Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
File: 157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa (raw, json)
Hash identifier: IXYIvpYbhctkru0p8eaKwacdO/sMDJJIqIP1E1hd8zs=
Subject key identifier: 8A:2D:87:25:63:9A:68:75:0E:DB:33:FF:8C:46:67:52:C3:5F:58:30
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 21BAA241961C7FCB80574508F0F9091644518E3B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
Signing time: Wed 27 Mar 2024 00:00:00 +0000
ROA not before: Wed 27 Mar 2024 00:00:00 +0000
ROA not after: Wed 01 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 80.203.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:a2:41:96:1c:7f:cb:80:57:45:08:f0:f9:09:16:44:51:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 27 00:00:00 2024 GMT
Not After : May 1 23:59:59 2024 GMT
Subject: serialNumber=877772ff2bb60d4a97d09085636384e21343b1d928d4780c50023a1bf6886b00, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:f8:69:4c:f6:3e:32:0c:47:10:a1:4b:94:
80:10:4e:a4:ce:78:1b:47:70:45:23:9f:17:aa:e8:
3d:14:0a:a0:fc:33:b5:ee:98:83:da:45:1c:32:8a:
67:a0:b7:72:44:35:31:4e:41:e9:f6:94:43:4c:b7:
54:6f:e2:69:ed:8f:f2:ee:2a:8c:26:99:3f:a7:a0:
f4:eb:8f:d8:10:18:26:c9:d6:d0:f2:f1:50:2b:d8:
8a:5f:ff:34:c2:54:0c:5c:f5:d4:7e:d9:d4:5b:08:
9e:73:ca:bf:77:41:a8:80:93:d2:0f:a7:21:75:64:
69:53:31:d9:98:e6:e6:11:b5:a7:d8:57:61:ba:a3:
b4:15:27:83:98:eb:5e:e4:02:69:41:80:62:07:04:
8c:24:c8:ea:f4:e3:46:a1:ba:3d:fb:6b:a8:af:dc:
fd:f5:80:6e:58:03:bb:55:d8:9b:c6:52:e9:b7:c8:
b9:9f:ac:74:4d:b6:e7:03:c5:86:2b:39:d0:17:ee:
39:2c:fb:fb:68:58:2d:f6:db:35:de:30:36:54:d8:
31:52:e1:2e:56:9b:cc:90:3d:44:45:b8:d0:3d:ec:
b1:1c:c5:fd:0f:70:5c:a7:6d:3f:94:04:2a:41:7b:
be:64:de:ed:d6:90:94:57:c6:d0:27:e6:23:4c:ee:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:87:25:63:9A:68:75:0E:DB:33:FF:8C:46:67:52:C3:5F:58:30
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
71:eb:54:91:18:09:f2:55:52:24:12:75:e1:f4:17:e7:d1:99:
f9:db:4b:24:aa:04:68:fa:ac:a4:6b:e1:0b:05:44:9e:f9:21:
ce:51:07:98:89:6d:2f:ac:97:dd:54:62:0b:ad:0e:5c:fe:05:
2b:ac:5d:f9:f3:25:79:40:cb:d6:06:c7:03:84:3a:70:7a:e3:
13:47:6c:86:8d:31:08:11:be:a3:91:3f:d5:3c:46:16:d7:bb:
e4:fb:f4:e5:64:87:28:0b:5c:23:e3:7a:22:a9:d8:8f:59:67:
06:37:e2:ff:21:c7:d4:21:d9:44:bb:4d:60:c7:76:2b:7a:21:
9b:a8:c1:a8:e5:e2:f8:06:30:8e:a9:f8:27:27:96:c0:57:fc:
38:6a:35:d6:79:c0:40:ed:9e:be:5c:43:46:fb:29:d1:f2:da:
c9:97:65:b7:13:bb:4d:ec:25:34:e2:18:ad:ae:ea:12:bb:f1:
b6:ca:c4:8b:e1:ed:d1:84:53:0a:aa:af:06:63:00:81:29:61:
75:8c:a8:82:66:22:fb:cc:00:ae:ed:2f:59:33:ef:ea:3d:99:
0d:b2:29:aa:8c:a9:c5:6e:fc:c1:8a:34:19:80:16:fc:4d:33:
d8:f8:66:5d:bf:02:20:84:a9:da:01:9d:89:7f:22:3f:86:46:
26:5c:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:46:56 2024 by rpki-client on console-fra.rpki-client.org