Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
File: 0044471b-07bc-4caf-8218-11c01ca18965.roa (raw, json)
Hash identifier: NH01vabO7jqc/zp8coVY2ueyKV3uHOlAH1o1HA6Srgo=
Subject key identifier: D0:C9:BE:2D:C5:DF:B9:18:8B:D0:B3:FC:D4:2E:45:FF:8D:42:AB:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5D42F733CD3507482B29ADCAB79824BB6ABA90C9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
Signing time: Tue 05 Mar 2024 00:00:00 +0000
ROA not before: Tue 05 Mar 2024 00:00:00 +0000
ROA not after: Tue 09 Apr 2024 23:59:59 +0000
asID: 14618
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Mar 2024 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:42:f7:33:cd:35:07:48:2b:29:ad:ca:b7:98:24:bb:6a:ba:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 00:00:00 2024 GMT
Not After : Apr 9 23:59:59 2024 GMT
Subject: serialNumber=4f23301460764670652efc7be9bea5ba5606a8f82f674204446c7c13a5fbf964, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:0c:6b:56:97:ba:ca:2b:0d:97:fa:16:5f:
f0:19:89:20:9d:29:23:cf:af:7e:78:93:e6:0b:49:
fc:35:c4:be:e4:a2:6e:6a:64:d7:2e:5a:e1:b7:49:
b8:61:76:b6:e1:47:2b:b3:7c:89:02:03:75:12:a2:
ec:72:7f:e8:8f:07:e6:7f:a0:70:8c:ce:67:f8:3f:
46:dc:87:1d:ed:29:fb:e5:2c:c5:66:3f:50:be:dd:
6d:c7:27:b5:d2:f0:64:30:b4:a8:07:14:e2:08:4f:
de:3d:59:91:9e:6e:33:c9:09:70:41:5b:13:1a:3b:
40:b8:30:52:08:78:c1:35:71:d7:3a:39:a8:80:7e:
a0:25:34:74:b1:18:9a:ab:e4:b0:d3:f7:b5:12:e3:
83:d9:1c:48:f9:86:ef:c7:67:df:a9:87:98:fb:f2:
ff:09:57:44:e6:2c:a3:25:55:9a:11:77:cd:38:fe:
6f:c8:c5:46:f8:0a:52:ce:94:54:af:c7:5c:68:ca:
91:2c:96:69:6a:79:b9:18:c0:af:7e:62:4d:cf:db:
72:5d:f7:e6:17:21:22:ab:aa:9d:0c:6c:e0:6e:ff:
e1:74:7e:e3:02:bf:35:cf:72:81:61:23:86:a7:d8:
75:64:3a:ec:b1:95:ab:19:63:f3:4a:de:f9:67:e0:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:BE:2D:C5:DF:B9:18:8B:D0:B3:FC:D4:2E:45:FF:8D:42:AB:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:3f:2f:db:8c:fb:68:1b:3a:b4:c9:31:9c:da:45:ac:0a:35:
b8:49:60:e9:45:ac:61:ea:97:dd:6c:4d:e9:37:c0:7c:71:69:
12:87:4e:8b:68:74:4c:2e:cf:9d:98:51:dd:46:88:94:9f:21:
3a:18:8d:19:7e:b9:0b:6d:de:53:48:eb:5e:5e:3b:f8:12:6c:
f6:b6:74:89:7a:12:19:71:36:e0:44:9c:86:d7:3a:1d:71:29:
41:fe:d6:4d:be:74:56:65:14:96:ea:5e:79:9d:d7:8c:6b:71:
78:a6:07:53:54:5f:aa:b9:20:7a:d3:80:71:62:3c:2b:ae:6c:
b6:c8:8f:04:e1:79:fe:e7:10:f7:92:51:fd:93:a9:4d:17:ae:
34:1a:6b:8b:cb:7e:44:bf:39:a6:59:26:ba:87:1a:7b:fa:36:
87:09:51:8f:ba:fb:a5:33:5c:81:d5:ea:a1:36:ac:c1:e1:5c:
da:c6:4d:e3:2b:ac:dd:c8:61:02:9e:d6:b0:55:83:d1:c2:f5:
ca:e4:f6:5a:b5:4f:fb:8c:b1:89:18:ed:57:aa:71:cf:42:0b:
89:4a:aa:db:ae:a9:c6:94:fd:82:ae:99:90:0b:b1:7e:71:8e:
a2:ca:e1:aa:27:0c:c1:a0:0c:a5:b0:be:10:42:f2:38:a4:01:
9a:31:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:39 2024 by rpki-client on console-ams.rpki-client.org