Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
File: fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa (raw, json)
Hash identifier: zpNT2LbLddP7399H9gWCCEN5PYEmPLkU/CxKVWS9gNs=
Subject key identifier: 9E:D7:50:2B:2D:07:43:AF:BD:4F:5E:CE:24:6F:6A:9C:AA:59:2C:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7446CA4F20B6814AC9C6D56490631BE9D025D2DB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.184.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:46:ca:4f:20:b6:81:4a:c9:c6:d5:64:90:63:1b:e9:d0:25:d2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=61478a079bd5aeb880703c1dd11a7c1c457e7ae2c2cb7709d7608b65067fcbff, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:63:c6:cc:b8:9a:56:b1:82:1f:29:36:5f:
64:09:17:42:91:31:b2:cb:44:62:8e:46:d7:d0:09:
eb:52:82:a6:18:da:fd:6a:a0:e8:96:c1:27:dd:8f:
2a:b9:76:64:38:ba:7b:3a:5c:b9:81:ea:45:45:84:
c9:cb:2f:a2:2f:ab:d2:fa:24:b1:a2:41:80:09:a9:
10:9c:60:86:a7:ec:b4:c7:91:c5:45:94:5d:5c:6c:
04:29:60:b3:e6:b2:02:04:5f:c2:94:03:b1:ab:75:
35:9f:13:7e:66:c3:f1:c8:ad:7e:cd:26:68:36:e5:
0a:40:50:2a:65:a3:24:97:fd:7f:fa:85:f8:1c:37:
12:9d:f3:99:38:8d:23:ce:3f:68:7e:38:9b:58:cd:
fb:19:a6:2f:7c:1f:e6:be:42:3a:17:11:cd:42:07:
0a:37:76:2a:53:6c:47:20:d5:7a:7a:96:5f:b9:2e:
ec:27:83:02:35:30:f5:38:e2:8e:55:2f:6b:52:8e:
98:ab:07:4b:98:68:bd:ed:05:d9:53:d0:73:41:81:
d7:9d:c5:c2:9e:d9:ec:c1:65:ab:dd:d0:77:0f:0e:
58:4c:0d:12:62:34:56:ad:86:34:11:fe:11:e3:ee:
4c:f9:11:de:66:27:73:4e:a2:c4:8c:2d:33:14:75:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:50:2B:2D:07:43:AF:BD:4F:5E:CE:24:6F:6A:9C:AA:59:2C:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
aa:92:02:06:b7:b0:ea:35:fc:ed:bf:f7:30:2d:28:77:05:9d:
72:13:69:12:8f:49:f5:ab:5a:c6:8b:4a:42:10:5c:9e:86:c9:
f0:8f:82:d7:fb:4f:11:fc:fa:6c:04:c7:de:06:b2:72:bb:18:
13:17:b5:0e:a1:9b:34:b3:8c:3a:3b:ba:bf:13:51:77:bf:6a:
78:06:e9:c8:7f:5c:0b:ed:56:d4:d2:ce:a3:71:59:c6:d5:6c:
ae:06:7a:73:ca:51:51:69:dc:cf:78:54:14:8e:a9:9c:b6:36:
47:cc:65:75:0f:c5:8b:97:f8:97:b3:1d:1c:e9:34:94:da:d9:
b0:df:b3:3c:5a:c3:1a:9c:f3:77:58:16:a9:fd:99:4e:de:5e:
9c:94:97:a8:0e:37:e9:03:20:94:f8:aa:f2:74:3e:13:39:92:
8d:5d:e4:3e:24:f9:86:48:ed:ae:64:0a:90:48:58:84:62:ab:
cb:d6:7e:b6:ee:71:71:8c:5f:05:46:94:d8:a1:3a:e6:d4:aa:
4a:68:82:92:56:1f:97:a5:cc:51:b6:48:fa:9d:10:89:cb:74:
51:79:5b:28:e2:fc:82:94:30:f3:fc:2e:ec:83:6a:7e:93:d5:
83:1f:83:88:da:d7:54:1c:89:74:3e:2b:38:47:c7:4d:76:be:
33:f4:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:43 2024 by rpki-client on console-fra.rpki-client.org