Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
File: 082f654d-49b2-4849-b255-f53c382599dc.roa (raw, json)
Hash identifier: +LUqS/jf4MqT8hAAxwr1Sa5/HaeMqC0p5tv4DKEZLuU=
Subject key identifier: 50:3D:97:1A:9B:26:64:D9:C7:69:BD:A1:B8:E1:E4:45:5A:58:A7:99
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3C3715A0D18DE5280430F88E0374CDFC4DF36CCB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
Signing time: Tue 23 Apr 2024 00:00:00 +0000
ROA not before: Tue 23 Apr 2024 00:00:00 +0000
ROA not after: Tue 28 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 18:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:37:15:a0:d1:8d:e5:28:04:30:f8:8e:03:74:cd:fc:4d:f3:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 23 00:00:00 2024 GMT
Not After : May 28 23:59:59 2024 GMT
Subject: serialNumber=6be8ad0336cf8c0fbd0a83f52ef34bd385fa0d67dbae82b558384b176b94f868, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:51:42:1d:9f:3a:51:73:c7:89:58:14:08:
b1:9a:9b:70:45:95:23:fe:f3:c1:e3:5c:09:47:57:
e4:f8:49:68:b5:d6:68:a2:31:bf:26:ff:60:a8:eb:
0b:07:b8:06:c1:32:40:59:f7:87:80:c4:4d:48:8b:
83:d3:4b:15:6a:c8:96:1d:d4:d8:43:a1:3b:f8:99:
dc:cf:d2:7b:ba:3d:c6:99:3b:09:1c:8b:f7:84:bf:
b3:c0:50:14:0b:0d:3a:7a:25:c1:3c:b8:68:83:fb:
82:49:c1:66:96:01:01:35:52:f4:c2:2e:bf:5f:24:
96:f0:2f:5f:6d:d2:69:a2:69:dc:00:c1:1e:7a:c7:
9a:66:1d:39:d8:68:40:46:d2:c1:ea:95:d0:29:69:
bb:90:e3:db:6f:8d:48:b6:ba:84:3b:c7:d6:62:f7:
4c:0f:f9:b4:b1:c9:81:b3:ad:4a:da:36:e8:db:18:
18:cb:36:b2:2c:00:8c:50:5b:af:ab:ae:d2:41:82:
e6:9f:15:f4:76:d2:29:bc:73:29:77:9d:17:bf:a5:
9f:7e:5a:36:d9:ed:d3:1e:bc:a6:4c:41:a2:67:d7:
95:4a:df:01:58:77:d5:4c:48:db:27:bd:91:03:ab:
ab:95:ce:9a:14:4d:cc:c1:79:26:4c:d9:df:d2:48:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:97:1A:9B:26:64:D9:C7:69:BD:A1:B8:E1:E4:45:5A:58:A7:99
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:9a:e5:d1:cf:2c:b7:cc:91:a2:b6:b0:a1:0d:c8:0f:3d:35:
fc:f6:c1:58:74:83:17:3d:5b:9f:db:27:83:b6:74:ef:9f:7e:
55:2c:fd:9c:87:a4:d4:9f:79:d1:36:cd:b9:cc:91:83:e0:3f:
66:fa:e6:21:67:f3:96:7e:84:c6:a6:07:e4:a5:2e:ea:80:bd:
36:2a:92:fb:89:e0:15:86:5d:55:6f:b2:cc:20:ac:26:75:03:
22:f6:96:93:26:d5:17:4f:41:64:76:dd:25:78:12:db:d7:79:
d5:96:aa:f4:6d:fa:55:74:57:6d:8e:f5:4f:82:1c:0a:1a:27:
d8:da:bb:ea:ab:6d:5a:c2:c5:30:bf:c2:59:70:56:2a:45:f1:
f8:71:82:f9:50:0a:56:6b:fb:ed:45:d4:73:a4:59:4a:61:97:
1f:59:9a:52:df:74:58:ca:4e:6d:33:44:95:30:a4:e2:a4:43:
a7:6b:30:d9:7a:ec:c2:39:86:aa:02:1d:59:ae:55:fb:94:6e:
4b:12:ea:b7:dd:d7:f8:42:ce:15:8a:81:49:c8:12:cf:c1:81:
2f:2e:22:c6:f1:90:68:6a:fc:15:1c:26:10:d3:ad:65:82:48:
d6:18:9c:2f:c9:df:dc:5b:b6:dc:3c:d9:85:ef:4b:80:f8:bd:
0b:7a:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:29 2024 by rpki-client on console-fra.rpki-client.org