Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29c1ffc0-3f01-4867-a937-39ae790437d4.roa
File: 29c1ffc0-3f01-4867-a937-39ae790437d4.roa (raw, json)
Hash identifier: 3cQ01wRSeUkIYyuEVew/l09xbd7SNYg1K3PI39A8p40=
Subject key identifier: B9:F9:DD:57:2E:7A:23:AA:AC:F2:C3:AE:0F:96:05:E7:F9:B1:9F:CE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 19808FBB6F99F3BACABBCD1F208B111F14385626
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29c1ffc0-3f01-4867-a937-39ae790437d4.roa
Signing time: Mon 04 Nov 2024 00:00:00 +0000
ROA not before: Mon 04 Nov 2024 00:00:00 +0000
ROA not after: Mon 09 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 83.118.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:80:8f:bb:6f:99:f3:ba:ca:bb:cd:1f:20:8b:11:1f:14:38:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 4 00:00:00 2024 GMT
Not After : Dec 9 23:59:59 2024 GMT
Subject: serialNumber=ba913d65f4145f3740fe638805eacf4ba151c8a26ccd95dfde3bea965747717d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:1c:bb:d8:dc:12:40:e7:f9:77:e9:e7:d6:
bf:ee:68:e5:55:68:80:dc:8f:1f:80:b7:0d:74:83:
46:33:0d:c1:14:26:65:6f:36:d0:d0:df:54:fb:28:
7e:20:0b:51:91:35:97:3f:31:8a:b7:0d:d6:f2:00:
5f:e2:f0:f1:6e:f6:19:cc:65:f1:a6:d2:ee:36:10:
90:9f:ad:80:89:26:48:dc:53:9c:f7:7c:47:bf:41:
44:5b:85:9e:6b:83:c1:9a:1e:52:74:d7:c6:c3:4c:
0a:10:2d:96:7e:f5:ad:c2:e5:3e:f7:22:18:6f:40:
f4:c7:26:84:13:8c:15:3f:bf:1f:75:5c:28:f0:62:
ad:0e:5b:f1:c1:e9:0a:b1:3e:b0:03:e4:e0:b7:f6:
23:61:93:96:54:6f:64:41:79:6a:3d:22:3f:e4:ac:
4a:cc:ec:ec:cb:07:02:1e:be:d2:bc:b0:5d:17:34:
71:1e:7b:12:7f:60:f0:86:7b:6c:42:50:ab:ae:bc:
5b:02:05:e9:81:d9:16:c1:0e:63:f7:5e:88:5e:7d:
53:65:e6:71:2b:2a:a2:9d:d5:a3:7b:df:97:18:48:
2e:d2:43:53:c6:4c:62:1b:56:ca:6c:5f:50:a5:f9:
14:e2:74:33:8f:97:93:a3:e4:92:65:3d:71:d1:3c:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:DD:57:2E:7A:23:AA:AC:F2:C3:AE:0F:96:05:E7:F9:B1:9F:CE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29c1ffc0-3f01-4867-a937-39ae790437d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.240.0/21
Signature Algorithm: sha256WithRSAEncryption
24:ee:19:bd:9a:aa:e4:56:13:5e:66:cd:28:3b:40:04:c7:ec:
f8:8c:fa:2d:c2:82:05:e5:56:d6:1b:b3:a7:64:68:65:d3:7b:
c3:18:d3:cd:9a:dd:be:d9:23:6a:43:6a:91:79:19:b7:1e:ad:
ed:bc:2b:94:d6:12:8b:b3:27:9b:70:93:aa:31:19:ae:75:11:
b0:dc:9c:c0:ed:c3:2b:c9:8b:f7:32:98:55:a9:ce:a9:8a:eb:
f1:5a:4a:dc:3a:36:f4:b3:57:cf:31:e7:19:75:ef:79:32:b1:
36:fb:8d:70:df:92:20:11:7a:ae:68:ae:04:59:3d:55:8d:a9:
a8:64:6e:8c:9d:12:21:46:6a:22:ad:84:59:f3:d2:70:45:37:
88:63:64:50:8f:4d:b8:04:03:b0:c1:1d:43:c3:a9:24:22:7b:
f4:94:bd:98:3b:ea:95:7d:19:c6:bf:b1:25:59:d5:7b:90:22:
ff:61:a6:55:db:d9:04:70:86:79:69:dc:14:ed:34:75:95:ff:
c5:ca:8f:95:af:9f:68:43:fb:0e:3e:c9:d2:4a:e1:1b:0b:7c:
85:f5:da:b0:e2:d6:92:44:3c:53:49:5f:e9:c4:b4:22:36:20:
c2:61:94:3d:3b:eb:21:33:04:ba:7b:bb:5e:8c:08:d3:c7:4c:
c0:2a:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:49 2024 by rpki-client on console-ams.rpki-client.org