Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bdc7597-5430-429b-990a-e3659e2e6227.roa
File: 0bdc7597-5430-429b-990a-e3659e2e6227.roa (raw, json)
Hash identifier: ePDFd/VTgRZgSGwuohBNWWG1pQ6sSK7D02IB+94tqsM=
Subject key identifier: C0:A0:0D:D5:03:E2:44:6A:D3:D5:FA:6B:EA:8F:22:D3:57:B4:A8:9F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 46548AF027C473FF25B9C261773ADBE10A5CBDCC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bdc7597-5430-429b-990a-e3659e2e6227.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.84.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:54:8a:f0:27:c4:73:ff:25:b9:c2:61:77:3a:db:e1:0a:5c:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=575362971fef4d0330b91bf6bb594330a07687ef5b67043d12a1e3112354b122, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:7c:43:4c:16:03:b3:f9:5a:3c:6c:34:dd:
97:6d:d0:d8:90:f6:79:a2:67:b2:ca:0c:40:5c:0b:
e5:03:14:b3:10:d1:d4:82:24:37:60:75:5c:e0:88:
85:15:1c:d7:79:b3:7c:da:ea:35:fd:10:97:bf:58:
77:22:6a:29:3f:af:d5:f8:26:01:84:1b:72:0f:6c:
28:c6:b9:7c:c9:84:81:0a:1a:e4:4a:01:c5:dc:1f:
84:82:33:0e:2c:0c:a4:65:cd:ea:f9:d2:ae:3b:97:
4a:11:b3:57:3c:55:d2:8a:bc:17:78:3d:6c:3e:78:
14:10:ba:b4:4f:7a:03:38:78:18:9c:f3:fc:5c:38:
bf:86:de:3b:c7:84:2a:02:1d:45:09:9d:0b:13:73:
16:55:2c:b4:b5:1c:68:0a:72:19:1e:f6:cd:57:08:
7f:64:a1:aa:f1:2b:98:59:cb:39:da:b5:fa:07:c4:
6f:b9:48:1b:e8:19:48:f4:f8:b5:c1:a6:ec:e7:22:
5f:31:f5:2e:d1:f7:0f:03:1b:9b:2b:af:30:ee:24:
f4:d7:ab:6f:6d:81:57:46:e7:c7:42:d3:dd:1c:c1:
b9:77:0d:82:08:dc:bb:cb:03:e9:2c:5f:46:b6:1a:
c5:ff:2f:fb:20:1e:4f:77:fd:90:f9:79:bf:b2:4f:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:0D:D5:03:E2:44:6A:D3:D5:FA:6B:EA:8F:22:D3:57:B4:A8:9F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bdc7597-5430-429b-990a-e3659e2e6227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c7:22:85:ee:83:f1:bf:33:51:e4:01:76:2b:ab:bb:86:74:54:
9c:5e:05:69:a0:b0:be:d1:1e:d4:62:84:a0:71:05:c1:73:63:
ee:91:4d:18:d8:48:ec:18:7a:af:9d:55:9a:0e:0b:ea:1b:4c:
af:fc:b2:eb:2e:59:bd:15:fc:62:a2:a4:6d:b3:3e:76:4f:ff:
05:a2:da:18:5b:5c:3d:64:ec:10:a2:84:b3:2d:98:61:c0:5e:
05:63:fd:33:c1:d6:ac:bd:51:e4:a8:d0:61:a7:8b:46:8b:d1:
8c:73:1a:2a:20:0f:0b:84:ae:f1:30:0f:7d:08:9b:2b:f2:df:
2e:b3:d5:4c:97:59:11:98:74:7c:79:21:69:e3:64:58:5c:77:
7a:62:95:27:a8:38:9a:67:c4:b1:f6:6c:18:30:d9:6d:2c:24:
22:f8:e3:5c:78:b9:a8:7c:f0:65:23:9c:0e:59:f1:fa:3c:b1:
41:4a:0b:05:25:56:cf:00:2b:fb:42:98:bd:63:3f:df:35:e5:
e4:a2:f0:a6:9d:c4:34:12:97:40:e8:3d:0b:e6:49:aa:90:4c:
6e:e4:3e:ed:14:3e:79:34:94:7f:7a:df:48:25:4d:49:e5:1a:
c9:cd:d6:87:14:78:1f:b9:10:de:c1:69:30:e4:b7:5f:3c:7f:
fb:66:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:27 2024 by rpki-client on console-ams.rpki-client.org