Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/06017a46-176c-427e-bd78-48276cbb30ef.roa
File: 06017a46-176c-427e-bd78-48276cbb30ef.roa (raw, json)
Hash identifier: a7MSXiJe7oo1GHSKroJCWKFUnzBmuD4YQfUY17aS5Tg=
Subject key identifier: CF:04:1E:50:81:88:61:73:D8:20:85:8C:10:2E:C0:74:EF:B8:75:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 43CF2060EB3BBB625DD7F87887FF3D48ED49226A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/06017a46-176c-427e-bd78-48276cbb30ef.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.224.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 18:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cf:20:60:eb:3b:bb:62:5d:d7:f8:78:87:ff:3d:48:ed:49:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=a35adc969d32b35f4bba34fbf8a8a64a6e7a925b5ab55d8b212f082b99859750, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:ce:89:3d:95:94:46:4a:6e:fb:9e:3b:3e:
0e:90:6f:7e:2f:3e:32:4c:b8:90:ea:90:f2:8c:49:
bf:65:ea:1d:39:ad:ee:2c:09:6a:2e:b1:b8:3a:75:
c1:91:ff:1c:0e:f9:e6:d5:d7:2f:a1:79:da:05:b6:
19:73:92:aa:62:e3:e6:87:4a:d5:84:8c:c3:c7:40:
db:ff:72:54:3f:57:03:40:b4:c5:a6:4b:68:f0:ee:
0a:f3:14:49:a4:25:ee:71:0a:ed:c4:69:01:42:72:
b7:30:98:f2:ee:8f:e4:ee:b3:e9:f9:0a:45:60:fd:
12:65:5a:04:e4:e1:44:bb:39:3a:89:b6:e0:7d:15:
d0:d5:83:0b:5f:a6:7a:65:df:de:ab:f6:0a:2b:cc:
33:46:43:4f:22:fa:00:12:1f:55:ba:5f:5d:7a:ae:
4a:02:46:82:a4:25:83:5c:9f:20:99:85:29:31:dc:
4a:5e:99:42:8f:ec:cf:89:55:dd:bc:c6:ec:51:5b:
d6:8e:94:c4:91:e3:85:59:fe:8e:af:73:b8:db:3b:
b9:6b:30:f6:b0:78:56:81:3b:a4:83:a4:6e:c5:f9:
f7:82:6a:d5:ee:b7:52:09:f3:e0:3e:ba:8f:be:54:
bd:33:71:f1:6f:43:72:1c:ec:e1:42:bb:03:ec:7d:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:1E:50:81:88:61:73:D8:20:85:8C:10:2E:C0:74:EF:B8:75:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/06017a46-176c-427e-bd78-48276cbb30ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b5:49:f3:34:73:1d:7d:f6:40:2a:4b:7c:3d:0b:d9:75:90:80:
e6:94:4e:09:1c:29:39:a6:94:6d:d1:75:ad:80:ad:41:a4:8c:
fc:00:74:01:cb:b7:12:a5:98:34:4b:dc:4d:fa:9c:6b:28:df:
d3:28:dc:9d:d0:ac:2a:c2:d7:f3:01:f1:74:5d:db:0a:fd:b3:
d6:bf:49:9b:94:34:c1:c9:4f:bc:4d:10:69:82:3f:3e:44:9f:
91:de:d4:c8:d7:59:38:ce:1a:dc:0f:f8:bb:c3:f5:03:55:b7:
ec:ef:51:e2:14:24:33:7d:d7:56:0c:63:ed:2c:36:85:aa:b3:
68:24:e5:67:ec:14:60:b3:53:70:07:ea:5e:b4:09:73:f9:c7:
9a:11:a0:6d:63:ec:38:c2:6c:17:ad:ce:2f:3f:30:19:56:06:
f4:c1:13:a4:36:c3:cd:34:f9:7b:07:3c:79:4e:e2:e3:62:a2:
3e:57:9a:ef:e0:48:17:f3:93:90:36:62:95:48:e2:83:a6:fe:
cd:d3:49:52:ce:56:26:1b:48:ab:95:c8:1b:cb:9b:3f:e7:48:
99:69:d2:ec:23:f8:13:68:55:6d:89:5f:a3:ea:51:97:be:7b:
bb:b5:3e:fd:be:fe:d9:23:f0:ce:51:d6:2a:3e:82:8f:7d:0f:
bb:7c:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:14 2024 by rpki-client on console-ams.rpki-client.org