Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1dfc142f-80a0-4fa9-a586-bd45c77ac34e.roa
File: 1dfc142f-80a0-4fa9-a586-bd45c77ac34e.roa (raw, json)
Hash identifier: N+Z94loRxFftfp/nMQ09iqHeYQukTBpNkknYpw56IY8=
Subject key identifier: A2:92:AF:9F:70:3F:D7:4E:7C:38:A3:8D:C0:3D:C0:4B:23:7D:A0:E0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2B96E3D69E6392AC9ACDAC426EF0D412340D4A7A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1dfc142f-80a0-4fa9-a586-bd45c77ac34e.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1020::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:96:e3:d6:9e:63:92:ac:9a:cd:ac:42:6e:f0:d4:12:34:0d:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=8333b419e468c620e2e1271876fabc5edf6b22994548b26518118b19b1721c1b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:06:4d:b3:d4:5e:5b:40:a1:54:11:88:0d:
91:bc:eb:f9:72:d2:84:c8:8f:d5:97:69:2f:af:d8:
dc:67:0c:3e:7e:b6:33:a9:d4:7b:eb:f3:ae:f8:bd:
fe:b8:e0:77:5a:85:5f:7e:0a:07:29:6b:7b:a4:0a:
23:09:66:1e:f3:e4:45:61:a1:50:c1:21:d5:b5:be:
00:50:1a:cb:28:00:db:1a:94:9e:2b:92:7a:a2:80:
84:a5:3e:1c:cc:29:63:5c:5d:e1:7d:00:25:d6:e4:
29:bd:d3:fc:96:5e:76:36:27:9d:22:62:24:56:d6:
39:28:0b:c1:83:bf:34:06:77:97:db:7b:59:c4:d5:
f4:6b:9c:fc:1b:bc:e0:61:b1:53:24:0c:72:a1:4b:
84:a7:55:4c:0e:c5:c7:bf:a3:10:ba:e0:be:db:95:
1d:21:2b:70:b2:23:28:0c:a3:2a:1e:6c:40:7c:01:
75:99:81:13:4e:e5:b2:51:df:d5:75:e1:b8:38:ee:
3c:a5:0d:bf:f6:77:62:ba:01:9e:44:3f:76:33:33:
4c:86:1e:e8:de:e9:d5:7c:8f:dd:66:bc:ff:fa:56:
e5:29:7a:90:08:03:eb:15:c0:99:59:aa:dc:89:ca:
1a:a3:da:a0:a4:50:66:d7:ff:36:4a:2b:a7:c4:c8:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:AF:9F:70:3F:D7:4E:7C:38:A3:8D:C0:3D:C0:4B:23:7D:A0:E0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1dfc142f-80a0-4fa9-a586-bd45c77ac34e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1020::/43
Signature Algorithm: sha256WithRSAEncryption
98:fa:38:4b:57:ab:8e:ed:5e:ac:87:25:45:ed:8c:76:fe:c3:
9f:a3:77:5e:74:df:05:60:f3:e9:9b:e9:29:c7:87:3c:00:b3:
03:e7:5d:48:8b:6e:d8:97:36:fb:5d:e1:2b:bf:10:64:f7:6b:
45:1c:f4:c0:b0:52:2c:a6:59:db:c5:b0:73:cc:10:b1:4a:23:
27:f5:12:d0:91:92:1f:08:02:b0:56:9f:c3:8c:7c:77:13:00:
76:c6:ad:de:40:3d:ff:d2:ca:d8:c6:b1:89:fb:89:5e:bb:5a:
e0:c4:87:96:fe:5d:84:cd:57:05:38:11:8e:c5:34:01:89:03:
1d:5d:77:aa:aa:16:50:f1:b1:9c:90:f0:16:d5:db:0a:62:49:
d2:09:47:5b:3c:1a:60:16:43:2f:3a:b1:dd:f9:34:32:c9:a8:
1d:df:ef:6e:e2:52:98:63:91:db:97:5e:a5:47:6b:fa:08:7f:
e8:94:fc:0e:2d:d8:b9:e7:0a:95:8e:ff:2a:a1:b5:89:27:58:
12:0f:56:e2:a8:c2:09:03:45:9c:77:10:36:33:f1:03:8c:d2:
40:58:b6:b3:35:2a:64:53:d4:16:54:4a:6c:d4:a0:5f:43:b0:
ea:91:09:23:20:bc:19:96:c4:d8:8d:9e:2b:84:80:a3:9a:c5:
c0:42:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:27 2024 by rpki-client on console-ams.rpki-client.org