Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
File: fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa (raw, json)
Hash identifier: 1nWYrJQLgu/2bBojUSoLk8hfqUUH8H8hYxxSSrSUo+Y=
Subject key identifier: D8:80:41:58:42:E2:40:14:F2:D5:C3:D5:76:92:14:3B:C6:02:D8:2B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 31AA65BF07B043E9BE39F3663CE2590A3902B6E7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:aa:65:bf:07:b0:43:e9:be:39:f3:66:3c:e2:59:0a:39:02:b6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=350c0287f82972d6482935f4186b9c5ede1889d6c47c51efe416160f307da4fd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:8b:d1:4f:ed:9e:db:70:91:81:db:9a:e9:
65:45:d0:ae:d2:1c:23:dd:ef:40:f0:1e:ae:c5:47:
4f:04:cf:ae:20:59:4c:10:8e:ce:47:b5:a6:fa:b3:
53:37:14:bf:e5:1a:23:b9:98:13:46:00:78:77:1d:
58:00:27:4e:79:f5:e6:5d:8b:c5:d8:ca:70:be:c8:
22:b0:a1:ba:f7:d9:1c:ca:d8:c5:9e:34:7c:89:37:
8d:08:3a:32:2b:cf:71:49:c6:da:c7:3f:51:2d:cd:
e6:b4:20:a7:83:62:05:89:4d:9a:ad:e2:1d:92:80:
10:98:5a:57:d7:f2:a7:0b:39:e7:62:0c:29:53:bd:
bc:2d:c6:26:8d:94:79:72:2c:67:17:2a:3c:dc:bc:
a1:e6:78:b6:0e:80:55:04:62:ce:d8:c9:d6:f1:28:
54:3f:18:f9:c5:f4:64:3b:63:c1:80:e6:84:9d:6c:
ab:8b:31:3d:bf:e4:19:d0:14:f7:4d:40:46:2c:fc:
40:7e:90:75:1e:17:96:da:ca:d4:9c:0e:ea:bd:34:
ce:95:1e:ea:7c:f0:6f:9c:e1:89:3f:db:d7:80:c1:
9b:ad:20:5c:89:ed:bf:60:f6:55:03:4a:ec:d7:ee:
60:11:13:2e:09:71:d3:cc:e7:5b:3b:b9:98:ef:c9:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:41:58:42:E2:40:14:F2:D5:C3:D5:76:92:14:3B:C6:02:D8:2B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:dd:bd:ea:3f:c3:23:7f:bb:9d:af:76:dd:77:41:4f:fc:72:
35:7b:0f:9c:65:48:4d:81:fd:6e:ea:55:4d:c1:18:d9:5a:24:
8a:69:70:0e:6f:d4:1d:bf:f8:e5:f7:f7:02:eb:18:8e:e2:fb:
bf:d4:9d:39:e5:af:b7:b4:21:00:bc:66:f2:11:63:84:6f:5f:
17:fb:ce:b8:c1:87:49:ba:59:70:ee:6c:d9:c4:58:a2:bc:43:
2a:8c:50:ff:5e:d3:ee:03:bb:bd:39:c5:9a:ed:95:d6:84:8c:
8c:9e:64:08:24:ce:f4:c8:b0:e8:77:ca:ea:75:07:3a:3d:7e:
d4:92:8e:fd:8e:f4:af:a5:7e:bf:96:63:8e:40:c1:bb:2b:7c:
d6:a3:40:6e:30:9c:9e:db:d7:b3:3d:08:14:6f:49:46:a0:af:
4d:97:31:6b:b4:18:89:31:64:97:91:d3:49:b5:5e:83:f9:8a:
f0:67:4c:54:b4:33:25:23:52:07:3d:a3:1e:3d:bf:44:96:62:
2b:d8:8b:9c:0b:ff:9d:69:b6:96:9f:57:ab:0e:45:96:14:a0:
82:76:ce:10:9e:86:94:b5:5a:d6:af:f5:dd:2b:83:cd:ae:16:
d0:e5:72:2e:e0:34:20:6f:b0:be:b0:68:48:de:b6:5f:88:da:
64:88:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:40 2024 by rpki-client on console-ams.rpki-client.org