Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
File: fd04a54b-459a-491a-a013-59d0ed55825f.roa (raw, json)
Hash identifier: dKf//K4seqHt0yeyMk1SSZuGcYKaEnuL8t9faVTLsEI=
Subject key identifier: 75:B9:20:2F:F2:F5:B1:4E:DC:66:A2:A2:01:FD:A4:5E:E9:E3:E3:2F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1DE9DCEA42F4A1C738DFF6FC614937AE4B219B1A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e9:dc:ea:42:f4:a1:c7:38:df:f6:fc:61:49:37:ae:4b:21:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=77a63ce58901789ee019070b151333b404b6ec033fabbb74fcf7dc1abdb83f6a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:f3:56:3b:1e:b5:a4:f2:74:e6:3d:55:5d:
cf:be:05:a1:a2:3d:a6:60:81:3e:f1:3c:87:53:ae:
8e:d5:2a:41:05:98:0a:8c:d9:49:ad:be:05:24:2f:
2b:3a:f2:21:e7:55:68:92:26:c7:2f:e0:5d:ea:d0:
85:e3:5d:cd:0a:18:f6:ab:07:9d:d3:af:75:01:3d:
11:4e:6e:01:a8:13:45:be:c1:f0:94:b0:3f:5b:fa:
87:8a:e5:73:25:56:e2:fc:27:f1:ab:7a:3b:73:35:
4f:62:e0:fc:79:10:c2:66:06:97:be:eb:2b:36:96:
8c:db:85:89:ba:e1:4b:b2:07:0f:ea:7c:62:b9:9b:
e0:17:e0:c3:df:ef:73:ec:70:d2:33:1b:40:d6:6e:
3b:f9:0f:73:f6:07:9e:64:03:13:00:f3:eb:92:5b:
98:c3:e3:35:10:6d:bb:2c:7e:cf:7b:ef:06:13:dd:
08:47:86:95:77:e8:80:4e:0e:8b:1c:52:8c:67:87:
04:e1:d9:53:dd:62:7a:28:76:b8:e6:2a:63:96:6e:
4e:95:53:51:e5:8a:63:81:93:f8:05:86:c0:d0:df:
6e:39:4a:98:34:1e:d1:bc:1b:84:8a:6e:66:29:46:
9a:21:c3:95:15:60:e5:10:d7:9d:78:78:8e:a4:fc:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:20:2F:F2:F5:B1:4E:DC:66:A2:A2:01:FD:A4:5E:E9:E3:E3:2F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:db:e1:59:9d:cd:ab:39:71:3d:f3:4b:83:d9:13:81:ad:84:
bd:02:f3:46:86:2a:09:7b:3f:c3:0b:22:12:49:e5:76:b2:bf:
57:74:0c:6f:47:d7:c5:49:1e:57:e7:33:4f:0e:27:22:30:75:
45:ff:b8:ed:9e:62:e5:93:e0:40:12:4f:66:75:ad:26:ba:f9:
ce:70:fc:d7:9c:3c:0b:16:b5:60:f4:34:b4:2a:86:e6:67:e8:
a3:65:77:30:65:67:6a:9f:59:47:25:f7:37:4c:04:02:51:cc:
5e:71:3b:7e:8f:b0:e0:c9:bd:f9:8f:10:e6:38:c3:72:82:f0:
a2:e0:40:02:11:2c:1c:4b:14:fe:b5:92:5c:4d:cb:f5:b3:b7:
26:30:5b:1b:32:7e:d3:c3:2d:86:29:a2:12:0d:34:3c:20:c3:
5f:af:a6:dd:2a:34:eb:6c:ef:93:e2:05:cf:c1:9f:6b:06:52:
4e:05:07:cf:fb:5c:2b:c7:c3:be:11:43:ed:fc:5d:73:e9:9f:
95:50:ef:71:db:6f:92:e5:35:7b:1c:a0:c5:5e:eb:ee:3e:d3:
92:79:f1:57:b4:f1:0b:7b:fc:c1:88:e4:56:71:33:00:8f:af:
47:83:a5:2c:4a:49:24:71:02:43:27:41:74:2e:cc:b9:27:4d:
3d:af:6a:78
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUHenc6kL0occ43/b8YUk3rkshmxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA1MjEwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDc3YTYzY2U1ODkwMTc4OWVlMDE5MDcwYjE1MTMzM2I0MDRiNmVjMDMzZmFi
YmI3NGZjZjdkYzFhYmRiODNmNmExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEX81Y7HrWk8nTmPVVdz74FoaI9pmCBPvE8h1OujtUqQQWYCozZSa2+BSQv
KzryIedVaJImxy/gXerQheNdzQoY9qsHndOvdQE9EU5uAagTRb7B8JSwP1v6h4rl
cyVW4vwn8at6O3M1T2Lg/HkQwmYGl77rKzaWjNuFibrhS7IHD+p8Yrmb4Bfgw9/v
c+xw0jMbQNZuO/kPc/YHnmQDEwDz65JbmMPjNRBtuyx+z3vvBhPdCEeGlXfogE4O
ixxSjGeHBOHZU91ieih2uOYqY5ZuTpVTUeWKY4GT+AWGwNDfbjlKmDQe0bwbhIpu
ZilGmiHDlRVg5RDXnXh4jqT8jMMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR1uSAv
8vWxTtxmoqIB/aRe6ePjLzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmQwNGE1NGItNDU5YS00OTFhLWEwMTMtNTlkMGVkNTU4MjVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADODMA0G
CSqGSIb3DQEBCwUAA4IBAQAP2+FZnc2rOXE980uD2ROBrYS9AvNGhioJez/DCyIS
SeV2sr9XdAxvR9fFSR5X5zNPDiciMHVF/7jtnmLlk+BAEk9mda0muvnOcPzXnDwL
FrVg9DS0KobmZ+ijZXcwZWdqn1lHJfc3TAQCUcxecTt+j7Dgyb35jxDmOMNygvCi
4EACESwcSxT+tZJcTcv1s7cmMFsbMn7Twy2GKaISDTQ8IMNfr6bdKjTrbO+T4gXP
wZ9rBlJOBQfP+1wrx8O+EUPt/F1z6Z+VUO9x22+S5TV7HKDFXuvuPtOSefFXtPEL
e/zBiORWcTMAj69Hg6UsSkkkcQJDJ0F0Lsy5J009r2p4
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:40 2024 by rpki-client on console-ams.rpki-client.org