7yKSus
CX21GPg7jVFP+gw2y4zRkpUBgsAad6VXnmiwv0VsakyWeFVbaUn+8bx5TcuvNyIZ
RZH38GJnlJ4o4giJ3ypSUOSrX9ECUGzGJ+1tH1ssKLDdtUOJnecDzeAPs9XMCcjD
vOj60zMUKj3J8Hm/7DB00PUUScMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQv+pdJ
2EBQHx5dWaMxWMimd8T3gTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjBiNjJlZmUtODY3ZC00NzMzLTliMGMtODM1NGEwNDE5NWY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOAMA0G
CSqGSIb3DQEBCwUAA4IBAQAifKur8gUO/77Wq1cYqttQxTnB0cnE9LRpGwH0B+ln
XNV3E8wWM7J6lm7mdJu+Dlg58PpH4XaOhSzQihwYQ5ftB8ZJ2tq35E42e7iTZJuB
GBDG+yL86mGJOjrzNpc+SrJs42m5Pl4NZmIkjp8ahvLCz+u/IylrFl5giJNgtZAU
jPuL2n9Gtan2GrnkbIWQS/X72YaAfjZkJQZrQ/JG+rB5MKh2duEBA14iCTjx7ekB
JFSC9mN9KB2O8LzEPTTeK56RrDArynP0QZoHoou79X8XiGDYe0MRiaZJjnTglWyT
6A98h0QqZ9bW+LQcFnjqsR7CJYBsUVHQKTzjflqFto5J
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:43 2024 by rpki-client on console-fra.rpki-client.org