Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
File: 3071c2a4-bba6-4def-894d-a0bf6a718d91.roa (raw, json)
Hash identifier: pFl4WEdI4hA+xuJkr29dFeSKBf28RG2JT1+1ois1Zs0=
Subject key identifier: 49:AB:BF:14:A6:66:6C:DD:52:AA:23:90:87:0A:23:03:45:9F:1E:62
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0FB55E841DE2FE3795EC15D22DFE6A0CEE77E638
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
Signing time: Sat 20 Apr 2024 00:00:00 +0000
ROA not before: Sat 20 Apr 2024 00:00:00 +0000
ROA not after: Sat 25 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 18:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b5:5e:84:1d:e2:fe:37:95:ec:15:d2:2d:fe:6a:0c:ee:77:e6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 20 00:00:00 2024 GMT
Not After : May 25 23:59:59 2024 GMT
Subject: serialNumber=8f78c195270150ec654442d353d3122f3ecf006956233b744e1109901755c56c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:e8:ce:9c:51:59:0f:72:09:6c:da:32:20:
ca:d6:3f:0d:cf:bb:64:8f:95:e6:11:d9:70:e7:2d:
fd:3c:45:4e:d3:30:f4:75:70:37:e2:e5:75:06:ce:
24:ea:52:40:c0:69:14:a8:2e:3b:30:5c:26:63:64:
58:22:09:bc:75:ee:4a:8b:1b:af:dc:91:27:22:68:
ef:ef:89:61:cd:86:eb:6b:d3:13:17:70:c4:60:1f:
3d:fb:fc:7f:a8:7d:4a:cd:40:78:69:45:3d:04:ac:
85:ba:b1:67:c8:6c:62:dc:c5:ec:56:7b:6c:4d:f3:
a6:09:7b:12:93:83:90:ec:88:db:37:84:01:a3:36:
c6:15:ca:0a:8e:e0:38:71:c7:71:65:63:ae:97:2a:
21:fe:93:72:6a:a1:3b:62:4c:8e:88:51:59:f6:fb:
f7:9d:e8:87:c2:ef:5c:36:fe:3e:75:e4:d8:98:8a:
27:1c:f7:79:d1:f7:e9:51:66:9d:69:09:56:83:78:
d0:dc:d7:39:bd:a5:72:0e:e3:89:43:6d:f0:5b:34:
84:e4:17:df:8d:3f:c9:9c:f0:09:c1:3a:54:76:eb:
c0:b6:82:d7:11:29:8c:9f:c3:0b:99:c8:ec:ff:23:
01:e2:da:f4:24:42:f4:f6:22:43:98:4f:14:15:e4:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:BF:14:A6:66:6C:DD:52:AA:23:90:87:0A:23:03:45:9F:1E:62
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:bd:4d:b3:82:ec:e0:2b:ce:a5:b7:f6:0e:b6:d5:f5:0c:d0:
0c:4c:b5:f7:ae:66:ee:e0:df:c7:84:10:b2:49:3b:02:82:bf:
64:3b:29:f8:0e:81:70:6a:6a:d4:62:a2:f7:47:57:fb:f8:ae:
b1:cf:34:b8:b8:ad:cb:77:53:a3:49:f8:53:cf:ca:f7:bb:34:
e0:79:33:1a:13:cc:37:f2:62:17:c1:23:a1:0e:83:36:ec:d8:
bb:95:6f:2d:e9:1a:e9:e3:8f:02:aa:31:6c:98:00:b8:fd:fd:
54:fb:6b:a3:14:f2:97:a7:42:66:fd:30:84:99:b8:ec:6b:c0:
e8:53:99:b6:0f:96:18:51:96:9e:62:66:2a:d6:b5:41:ed:3f:
43:c0:46:3b:0c:23:02:9d:fa:b7:be:86:ce:03:e5:f7:19:75:
ac:6f:3e:b4:76:38:dc:f2:79:77:54:0a:39:c7:fe:2f:38:93:
e5:7c:5e:db:5d:ee:d2:39:a7:44:8c:cf:0b:54:7b:05:d3:83:
8e:62:b2:79:1d:4a:18:12:4b:f2:0e:4d:f0:ea:9d:f3:1a:a9:
a2:3f:89:82:8b:b3:6a:08:95:14:eb:f6:62:0a:d1:2e:76:b9:
c9:50:3a:36:4e:be:f8:a7:75:41:4e:40:3a:28:bc:ab:1b:61:
72:5b:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:29 2024 by rpki-client on console-fra.rpki-client.org