Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bdc7597-5430-429b-990a-e3659e2e6227.roa
File: 0bdc7597-5430-429b-990a-e3659e2e6227.roa (raw, json)
Hash identifier: jrwru/TDwvxshJQKuCrqwDN5QkoSnF20mEXbxNZ/fak=
Subject key identifier: BC:C6:F7:E4:CD:EB:64:CF:85:EA:13:A5:BD:51:8F:79:01:8D:B8:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 116680A703FCCB675C659B59EA80AD1BD21B6C79
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bdc7597-5430-429b-990a-e3659e2e6227.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.84.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:66:80:a7:03:fc:cb:67:5c:65:9b:59:ea:80:ad:1b:d2:1b:6c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=7c8e539831230bf3873131065ab69f8148eba50928e07ebf23be78490642db6c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:24:5c:3c:76:87:f2:72:5e:6c:d0:92:4c:
30:da:34:ac:80:7e:eb:85:36:1d:c0:27:f5:1e:d6:
45:04:05:6c:86:70:fe:cb:b2:1f:7d:1b:46:12:1a:
2b:d7:66:db:06:53:51:c9:ae:c0:7a:78:c9:12:40:
27:db:0e:ae:b4:2e:a1:a1:89:ca:d2:2c:dd:f1:68:
77:fc:47:de:16:7a:85:9e:2c:12:4d:3f:71:96:10:
ef:47:8b:c7:64:91:0c:72:70:eb:f4:7b:bb:d4:9e:
07:0c:76:63:fd:78:cb:50:e2:22:7d:3c:da:ee:39:
4c:c3:cd:60:41:b3:06:cd:ac:ce:f1:7f:25:d5:bc:
25:3c:c0:5f:93:7b:42:a1:f6:07:bc:c4:a8:7c:ac:
29:b9:04:67:f4:7a:9d:7e:e5:d7:2c:f3:bd:27:91:
fe:be:52:0f:27:be:7d:0a:f3:f8:96:81:51:b0:14:
77:48:8c:0b:6c:0d:98:67:71:38:de:a3:02:0e:50:
c6:aa:f4:f1:07:65:92:9a:e7:80:21:fb:e0:ea:fe:
f7:af:f5:40:65:8d:5a:8d:68:5c:ef:b7:91:b1:b8:
ec:c1:d6:e5:b4:70:c4:ce:32:02:3a:31:18:23:72:
21:72:30:7a:a2:d2:d7:24:d7:16:36:8d:62:7d:bf:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:F7:E4:CD:EB:64:CF:85:EA:13:A5:BD:51:8F:79:01:8D:B8:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bdc7597-5430-429b-990a-e3659e2e6227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
ad:2d:73:37:4f:9f:bf:46:81:3a:b3:87:96:0b:55:56:0d:89:
c0:f4:8b:2c:e3:14:6c:74:27:49:08:6a:48:bb:61:3a:fc:64:
c5:18:da:5f:12:59:1b:ec:78:20:ae:37:63:c5:90:6d:ce:4c:
01:df:fe:a2:0b:a2:dd:4e:fa:d4:c8:ac:30:60:a9:91:5b:b9:
a7:a6:6d:d3:43:cc:3b:b2:b8:a7:ba:31:23:7e:5b:93:3c:ed:
43:9d:72:4d:63:31:ce:a2:2e:4a:3d:15:8f:f4:f5:3f:9d:f6:
40:2f:27:1d:d5:f3:d1:ef:e7:2d:bb:fc:b1:e1:6e:99:3a:17:
51:d5:48:5b:fa:05:0c:48:6c:77:32:cb:12:a2:f9:96:79:9f:
ae:ad:03:b1:76:b9:6c:61:ec:c7:c6:81:e7:84:00:66:c4:c2:
64:d3:67:34:06:49:5d:42:b5:69:92:03:52:4a:d4:7e:dc:3e:
c8:51:39:fa:f1:80:3f:6c:d9:1a:97:ea:d8:e4:cb:c9:d9:1e:
e3:87:c2:97:aa:01:05:ef:5e:a8:84:a8:23:d2:32:e8:b6:eb:
6f:f8:21:42:ca:d0:1f:6a:9c:49:22:f8:a9:4f:36:7a:91:38:
0c:bd:4c:a2:6f:9c:02:48:8e:a1:37:58:ec:ab:ca:d7:45:e6:
9f:44:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:25 2024 by rpki-client on console-ams.rpki-client.org