Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
File: 3071c2a4-bba6-4def-894d-a0bf6a718d91.roa (raw, json)
Hash identifier: eankwxFXT022IRGoGvkIfLHrQlYZvQKGkwZ9NPOi1RI=
Subject key identifier: 2E:F5:63:9E:16:FB:B7:38:D1:6F:A0:36:61:A4:80:8F:AA:04:6F:F7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 75B377B0F8C6CEC19C6919E6F2FC8A9A5280D95C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b3:77:b0:f8:c6:ce:c1:9c:69:19:e6:f2:fc:8a:9a:52:80:d9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=014b5adcd5f94b40825b1dbae7c7a20d435d51b6e0ed617b807e629039447823, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:c2:32:b0:e4:ad:88:dc:d6:61:d4:f4:a6:
60:da:14:a9:f0:1a:ee:ff:2b:1a:f8:a0:1e:33:0a:
f6:a3:b1:69:fd:14:eb:29:cd:33:97:af:a8:b2:10:
75:ce:a1:83:72:29:bd:82:57:bc:66:1d:4b:1b:c1:
c6:69:14:0b:d8:0b:5b:3e:11:9b:e8:e9:b0:32:e8:
16:55:99:a4:0d:90:55:27:98:fe:60:bb:5f:48:5c:
a3:fd:e5:d6:29:d8:e5:84:1f:14:da:81:96:03:a5:
8b:94:73:31:cf:24:f4:8d:e5:c5:78:a2:0e:ee:c1:
db:59:53:e8:52:75:c3:f9:5e:f4:40:82:05:e1:cc:
37:35:a8:5a:25:ec:af:c9:b1:4a:da:52:14:e1:72:
10:98:f6:8f:88:06:06:ed:27:51:46:1e:46:a2:db:
d3:11:1d:ba:64:cb:d2:2c:81:ba:a4:58:83:c2:4d:
25:0d:1e:d7:08:83:a3:73:a1:35:95:be:3a:f9:2d:
2d:aa:60:95:cc:36:ca:4e:f0:28:a0:44:76:d4:7b:
fb:bb:98:eb:4c:38:04:6f:93:22:a6:88:ee:82:db:
8e:01:a3:65:cf:e7:4f:fd:05:32:67:0e:dd:5a:2c:
3a:e2:c6:40:16:46:7c:e3:89:57:97:a0:b1:5a:c7:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F5:63:9E:16:FB:B7:38:D1:6F:A0:36:61:A4:80:8F:AA:04:6F:F7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:39:72:a5:b5:9a:d9:2c:48:27:3f:ac:72:3b:9d:1a:b9:34:
fc:e4:ce:20:49:0e:7f:83:69:83:13:f4:36:ad:94:d0:6d:2d:
a6:f7:00:46:d4:47:b7:80:0f:5d:13:ca:ad:d0:b6:07:86:73:
89:39:61:8a:70:cd:f1:9c:2b:f2:95:e1:8b:f7:d5:0d:1e:92:
f0:0b:9b:22:4c:32:32:d3:d0:58:bf:9c:9a:fc:39:02:e0:44:
d0:71:8e:18:88:34:f1:42:79:71:f4:ee:b5:80:08:3c:40:12:
74:cd:9c:a9:a1:34:f9:69:f6:01:69:de:51:ec:cc:db:8b:8b:
a1:56:5b:1e:ac:d2:64:b7:6c:5b:d4:70:3d:d7:70:28:77:45:
41:48:81:d0:e9:19:32:26:bc:d2:d7:49:68:3b:62:07:a5:8c:
40:c5:c6:8f:ff:d0:9b:59:8f:93:1c:84:ab:05:2c:ca:47:6d:
ef:be:df:b8:97:34:96:df:45:e0:9f:fe:d8:fc:9b:58:19:e0:
58:2c:cc:94:86:68:59:c9:22:59:aa:01:13:dd:86:cc:2e:fb:
d8:ec:e2:60:6a:df:34:aa:24:9a:ce:55:99:51:6c:b0:7a:e4:
71:5b:32:55:42:57:14:c9:d9:1a:5f:80:d7:ea:b3:71:da:59:
71:4d:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:28 2024 by rpki-client on console-ams.rpki-client.org