Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
File: 1bc4930f-9a4b-43f1-82b8-562990ca472e.roa (raw, json)
Hash identifier: ZgazKZbeuaenrKtKwKpt9r6kvbOmW1egC+V5FMKQ3VM=
Subject key identifier: 8F:E9:39:4D:BD:78:67:FD:5D:08:05:8A:01:57:79:F4:DF:7E:BC:77
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 080B60DD161302AB026D822D8CD7307E148141BB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 200.197.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 18:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0b:60:dd:16:13:02:ab:02:6d:82:2d:8c:d7:30:7e:14:81:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=9f0620fa3aef9d6cfba8f2ce446de1c3f46b1ad92becb1e0d485ebfd13d64681, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:c5:2a:d0:8c:f0:7a:2d:1a:04:73:24:d1:
4d:15:d2:4b:a0:7a:d7:6b:25:57:70:12:05:64:0a:
ae:7f:9e:a3:7e:96:b8:13:c6:70:f7:24:b3:3c:46:
d7:84:5e:e2:04:17:7d:76:3f:63:aa:df:fb:f5:a6:
0b:b5:43:4a:d0:65:42:fd:90:34:8c:67:da:51:30:
7e:02:6b:73:cf:20:5a:5d:aa:59:a7:1b:7c:72:aa:
99:bb:84:bb:08:a5:c2:49:35:7f:d7:42:67:38:da:
d6:0f:1c:89:fd:37:6e:2d:c8:e8:dd:03:99:76:45:
d9:47:61:f7:df:54:ad:be:17:bb:6b:21:a0:10:b9:
ab:b3:c4:6e:c8:c3:b2:31:5e:ae:cb:59:e1:83:4e:
6d:8d:a0:53:db:aa:ae:04:71:52:f4:75:c0:18:60:
b5:1b:a1:6c:c6:cd:1a:f0:74:39:32:3f:2f:88:7e:
9c:54:59:aa:59:3d:5a:c9:02:e6:43:ad:70:f7:32:
f2:82:c6:e2:8a:23:48:03:ff:8b:e6:86:e6:04:06:
1a:85:a5:60:b5:f3:fd:3f:ac:7d:63:49:2a:e6:9e:
5b:b3:98:32:16:a9:40:dc:4f:d1:d8:01:d2:6c:58:
49:c0:16:dc:75:30:81:ff:6d:3c:bf:01:41:40:35:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:39:4D:BD:78:67:FD:5D:08:05:8A:01:57:79:F4:DF:7E:BC:77
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:3f:b6:f5:a3:f8:ed:9b:ef:ec:f8:67:74:1d:ae:20:b5:6e:
0f:30:b2:8d:b0:71:8d:78:06:96:4a:bd:78:6c:ce:7c:1f:5c:
32:61:d9:2e:55:5b:77:27:7c:1a:09:31:0e:ea:7c:e0:b3:08:
fa:dd:a6:ea:04:d9:61:37:f8:4a:ef:2f:33:0f:49:8e:8f:ed:
b7:03:27:09:11:49:ed:0e:c8:cb:86:8b:06:19:93:b0:67:ad:
5a:c3:5d:12:a9:69:fd:8e:fa:63:0b:59:d9:d7:25:26:03:21:
4b:b7:22:c2:ef:3c:a4:2a:36:f6:81:ba:bb:aa:2a:22:d9:bf:
6a:5d:b4:6a:61:35:9b:df:cc:b5:ca:18:76:ba:5f:17:40:66:
e8:97:38:48:88:77:56:fe:ea:56:76:7f:76:ca:30:02:14:e3:
b5:c2:fe:84:4d:f8:ed:d3:63:f3:e2:48:d2:46:f9:4a:d0:77:
7b:b3:bc:49:a4:d9:b5:73:38:df:65:51:5c:41:1f:19:ac:db:
b6:52:c7:e7:d0:4d:84:f6:fa:da:64:d5:18:ea:5c:72:ee:84:
10:45:1a:93:6e:0d:9f:8d:5a:36:06:c2:b1:f6:c6:3b:43:f0:
9c:7b:bb:77:b9:9b:07:ab:74:b4:39:2b:a4:c6:a5:b5:33:12:
f3:1b:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:29 2024 by rpki-client on console-fra.rpki-client.org