Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
File: f5f17520-2ea0-4b9a-a01c-04329523a547.roa (raw, json)
Hash identifier: MyFe7f84+bvX5fBQTrm5Up0ZurluDOoK8LiPUqOfSEw=
Subject key identifier: 07:72:3C:4C:9A:E8:BE:01:C4:A4:10:EF:E5:D2:01:C4:50:CA:D9:C0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 05E21E75F4194BD39B446C543C8A2A851C957B6F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 195.61.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e2:1e:75:f4:19:4b:d3:9b:44:6c:54:3c:8a:2a:85:1c:95:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=e7b2d1001cb6fafcbfd1eb87178835e0d06de57f06424178221ee6d81cd489f4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:e1:d4:37:bc:b0:84:ca:78:32:ac:d6:bf:
0c:0f:97:8f:12:c3:49:6c:3f:03:a8:6e:67:50:85:
ae:30:c3:70:f2:8d:89:ee:94:66:19:74:d0:19:60:
30:31:8c:4a:8f:01:f6:d7:f2:f3:39:0f:f3:36:10:
f4:52:07:ac:4d:bc:44:8c:c4:52:85:8c:08:c3:cd:
09:24:58:bb:24:03:a7:0e:82:9b:9e:52:dc:de:60:
8b:55:4e:86:87:63:6f:c4:b9:d9:e2:85:9f:90:c3:
ed:da:e3:3c:63:eb:fe:4a:13:63:84:c9:98:d8:e7:
a8:99:82:0c:37:7e:cb:a4:2e:9a:6c:27:3a:19:ed:
9c:56:9d:44:dd:8e:61:ce:3c:fe:06:90:93:51:f6:
38:8e:fc:79:f3:82:d9:9c:93:de:d1:99:19:5f:d4:
5d:26:e7:29:21:89:8a:d8:e2:e0:7f:0f:df:3d:24:
d5:10:ea:66:9a:bb:f0:e8:cd:d6:13:ef:8e:30:97:
69:a5:a9:9b:07:c6:2d:34:ee:a5:e9:14:c5:1b:79:
9c:f3:75:0f:27:6b:18:c5:1e:35:7a:9e:a2:fe:4f:
80:ff:c1:cb:e4:e5:4b:90:29:bc:9a:20:6a:21:b1:
24:bb:b4:45:51:69:60:d6:1d:b5:b0:bc:78:18:77:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:72:3C:4C:9A:E8:BE:01:C4:A4:10:EF:E5:D2:01:C4:50:CA:D9:C0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:28:85:b7:51:a1:04:f9:be:14:0c:84:4f:2c:d8:65:fd:d9:
2e:f0:b1:aa:14:29:71:c2:9e:ec:25:3a:42:38:10:2e:c6:87:
6a:c2:42:4b:e1:bf:3e:86:85:0a:1d:ed:05:82:24:6d:dc:95:
80:50:00:98:4d:16:6d:fa:45:6a:7e:67:d3:6c:e9:8c:d4:39:
a5:3b:33:18:c8:72:6c:b1:be:be:15:81:6f:71:02:68:4d:89:
f4:85:3c:08:14:46:ff:32:5f:e3:10:e5:4e:b0:4b:d4:13:93:
8e:95:6b:c8:d1:4c:2a:43:24:dd:fe:82:91:49:9c:b1:64:d9:
34:58:2d:0a:9a:94:24:4d:34:aa:f5:fd:af:75:7f:89:49:96:
fc:ff:bf:f4:e7:c7:30:76:a8:10:ad:b9:d5:4e:1e:55:29:2a:
22:d3:c8:7a:c1:56:77:77:68:3d:85:74:da:86:68:75:6b:ea:
5e:5b:b5:eb:d4:76:26:8d:23:11:da:97:8f:4b:49:8b:13:e8:
f5:34:4e:96:c2:c5:60:ab:35:db:3b:9b:b9:cf:7c:b1:c4:94:
9a:15:3a:ad:73:47:11:f0:df:96:9c:a6:25:c8:62:db:70:02:
25:2e:67:fb:66:9c:e4:31:4c:95:01:e3:3c:04:44:c6:40:7d:
a6:e0:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:40 2024 by rpki-client on console-ams.rpki-client.org