Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
File: f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa (raw, json)
Hash identifier: lz0rW7NT6AUAJIC0zYyYAoutiRBcFLcUNWUMCkWxkXc=
Subject key identifier: BB:CD:93:A9:16:4C:DA:21:E3:9F:C6:BF:F3:8B:AD:D9:9A:04:45:FE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5C0F206B503F51C72738F7EC5C852DD6C130D2BD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
Signing time: Fri 26 Apr 2024 00:00:00 +0000
ROA not before: Fri 26 Apr 2024 00:00:00 +0000
ROA not after: Fri 31 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.172.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0f:20:6b:50:3f:51:c7:27:38:f7:ec:5c:85:2d:d6:c1:30:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : May 31 23:59:59 2024 GMT
Subject: serialNumber=d1f221efeca018be9390091513922eaff8d8cc2c2b43cc5a335a09683f619b42, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:be:59:be:6c:09:94:3b:49:b0:32:6d:1d:
ac:7c:81:b2:97:07:a7:ce:ff:1f:0f:db:6d:a0:0e:
0c:3c:68:62:83:32:e0:8c:c2:88:88:17:a2:d7:7e:
3e:4b:04:49:d2:54:83:1a:95:4b:e6:c3:8d:1b:43:
9e:72:e9:35:f2:06:d7:a3:ff:08:a4:45:1a:14:14:
86:60:14:56:83:bb:74:e5:e9:64:80:29:70:c9:d1:
dc:d6:9f:21:26:66:f0:f4:03:0c:1b:cc:e6:60:4c:
91:d7:92:10:a4:4c:d9:33:de:0c:e8:d3:20:d5:5c:
fa:34:9a:b8:1e:34:d8:36:96:34:0b:61:b5:a8:1b:
c4:11:52:34:19:50:d6:58:28:5a:8f:d0:6a:bb:43:
21:55:63:e4:2c:7a:b8:2a:c7:65:d9:75:86:6e:d6:
4d:6e:cb:85:5a:7a:13:00:80:d1:ef:c7:09:ac:d0:
a2:fd:9c:45:de:86:15:f0:d6:b6:eb:fc:77:b4:50:
33:4d:3f:dd:27:f0:d7:b3:d9:54:cc:dd:fe:78:a0:
04:79:2a:0d:7d:84:3d:10:6c:99:59:e2:e3:61:71:
85:c6:85:b0:cf:70:c7:21:e4:7e:0b:a4:af:21:ac:
96:94:6a:e7:ca:a4:e6:d1:f7:1d:4a:b9:c0:ce:7d:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:93:A9:16:4C:DA:21:E3:9F:C6:BF:F3:8B:AD:D9:9A:04:45:FE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
75:65:94:97:2e:40:37:4e:fd:57:36:d6:00:f5:db:02:c4:20:
ac:86:23:bc:0c:dc:23:39:e3:23:1c:76:c3:8b:0c:d5:f3:89:
13:07:42:b2:b3:a3:4d:c3:ec:a7:52:c4:17:d4:12:c9:af:f9:
65:2e:f9:f2:ee:24:18:9c:e9:b2:cc:2b:74:0f:eb:e6:38:c5:
fb:10:d7:58:24:5d:8a:77:a1:c2:84:8b:e6:10:e2:b2:43:bb:
13:54:f4:28:d4:34:26:a9:09:66:ec:c1:7f:61:4f:be:2c:ca:
1a:71:d9:29:97:f5:3e:2f:6a:18:51:19:96:77:fa:89:10:52:
55:91:0f:57:e7:ab:75:24:7a:8a:7a:04:43:63:2b:86:df:f1:
9e:88:e6:10:a5:b8:22:ac:74:02:ba:0b:93:2a:f0:dd:fa:22:
61:3f:a6:8a:86:d4:92:1a:e3:ca:27:ee:d3:9a:78:c9:19:da:
60:0b:fc:7c:7a:ca:3a:94:a7:75:86:92:68:2a:8b:25:a2:ed:
a2:8e:4f:64:cf:1c:c2:fa:7a:36:e6:18:14:fc:29:f0:e5:d4:
58:37:39:11:f5:9c:2a:f4:cc:21:16:89:3c:f3:0b:c2:ce:1b:
b8:01:4b:31:34:19:86:92:4c:97:64:5a:f0:c9:82:27:86:68:
e1:40:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org