Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29137037-201e-4aac-bd8f-5d80d0cbcb96.roa
File: 29137037-201e-4aac-bd8f-5d80d0cbcb96.roa (raw, json)
Hash identifier: KBVhDEwTxk0RUmdOPwdCVe2GYe+0gKclsIro86or8tY=
Subject key identifier: 67:83:69:BB:4C:BC:1E:B6:BC:F2:29:33:4F:54:2B:DB:20:42:FE:21
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 528D8353BEBE20DB954902B6F68B88D5834B78FC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29137037-201e-4aac-bd8f-5d80d0cbcb96.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8d:83:53:be:be:20:db:95:49:02:b6:f6:8b:88:d5:83:4b:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=0a0a026091f5ae2216a00b92ecac86741c237cd15980e1d098c694df9996e4a0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:4a:81:34:19:9d:65:00:53:4f:b3:5c:a9:
96:31:c9:6d:66:76:22:51:5d:46:53:89:62:38:77:
4b:81:ac:1e:1a:a7:8e:0a:fa:6f:5b:59:b7:04:cf:
2f:a7:c5:b6:72:98:e0:08:6d:8f:74:6a:e7:b8:aa:
4c:d4:3d:b4:3b:e9:16:6c:96:a5:42:6b:f9:9f:32:
04:6c:b9:71:09:13:31:69:f7:9f:21:f6:77:58:1c:
07:9e:a6:8c:40:27:dc:f9:18:a7:2f:43:34:92:7d:
d4:86:b4:df:24:a0:e9:d2:df:7f:9e:80:97:be:5a:
cb:1f:6a:fc:d6:cd:fe:90:1a:0f:fc:8a:6c:73:6b:
e3:bf:dc:bd:34:28:47:49:0f:13:54:19:9f:5c:f8:
1e:83:d4:14:1f:36:e7:38:9a:0c:c0:04:25:a7:8e:
ba:b0:6a:e5:f7:be:ae:0c:bb:89:b7:82:81:2f:ce:
20:65:95:f9:54:02:86:6c:25:1e:fe:57:15:dd:f4:
78:77:56:31:1c:a7:c1:17:5a:ed:b9:77:59:be:a0:
27:ab:b0:ac:e3:95:74:dc:e2:67:f0:82:49:b6:fb:
23:84:68:7f:89:a7:e1:ff:87:c5:93:13:e8:1a:ff:
f1:ef:bf:d5:37:25:93:52:a1:ad:bd:d4:a1:6c:a4:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:69:BB:4C:BC:1E:B6:BC:F2:29:33:4F:54:2B:DB:20:42:FE:21
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29137037-201e-4aac-bd8f-5d80d0cbcb96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1100::/40
Signature Algorithm: sha256WithRSAEncryption
2d:76:81:8b:ac:d4:3b:eb:20:f6:cd:a9:2f:34:0d:c6:20:e9:
e3:5d:93:82:59:d5:42:87:75:ab:de:a5:d3:b5:1d:77:0d:ff:
2c:8e:ba:d2:f8:23:42:5a:cb:c6:c1:5e:f0:ab:9b:b1:29:4e:
3d:fc:10:8d:b3:14:58:4d:33:91:45:ab:ba:e8:9c:35:69:fa:
4a:d4:b4:48:73:0b:27:fc:fa:49:10:cb:d5:f1:44:69:8f:ce:
86:27:72:61:95:2b:a9:58:86:7d:0a:35:ea:55:60:ec:af:51:
2f:67:27:12:02:c4:61:25:20:e0:d1:c4:d6:73:38:f3:f6:79:
93:36:7b:ba:46:a2:2e:60:11:a4:38:6c:df:21:56:6a:fe:6a:
45:42:6a:4e:7d:64:73:b3:e2:c3:62:f8:57:e2:79:3d:ec:d3:
f5:a9:c2:dd:0e:48:95:52:62:c2:ff:d3:08:0c:6d:5d:65:b3:
83:d4:08:9b:3f:a1:a9:3b:7e:33:40:fe:bc:97:30:6a:66:6e:
3e:f8:7b:3e:42:9c:57:c5:50:2c:2c:03:07:f4:3a:28:01:fb:
00:60:01:cf:22:2f:67:8a:3f:00:99:74:b5:b7:f6:e0:98:7a:
f0:3a:a2:eb:44:f6:47:9f:f4:67:a6:7d:c2:ff:ec:17:13:c9:
8a:0c:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:25 2024 by rpki-client on console-ams.rpki-client.org