Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
File: 0044471b-07bc-4caf-8218-11c01ca18965.roa (raw, json)
Hash identifier: uU++bhLyOKT7sLyYc1AYVrlukjZiesYcW+t7mgXN4yA=
Subject key identifier: 38:94:D9:49:0D:9D:4F:1C:BC:60:12:B6:89:23:7F:4B:A6:7A:EF:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 102899D4D3A13C10E6B54CF58B80229F652A7FF6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:28:99:d4:d3:a1:3c:10:e6:b5:4c:f5:8b:80:22:9f:65:2a:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=1385d709e800ecad7a0bc95e261b5b222597251fddaba1ec6ebf7eff10108821, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:20:ce:02:05:2f:69:38:b3:70:b8:4d:f0:
e2:2f:0e:19:ba:79:25:72:4c:59:ae:fb:65:9d:b4:
30:bd:92:5d:d4:a1:ad:ee:85:bf:fc:8b:d5:9d:c0:
9b:dc:4b:b7:9e:58:14:2c:01:28:8d:94:03:30:bb:
0d:92:90:27:5c:9f:b4:e0:0f:b3:03:43:fe:79:3c:
81:91:d0:94:5a:e9:cb:dd:24:fc:85:2c:0f:eb:0c:
a0:72:f7:18:a5:25:0c:ad:c7:29:ed:d9:db:22:d0:
0a:6b:e8:09:51:07:ad:40:0c:69:8a:e1:53:a5:f9:
f4:bb:f3:ce:43:04:b5:4a:8e:59:b5:53:f8:4e:d8:
94:30:16:64:fd:3a:9d:0a:f6:97:d8:cb:ff:36:d2:
0f:a0:da:22:f0:29:a1:7f:a7:71:80:65:1b:a9:58:
86:fc:25:9c:16:6b:0a:eb:13:14:1a:98:d3:81:fa:
34:9a:4f:06:65:ed:fa:aa:5d:c6:9b:7b:9b:1d:ca:
c0:86:9c:21:59:6d:b1:76:d2:f0:c6:c9:9b:ce:20:
d1:50:da:1c:df:5e:ec:bc:93:31:34:4d:18:8d:1b:
6c:7a:35:d0:83:74:29:c4:d8:91:19:e1:c0:0c:5e:
86:b6:59:ae:07:bd:44:f5:12:c7:ad:88:0a:db:63:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:D9:49:0D:9D:4F:1C:BC:60:12:B6:89:23:7F:4B:A6:7A:EF:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:ff:c0:0c:d8:8a:0d:21:ef:11:e8:12:71:64:73:80:84:01:
7d:85:d9:a9:d5:e9:42:a9:c2:64:78:d9:3d:91:25:dc:3f:67:
ae:fd:84:27:51:aa:d8:f6:dc:2f:1e:37:53:b6:1e:78:e0:33:
df:d9:8a:e2:71:fb:52:9a:8b:3d:0a:9c:48:18:b5:e1:ad:9a:
07:4c:ee:68:61:87:d0:2f:33:e2:ff:33:41:2f:47:d5:95:24:
60:d8:cc:c8:5b:c1:f5:5f:0d:de:02:7f:4c:76:3e:51:99:fc:
58:c4:1d:19:79:9d:0f:89:c7:0d:9a:4e:3d:8d:26:b8:cf:b5:
0a:b6:83:dc:f8:d8:2b:03:32:3e:e3:85:e8:78:5b:3f:00:c5:
1e:50:ea:b8:1e:fe:ca:9c:30:fc:f4:2f:76:ab:3e:cb:53:de:
1e:af:bd:00:9d:4a:5a:5f:a3:47:62:f8:4e:0b:bb:7a:17:43:
bb:93:be:7d:c8:d8:a1:fc:26:51:bb:4b:8a:f6:35:58:cd:d9:
b8:be:a5:82:83:a2:58:ae:18:4c:a6:de:68:7f:f0:44:26:aa:
df:ad:e3:ec:d0:af:e3:9a:fa:d2:ed:3d:0f:e5:f7:9c:c0:f6:
28:0e:4a:8b:31:4f:69:aa:a2:65:c4:c0:e9:b0:f8:6b:cc:c8:
c5:bb:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:28 2024 by rpki-client on console-fra.rpki-client.org