Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29c1ffc0-3f01-4867-a937-39ae790437d4.roa
File: 29c1ffc0-3f01-4867-a937-39ae790437d4.roa (raw, json)
Hash identifier: Iib7CcJMJlKltexs5UF3kZ61rircrk1o8LDpM4xiU+A=
Subject key identifier: 65:80:E7:11:C0:B3:2E:A6:58:D0:DD:78:96:9D:35:71:67:50:CC:A6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 571F53059B69D04A6CEEE3BAB917FB64D0EE45DE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29c1ffc0-3f01-4867-a937-39ae790437d4.roa
Signing time: Tue 16 Apr 2024 00:00:00 +0000
ROA not before: Tue 16 Apr 2024 00:00:00 +0000
ROA not after: Tue 21 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 83.118.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 19:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1f:53:05:9b:69:d0:4a:6c:ee:e3:ba:b9:17:fb:64:d0:ee:45:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 16 00:00:00 2024 GMT
Not After : May 21 23:59:59 2024 GMT
Subject: serialNumber=6dc12d78357f26b402a28f0a72581833724f6ad9627f97966bed68bea40093fc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:27:45:c6:03:f1:2f:9a:c1:7b:39:78:09:
d5:23:4e:8e:05:35:87:22:91:26:c8:93:4f:60:ae:
cd:e0:b6:63:e3:90:fb:f7:e8:c4:ae:32:fd:2e:fd:
40:2c:52:b3:6a:bd:a6:ec:04:50:c6:46:5b:f6:76:
57:c7:93:b2:1c:c1:9d:19:85:3c:9d:e6:d3:5a:d4:
8a:c5:68:eb:ab:f6:37:b1:d0:ef:cb:3f:33:07:50:
b6:49:5c:c5:84:4a:54:35:6e:7d:80:35:35:5e:42:
4a:3d:a6:65:29:05:9f:f9:53:38:aa:33:43:ef:ec:
bf:db:9c:e7:75:cb:7a:45:1a:33:d9:cf:60:db:fd:
a5:e9:0e:d0:8b:c2:3c:d5:a0:52:30:a9:aa:36:f5:
c7:c6:3d:d4:9b:5b:d5:9e:db:eb:b0:68:e1:6b:dd:
5e:6b:2b:b0:83:4e:7a:e6:85:45:b8:67:e5:56:46:
92:36:89:64:1c:a0:46:d7:0a:2c:fa:54:c3:70:37:
d3:a7:4a:5a:5b:93:32:94:b0:e7:03:9f:74:51:f6:
54:01:de:24:db:bc:d5:5b:7b:cc:3c:41:38:49:bb:
0a:cf:05:dd:89:95:cd:09:cb:1e:1a:8d:bc:96:f2:
47:28:53:23:4a:02:5c:ba:fd:d5:ef:f7:16:2d:cf:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:E7:11:C0:B3:2E:A6:58:D0:DD:78:96:9D:35:71:67:50:CC:A6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29c1ffc0-3f01-4867-a937-39ae790437d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.240.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:59:80:3c:f7:86:0b:1d:f7:48:fe:80:e1:de:11:2e:3c:4a:
c1:50:2c:30:5c:e3:8b:3f:a9:98:bd:3f:28:19:ed:d7:fb:55:
ed:be:43:8d:84:b8:61:e9:83:36:d5:1f:b3:a1:8a:d5:7d:12:
b8:b2:c6:e4:9d:91:cf:78:4e:c5:f1:af:83:57:e4:51:b2:53:
65:ac:24:d3:2e:7e:93:12:8e:91:4d:f2:02:4c:1d:d8:53:f1:
d3:7b:dc:ec:4e:52:60:1a:f9:b0:13:b0:34:32:b9:5d:92:98:
3e:6b:ec:4f:e3:42:7e:5e:44:2f:2c:56:de:13:5d:e5:9f:96:
32:d1:ee:f5:0a:3b:a4:ae:b8:65:f8:8c:9a:de:0c:0a:43:1f:
26:8e:13:fb:fb:1b:b8:f6:e6:84:80:99:c5:68:c7:d8:f0:74:
d0:1c:c6:64:96:0a:f0:6c:8d:3b:48:46:85:4d:78:69:5e:33:
d1:f5:47:33:c2:41:ed:f6:03:9d:2d:5c:ec:de:47:32:5b:08:
c3:63:1a:46:3d:52:38:7c:1a:97:5d:f8:aa:a9:2b:bc:3a:a3:
91:fa:00:3c:7e:1f:ec:d6:bf:be:a1:6c:74:70:68:9b:41:25:
f7:79:bb:0a:dd:46:a7:67:62:83:e9:96:92:a0:a9:af:9a:b9:
1a:00:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 01:02:48 2024 by rpki-client on console-fra.rpki-client.org