Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
File: 157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa (raw, json)
Hash identifier: UmgYDhs8YU4mq1UrMYuc326rsxTFAwgrZ5ntGOyePcM=
Subject key identifier: B0:EA:E9:40:CD:AC:D3:36:B9:4E:DE:A8:88:91:86:82:DE:9E:AA:73
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0360C7A99190BDB7B9D44318577AB6B3EB5E7CCE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 16509
IP address blocks: 80.203.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Sep 2023 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:60:c7:a9:91:90:bd:b7:b9:d4:43:18:57:7a:b6:b3:eb:5e:7c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=59a6b065319a7cc3991c1b14fe0f9c5e59d911ecf43be2b198d6e2046caec038, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:4f:99:55:45:2e:0f:13:48:8c:2f:a3:28:
47:b6:56:0a:15:24:f8:57:9f:57:93:b2:39:1b:81:
a9:bc:ca:96:f1:42:44:67:03:0d:6a:b8:2e:d7:65:
3b:a8:0e:f4:24:68:f2:b7:04:09:db:24:15:25:ac:
cd:8c:24:c0:90:3a:02:17:b3:6a:9b:bd:61:dc:b1:
1c:7f:d5:0f:6d:b8:d5:51:3b:3d:c2:23:85:ea:e8:
2a:1f:6b:00:c2:d2:3b:86:22:44:47:d4:4c:74:fb:
81:ca:1a:d6:83:9b:33:dd:41:c2:3e:6b:c7:e9:ab:
7c:e2:f9:0b:9a:83:48:69:83:6d:44:e9:51:ee:a4:
dc:09:6f:10:7e:83:d4:3a:07:32:ea:a5:ee:8a:a9:
ec:ff:a4:ff:d0:b4:68:89:99:d2:5d:22:e9:78:0a:
16:38:b2:e5:5b:c7:63:a4:b2:66:45:51:e7:94:03:
ab:a5:6f:d5:8f:f7:78:1c:80:3f:7c:34:07:3c:13:
bc:37:05:ed:da:84:a2:9c:85:0c:63:09:c5:04:78:
70:47:fd:c1:3f:7a:72:30:98:7c:98:77:1b:07:3c:
92:cf:71:46:4e:fe:10:45:db:65:10:95:ce:f9:ff:
a5:a0:b3:04:97:36:3a:59:36:74:9c:db:81:11:c4:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:E9:40:CD:AC:D3:36:B9:4E:DE:A8:88:91:86:82:DE:9E:AA:73
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9a:2a:51:84:af:e3:40:cf:53:44:f4:c3:7f:f0:ad:16:ea:68:
a6:50:00:10:dd:14:ed:42:58:4a:c8:90:57:7c:86:24:7b:3c:
6f:de:9a:99:8a:30:99:f5:a5:ee:27:74:14:bc:02:7a:04:4c:
ad:d4:02:d8:dc:64:97:33:b4:8b:4b:07:90:fd:76:99:7c:76:
57:03:ed:9f:93:7d:0e:bb:ac:d7:80:0f:01:7c:9c:21:c6:0b:
83:34:40:9c:9a:b3:9f:00:d6:3a:02:51:61:ff:41:eb:f1:f8:
4e:a9:35:2c:48:d3:7f:fb:cd:f6:4c:7e:ea:f2:9e:02:66:66:
06:02:a5:96:dc:66:0a:32:fa:48:26:e4:49:86:e8:ef:28:7e:
ca:87:23:ef:9a:7d:e6:9b:bc:6e:7d:d7:32:71:4d:9a:88:26:
cd:73:2a:68:f7:c5:c0:0f:9f:fe:0c:a1:1c:52:77:67:91:b2:
8e:6b:06:38:33:69:70:82:a9:28:69:0b:59:fc:01:e4:c2:a1:
bd:09:94:b3:39:16:7b:a2:79:bd:b4:a2:79:63:a4:e3:0f:13:
28:ae:52:9a:53:77:7d:d2:7a:02:90:76:6c:09:f0:f4:11:4c:
3f:26:e1:ee:60:45:82:64:3e:49:82:fc:a4:eb:42:39:30:44:
0b:1a:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 00:38:22 2023 by rpki-client on console-ams.rpki-client.org