Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
File: 082f654d-49b2-4849-b255-f53c382599dc.roa (raw, json)
Hash identifier: PrFRmjkTT21lfA0orRykbKhujoRPANr2JURcN/wrdc4=
Subject key identifier: 14:F1:21:F7:D8:75:3E:8D:01:49:DE:1D:44:8E:7A:1C:CE:76:33:60
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5D14233FDD51642558EBD80DB14865AAC7A64443
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
Signing time: Fri 15 Nov 2024 00:00:00 +0000
ROA not before: Fri 15 Nov 2024 00:00:00 +0000
ROA not after: Fri 20 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:14:23:3f:dd:51:64:25:58:eb:d8:0d:b1:48:65:aa:c7:a6:44:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 15 00:00:00 2024 GMT
Not After : Dec 20 23:59:59 2024 GMT
Subject: serialNumber=3b296bf5d45417b7c886dd8818afab2999ec5209b05ef6acb85b59e96622ef26, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:12:33:c5:0b:8c:96:07:d7:6a:97:6c:2e:
af:2c:67:c2:84:49:71:8c:d0:a4:65:aa:13:9f:9b:
a7:f7:af:c1:3e:b3:b9:70:f4:e4:0a:94:5e:42:b6:
93:82:b9:15:2b:04:ec:0b:2d:8b:13:a8:47:da:fe:
ca:c2:28:8f:bb:aa:e5:0d:54:e8:01:0b:cd:05:48:
29:7e:9b:6c:cd:7e:a4:83:9d:f2:13:d3:6d:48:da:
bf:af:5f:6f:7e:ca:18:c8:0d:bc:e4:80:18:27:35:
b1:05:b1:da:6b:6f:f8:b0:ad:99:42:c4:d2:c5:52:
f3:c3:e0:5b:76:a0:85:eb:f7:62:59:29:cf:85:c2:
47:36:a6:fa:79:d1:16:d5:19:56:87:e1:f0:af:a9:
eb:f7:a0:97:36:0c:a0:01:f1:c1:9b:8f:7b:ce:6c:
9b:6d:96:6b:80:e4:ca:01:d3:88:2a:fa:59:32:55:
07:1e:95:41:46:df:e6:da:86:52:94:2a:3f:8e:a1:
98:f7:56:21:9b:47:94:48:72:02:1d:b3:06:83:0f:
7f:c9:27:3d:7e:4b:fd:17:97:36:e9:52:ef:a4:98:
9b:9e:b2:02:6d:b9:6a:97:4d:eb:56:4f:f5:a9:e9:
d5:9f:48:3d:78:82:d7:ee:0b:5f:11:dd:0b:97:77:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F1:21:F7:D8:75:3E:8D:01:49:DE:1D:44:8E:7A:1C:CE:76:33:60
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:0d:75:ab:a1:b3:4a:12:c2:f2:6a:40:47:a6:1b:59:67:e9:
d6:34:35:d0:6d:19:fd:3e:d4:f8:54:c9:bc:72:d6:4c:f3:be:
76:dc:e4:f9:5d:dc:0f:de:ea:d7:5d:70:ed:a7:e3:0b:cf:f6:
86:b2:16:c1:49:db:e1:1d:30:4b:38:12:66:21:c5:f5:de:32:
69:bd:e2:34:d5:5c:93:41:f0:39:84:fa:03:49:23:51:01:c0:
a4:92:2a:b0:da:2d:3a:67:ba:54:17:4b:40:93:c3:6f:4a:a3:
8c:35:9c:f5:27:3a:85:60:a4:65:1a:cc:f7:df:51:fa:23:15:
5f:e7:c4:95:a5:7e:f4:6c:f9:58:c1:51:0d:25:e2:84:c9:46:
92:c9:98:fa:03:d9:6a:5a:12:f0:ab:e3:ff:d4:92:19:c8:c9:
6b:d0:c0:92:d9:f5:92:00:00:76:c9:2f:5d:5a:51:2a:29:11:
c3:7f:dc:46:2d:b1:6f:12:34:91:ff:3a:1e:04:b2:57:17:08:
25:5a:64:9b:69:c4:4d:fb:77:23:86:d3:a3:04:e5:7d:69:a4:
b7:30:c3:4b:6c:0c:a4:20:2d:63:0e:d8:ce:1b:0e:f9:79:6a:
1c:e4:20:34:f7:8e:33:f7:49:a8:89:53:c0:17:e9:c4:af:f3:
17:a0:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:49 2024 by rpki-client on console-ams.rpki-client.org