Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
File: 2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa (raw, json)
Hash identifier: oaKZ/VIh2Bhul3vN2igcvwbAlEeUsUDkp3MD3FjT2nA=
Subject key identifier: 7D:D8:F4:FD:27:D7:DE:69:29:84:7D:A2:EA:D7:B4:0A:C3:97:6F:D3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 34580438D3FAA44C6CBA0DAF70EEC99AD6B803E3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:58:04:38:d3:fa:a4:4c:6c:ba:0d:af:70:ee:c9:9a:d6:b8:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=25f4849b6d797119bf3648abaeba19cec45170252c7ec8521b9d2bbd2e913543, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:28:e8:fc:84:e0:9b:63:71:ab:fc:1b:e4:
10:f2:43:64:4d:6e:c2:a3:2f:d3:cc:c4:16:6a:25:
87:74:bd:f6:a7:f7:f3:75:ea:a1:de:77:00:f8:2b:
e0:ce:c1:01:34:35:85:39:e8:10:25:89:39:44:97:
27:7d:97:ca:65:96:7d:ef:0e:ee:71:e8:ec:ef:f1:
f4:3b:e1:8f:ce:3f:0c:bd:97:45:0e:49:95:8b:4b:
1e:67:df:91:0b:02:c8:ea:71:28:3a:b6:b8:88:65:
86:64:98:e5:44:9b:ca:59:b8:b1:31:25:f4:ff:50:
dd:c1:82:a7:af:99:8c:52:f4:86:cd:a6:d0:35:c4:
41:da:61:4a:e5:45:89:04:d8:ab:99:66:d2:33:f9:
29:1e:26:9e:1b:01:93:a7:c6:7d:c5:d4:4e:1d:d0:
10:cb:98:37:b4:f0:ef:3e:76:a3:df:69:6d:b7:93:
95:41:e7:42:1d:4d:de:1e:19:c8:4f:63:c8:54:3e:
58:c9:e2:87:2e:c4:7a:a7:2a:3b:6e:00:02:de:45:
bd:b3:71:79:1f:29:23:52:5c:82:1c:05:8e:46:d2:
17:73:4f:ec:01:31:d7:55:d4:48:48:fa:13:2a:10:
e4:f0:a3:ac:e9:34:ab:5d:5e:1e:78:79:01:25:84:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:F4:FD:27:D7:DE:69:29:84:7D:A2:EA:D7:B4:0A:C3:97:6F:D3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
26:e4:7d:ae:b9:a4:e4:e2:16:34:04:8f:83:5d:7d:7b:6c:02:
e8:1b:93:0b:7c:8c:d9:9b:49:99:fc:91:4c:28:54:be:f8:15:
fc:14:98:d1:98:10:e0:16:48:41:9e:52:4d:dc:5f:3e:ca:6e:
5a:7c:98:2e:01:d6:d3:08:e1:bc:52:57:96:cd:40:44:01:6d:
8f:0e:c1:5d:38:08:dd:8a:21:10:b1:19:9f:25:e7:19:ea:c2:
c8:75:51:f8:ef:72:fa:0c:d5:d5:3a:cd:14:3d:4b:1a:4b:83:
5a:6c:99:ad:67:16:f4:c2:8b:78:fe:69:ea:02:22:d7:09:fe:
eb:b2:f1:aa:33:ad:1b:43:16:fc:d6:9f:8b:54:80:72:39:e8:
c6:7c:93:90:e2:17:1c:0e:c3:1d:26:ee:a7:2f:99:10:d0:11:
16:47:de:9a:22:d6:52:fe:91:83:a2:2a:7e:82:b9:64:6c:80:
38:5d:64:b4:5f:61:d7:e4:90:95:e2:3b:c5:e6:f9:36:d5:f7:
4d:f4:b2:30:9f:fe:1b:f5:fd:2f:98:4c:26:3b:4a:32:84:09:
2f:a2:c7:8f:9f:eb:72:9d:9d:02:d0:ca:c3:d5:d5:c4:6d:bd:
5a:a7:1d:fc:ce:2a:6f:ea:00:2e:b2:af:8d:56:a3:f3:9e:8f:
65:ff:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:28 2024 by rpki-client on console-fra.rpki-client.org