Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
File: 1bc4930f-9a4b-43f1-82b8-562990ca472e.roa (raw, json)
Hash identifier: dmG1Xr6gWdcs2vqg+7rS+bEtir9c+c3/QTygI+Nst2c=
Subject key identifier: E5:37:77:5A:B1:1A:9F:C2:E8:B0:35:3F:78:3C:34:8F:0A:8C:A7:B4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5BA7FF58476A5FCCFBE2EDDAEC0E7BE6F32C7C4C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 200.197.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a7:ff:58:47:6a:5f:cc:fb:e2:ed:da:ec:0e:7b:e6:f3:2c:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=9727ecfa95fce50bd79678a866af54117858f3e90dabccfe7c9490d00eb843b5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:1c:ea:83:0b:4c:27:13:68:28:73:8a:2c:
d1:d1:89:8a:27:2d:41:de:2b:1e:22:15:88:3e:19:
bb:53:4c:c1:69:f7:b2:0c:31:b9:63:6d:e6:7e:84:
8e:0b:25:40:12:c1:fe:cc:90:34:ef:44:96:98:09:
81:a0:cf:43:62:20:52:26:2d:86:06:51:59:9d:65:
b3:a0:c3:24:aa:37:28:cf:01:d6:1f:63:f9:e1:59:
8e:2d:28:7d:7e:81:ec:05:3c:f3:66:49:1a:03:69:
72:1f:16:0a:82:8f:4d:88:dd:26:3c:5c:e0:0d:cd:
92:85:f3:4c:74:37:bd:9d:2e:99:f5:05:b9:80:47:
6a:1d:a7:a2:fb:64:eb:d4:77:2b:ec:c0:c3:e0:37:
c1:59:3c:67:0f:2a:23:d1:2d:c7:18:e4:c0:eb:ef:
17:d0:42:97:fb:44:11:83:e1:d2:5b:b1:56:83:c0:
13:eb:ca:ca:70:92:08:23:13:6d:e9:29:5f:5b:b7:
a0:ec:f6:48:c4:cc:5b:27:05:f6:de:f2:e2:30:c6:
3e:99:c3:1c:38:5e:41:69:c3:c6:5d:1a:5b:fc:6e:
49:8c:7b:cb:11:99:b2:17:bb:d0:70:7a:f4:f2:4f:
cf:71:a3:5f:0f:5c:84:5d:f9:20:bb:42:c6:61:a5:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:77:5A:B1:1A:9F:C2:E8:B0:35:3F:78:3C:34:8F:0A:8C:A7:B4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:06:46:48:e0:7d:78:e3:1e:3a:94:51:35:f9:ed:3a:bb:dd:
36:5e:6f:0a:29:6c:40:09:75:d8:a7:52:8c:71:73:02:3a:5a:
4d:c8:b9:6c:b6:09:21:d8:ea:a3:7f:91:de:20:e2:15:da:12:
e4:2d:b0:71:8c:9f:e6:6d:c0:c2:4a:bf:63:87:45:8c:e5:0d:
10:51:92:7b:f0:4b:1f:62:20:51:28:79:d7:64:47:93:07:0c:
9d:d0:7d:77:e1:ad:3a:e4:da:97:59:cc:a9:66:65:f9:2a:bb:
03:34:01:c8:60:69:41:9a:63:e7:13:af:5f:e1:6e:14:c8:af:
00:f6:57:0e:33:06:2f:51:3c:b0:1b:fb:2b:97:c2:46:28:1e:
82:9f:5c:8f:20:45:ae:80:af:55:4c:32:67:e7:3f:76:60:c7:
23:66:73:3c:82:e1:9e:59:dd:d0:b6:17:22:75:8f:6f:b2:5a:
f6:0e:b6:a7:3d:29:98:aa:6b:e0:9b:9f:7e:eb:ec:2e:cb:18:
bb:ca:85:8f:7e:e8:5b:c4:2c:31:8f:8c:d4:cf:6a:b5:82:e5:
58:f2:02:a0:f5:98:28:bf:48:45:8f:41:e0:cb:f7:fd:91:d7:
63:cf:7c:24:ab:43:95:9e:28:92:80:f6:e4:7a:a2:d1:3a:f0:
2c:31:13:f0
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUW6f/WEdqX8z74u3a7A575vMsfEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTgwMDAwMDBaFw0yNDEyMjMyMzU5NTlaMHoxSTBHBgNV
BAUTQDk3MjdlY2ZhOTVmY2U1MGJkNzk2NzhhODY2YWY1NDExNzg1OGYzZTkwZGFi
Y2NmZTdjOTQ5MGQwMGViODQzYjUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIimHOqDC0wnE2goc4os0dGJiictQd4rHiIViD4Zu1NMwWn3sgwxuWNt5n6E
jgslQBLB/syQNO9ElpgJgaDPQ2IgUiYthgZRWZ1ls6DDJKo3KM8B1h9j+eFZji0o
fX6B7AU882ZJGgNpch8WCoKPTYjdJjxc4A3NkoXzTHQ3vZ0umfUFuYBHah2novtk
69R3K+zAw+A3wVk8Zw8qI9EtxxjkwOvvF9BCl/tEEYPh0luxVoPAE+vKynCSCCMT
bekpX1u3oOz2SMTMWycF9t7y4jDGPpnDHDheQWnDxl0aW/xuSYx7yxGZshe70HB6
9PJPz3GjXw9chF35ILtCxmGlXfsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTlN3da
sRqfwuiwNT94PDSPCoyntDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MWJjNDkzMGYtOWE0Yi00M2YxLTgyYjgtNTYyOTkwY2E0NzJlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMjFMA0G
CSqGSIb3DQEBCwUAA4IBAQCdBkZI4H144x46lFE1+e06u902Xm8KKWxACXXYp1KM
cXMCOlpNyLlstgkh2Oqjf5HeIOIV2hLkLbBxjJ/mbcDCSr9jh0WM5Q0QUZJ78Esf
YiBRKHnXZEeTBwyd0H134a065NqXWcypZmX5KrsDNAHIYGlBmmPnE69f4W4UyK8A
9lcOMwYvUTywG/srl8JGKB6Cn1yPIEWugK9VTDJn5z92YMcjZnM8guGeWd3Qthci
dY9vslr2DranPSmYqmvgm59+6+wuyxi7yoWPfuhbxCwxj4zUz2q1guVY8gKg9Zgo
v0hFj0Hgy/f9kddjz3wkq0OVniiSgPbkeqLROvAsMRPw
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:28 2024 by rpki-client on console-fra.rpki-client.org