Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
File: 2f7f4c52-3c37-4945-a2de-eb95981a27af.roa (raw, json)
Hash identifier: cKmDpTPb0DM2YPaZxxNPlIyoeqC0PK24dypuJzldivY=
Subject key identifier: 94:E5:3A:7C:75:21:70:69:E0:A7:D2:FD:7F:C6:30:39:DF:C9:82:7D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7136A6336D30A2F8AFBC74ECB3C97D6EA82400AD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 143.65.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:36:a6:33:6d:30:a2:f8:af:bc:74:ec:b3:c9:7d:6e:a8:24:00:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=9515457ee5f536ac168ca69f3316acd39bd229f110f701c6804f2d9c75dc8c83, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:b5:ce:c7:4f:76:6a:c7:46:52:db:a3:b0:
38:96:00:f4:5f:d5:92:ba:e9:19:4a:b3:cc:6c:3c:
0c:05:5d:eb:b6:a7:61:80:1f:1f:cf:57:5c:c7:b4:
20:11:f6:a6:55:d2:10:df:c9:0b:cd:94:c0:cb:05:
89:11:60:18:60:50:fe:b8:6c:1a:57:44:c1:7c:44:
70:0e:9b:37:01:03:1d:2a:2b:c6:ed:67:f4:d1:44:
e8:5c:ec:b5:a0:96:63:df:4d:f0:2b:ef:c3:45:e9:
01:0a:3f:7e:9a:ab:6f:cf:e3:f4:22:82:5e:86:54:
7c:1e:84:c6:7b:a5:cb:4d:b1:68:48:67:97:72:3b:
bd:f0:28:0e:9b:38:58:07:52:61:cc:42:67:7f:06:
a1:95:04:dd:c1:e1:e1:70:e3:e2:0d:12:b9:c9:95:
47:26:c0:05:d0:e2:00:67:3a:64:18:30:13:5a:e4:
35:2f:6f:02:99:26:ac:94:ad:e4:d8:66:49:ab:8b:
da:2d:31:e4:f6:79:2f:60:22:63:aa:2c:12:88:31:
53:14:32:98:1f:e2:0b:1a:56:7c:dd:fc:0c:fb:36:
c4:0b:91:44:36:81:00:30:dc:32:5a:d4:d8:6c:4f:
43:ce:03:3f:46:e1:09:eb:ef:ad:ac:b2:a0:78:e8:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:3A:7C:75:21:70:69:E0:A7:D2:FD:7F:C6:30:39:DF:C9:82:7D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
42:95:bc:7b:32:9f:7f:33:c6:73:57:34:df:aa:37:a9:f2:da:
70:78:a3:67:c8:e7:a9:97:b9:3c:0a:7b:48:45:23:90:63:a5:
7e:8f:4f:40:b6:c8:16:ed:b0:08:a2:7e:61:98:ce:24:f9:b1:
a7:ce:17:e8:54:30:bf:f0:91:bc:58:19:1c:87:2f:df:1f:8e:
fc:08:df:92:16:67:8b:5f:ce:fa:36:5e:d1:c3:0c:0d:3e:b0:
47:d4:9a:2e:41:73:0c:9c:dc:57:9f:e6:5c:5a:66:10:c7:54:
82:09:92:ca:01:be:10:5e:58:7c:9e:35:0c:73:92:ab:48:b7:
2d:2e:a8:d5:c8:8c:32:41:da:af:b6:9b:f9:9a:1d:06:41:a6:
0b:a0:66:09:51:a8:a9:00:fd:93:13:a4:71:ba:76:2b:a3:ff:
64:f8:59:96:f3:58:25:20:5c:92:27:9e:ed:4b:0f:2b:c3:d9:
90:b6:ce:a8:d7:56:46:1f:73:e3:84:70:41:c2:08:9b:7d:83:
85:cb:e8:8c:8b:d8:47:73:79:2f:da:89:20:36:ea:1b:7f:75:
91:9a:01:d1:61:72:2a:b3:de:3c:76:d9:54:b7:45:75:e0:0a:
3a:9d:cf:65:c6:11:09:55:c4:8c:53:ae:37:27:36:59:6e:db:
1f:4e:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:28 2024 by rpki-client on console-ams.rpki-client.org