Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
File: 2f7f4c52-3c37-4945-a2de-eb95981a27af.roa (raw, json)
Hash identifier: xKo8ZQWu4cWigYGNqU9h30gP8pfaipdnPnOLTnncDiY=
Subject key identifier: 24:44:0A:AC:62:65:A9:9C:D6:67:9B:E7:EF:BC:99:A5:45:E6:6E:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4776C458F977DBAD5D22F0D2B5DDDA31A4F62A27
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
Signing time: Tue 05 Mar 2024 00:00:00 +0000
ROA not before: Tue 05 Mar 2024 00:00:00 +0000
ROA not after: Tue 09 Apr 2024 23:59:59 +0000
asID: 8987
IP address blocks: 143.65.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Mar 2024 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:76:c4:58:f9:77:db:ad:5d:22:f0:d2:b5:dd:da:31:a4:f6:2a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 00:00:00 2024 GMT
Not After : Apr 9 23:59:59 2024 GMT
Subject: serialNumber=60562d08cfe21df6e73068f83b6bdf5655c75dbd48c71a7a5115fc34c38c469b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:9b:38:c5:ca:cb:4e:fd:d2:39:6a:dc:f0:
7d:c1:cd:25:5b:a1:8f:7d:1f:c9:63:a4:ee:1b:4a:
01:ea:58:02:f2:91:88:57:11:29:02:ea:10:00:a1:
24:b9:e9:66:a2:4e:35:8b:45:8e:b3:02:e5:18:4e:
72:5f:f1:26:81:92:14:ef:ca:2c:91:2d:b3:7e:bb:
b3:1b:9d:36:ba:0a:72:ff:07:2e:6b:17:41:0c:4e:
d3:b0:71:3d:b4:b2:3d:a7:ca:04:90:8a:c1:2f:c8:
75:c1:0c:e3:1c:5a:1d:39:78:27:a2:de:ef:2f:b7:
84:3f:66:9a:68:5e:b4:9c:58:db:1d:59:8b:10:d5:
a5:29:0b:51:a8:d5:af:f0:7c:a9:2e:83:e7:85:b7:
31:e1:dd:fb:81:89:56:c1:7d:29:da:99:e0:f7:da:
b1:ef:cb:5f:50:ed:b8:e1:d6:77:8f:2c:8d:95:c4:
8d:29:62:fe:30:3e:d6:42:e5:60:f4:8f:2a:89:40:
3c:a2:42:a2:d6:e3:c2:84:a1:78:d9:4e:4d:80:02:
34:fa:c7:43:9e:e8:aa:f5:f9:84:98:91:4e:76:35:
b7:5d:b3:eb:4d:d7:c1:8f:2f:9d:ae:18:64:98:89:
8c:ea:e4:66:30:a8:cc:fa:71:12:32:3a:35:70:ed:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:0A:AC:62:65:A9:9C:D6:67:9B:E7:EF:BC:99:A5:45:E6:6E:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:91:d0:09:a1:3b:7c:b3:28:ff:6d:13:8f:bf:e7:b6:c0:11:
ce:f5:ff:a5:54:f1:20:dc:c2:55:f5:9c:57:66:c6:29:4f:f1:
07:74:1f:db:22:df:7a:b4:a3:17:24:15:58:d1:9b:10:88:7c:
99:72:9e:0e:04:c3:58:a6:8f:74:bd:27:5a:a7:6e:aa:03:32:
2d:e2:e1:84:a3:4c:c7:b4:24:4e:77:50:48:fe:03:03:0e:78:
cf:b1:8c:7b:65:24:d2:a2:ce:fc:8b:30:a3:ed:f8:92:40:23:
89:ce:31:d4:7b:95:80:2e:da:44:17:a4:e6:42:76:f6:e0:92:
1e:fc:34:55:63:7c:f4:a5:b7:fd:07:91:67:83:6b:cf:8b:eb:
c3:92:c7:ac:8d:10:f8:76:07:15:36:01:61:bd:41:87:95:29:
a4:37:bb:29:ea:e6:44:2d:a2:7d:dd:15:6a:c4:1c:84:7b:5a:
e8:fa:cb:df:94:40:2d:60:47:bd:3b:49:04:c0:ea:bf:b6:f8:
8e:2f:9e:bd:90:73:58:0c:15:53:02:e2:aa:4b:56:c8:31:96:
8e:78:5a:17:b7:54:af:06:f0:1f:e1:06:b7:2d:35:d6:f7:2a:
d3:02:60:aa:dc:0e:61:56:04:34:17:83:19:8f:23:1d:85:37:
14:b8:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:23 2024 by rpki-client on console-fra.rpki-client.org