Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/22e4c463-260d-492f-8eb5-e1e3eda9614c.roa
File: 22e4c463-260d-492f-8eb5-e1e3eda9614c.roa (raw, json)
Hash identifier: a6oupOW+/m8XCOXzmZ7wb4qOMZnBVxWzhq8njzaLeoE=
Subject key identifier: DE:FF:19:E4:A2:D4:59:DB:FB:DD:2E:34:2F:C2:6E:0E:D2:A1:81:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 230802451283698DFCEF8CC8E8B500D547D0D963
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/22e4c463-260d-492f-8eb5-e1e3eda9614c.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:08:02:45:12:83:69:8d:fc:ef:8c:c8:e8:b5:00:d5:47:d0:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=ea5fdd4602651476ba8cf68bacf495a95d3974d9b486fa9bf6c621d5fe5771bf, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:bd:07:c0:d9:a2:d6:88:e0:91:a8:d9:e0:
c5:2d:9d:65:ed:4f:d8:92:83:35:e2:9f:12:0f:11:
53:7a:d7:fc:4e:49:fd:c3:ee:ec:91:19:fb:65:c7:
68:b9:a2:a8:b2:a0:38:41:a2:d9:bd:4a:8a:00:77:
66:18:40:b1:a6:69:4b:be:76:3f:27:cc:20:88:78:
9b:92:7a:7c:13:9e:25:e4:19:24:9d:eb:25:74:03:
16:7e:5f:4d:78:91:e7:28:c4:81:1b:aa:f4:73:e3:
05:f0:dc:cb:92:8e:f7:cf:b8:97:a5:58:00:34:2d:
c3:16:b7:a6:59:08:d6:05:4d:ff:2c:8c:45:a8:a3:
6b:2a:d4:ed:0f:7b:d4:e2:ae:be:db:8d:f8:b3:75:
cf:16:12:c6:ed:16:e5:e0:a6:52:d5:46:37:3b:df:
58:48:82:ee:17:77:cc:1b:32:9f:d6:b9:5e:3e:20:
a8:b8:64:ed:45:3e:64:2f:32:55:8c:e1:ae:5d:b4:
70:0e:56:16:65:0f:69:fe:5b:6c:de:a1:de:95:61:
49:c1:76:be:c7:96:e0:5b:b0:0e:06:3a:2a:51:75:
aa:8b:16:c2:95:5d:e3:f3:53:5a:ea:a0:8e:0d:ec:
cb:d6:96:09:1b:44:d8:2c:e1:0a:cf:36:a7:92:6b:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:19:E4:A2:D4:59:DB:FB:DD:2E:34:2F:C2:6E:0E:D2:A1:81:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/22e4c463-260d-492f-8eb5-e1e3eda9614c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:6f:7e:bb:6a:53:7c:34:7a:0c:d9:17:54:85:90:71:58:03:
97:43:ee:88:55:35:6c:3d:e3:85:56:66:44:b9:61:08:10:c5:
96:99:42:a7:77:95:84:7c:ce:57:97:a5:f1:11:03:61:41:17:
6b:eb:0b:d1:c1:15:53:35:24:3e:39:ec:be:63:be:d8:4f:de:
fc:13:e9:02:10:f9:93:06:35:6f:ac:82:73:02:e2:40:c0:8f:
af:97:c3:0d:da:69:19:3c:58:23:7e:0b:12:84:d8:33:93:4f:
11:f3:21:83:95:42:bf:80:01:56:94:be:95:82:ed:4e:a6:10:
99:95:ec:c4:19:4f:58:19:36:91:bd:d1:96:0e:e6:24:fc:54:
1f:8a:a2:8a:ea:66:00:f7:e9:ed:c2:c2:7b:4d:8a:71:4b:d2:
a5:9a:06:45:a1:4c:57:f3:50:64:04:ad:52:30:f8:7b:05:49:
37:3c:13:4a:88:ef:90:4f:98:0e:28:86:db:b4:a5:3d:5b:de:
3b:4e:55:d4:e6:54:0f:f1:d2:f0:c3:c4:c4:fe:65:27:3e:93:
aa:8a:42:a2:bd:7f:16:97:da:95:e7:2f:68:47:ed:52:5d:5a:
a2:63:37:70:f1:16:35:c4:13:8c:d6:3f:39:d9:4c:2a:61:f5:
ca:7e:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:27 2024 by rpki-client on console-ams.rpki-client.org