Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
File: 37cafa51-a122-4dc3-9462-83922f031bb7.roa (raw, json)
Hash identifier: pZ+EP6TOVKYF/INElSYOthPL0HP26SjAAOi/NTymtTE=
Subject key identifier: 23:04:E9:8E:F9:1F:91:AA:1C:2D:63:89:0C:0C:41:00:E6:65:44:A6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 291E8F0400854DCAC9FAB528EFF263D5C4C55460
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1e:8f:04:00:85:4d:ca:c9:fa:b5:28:ef:f2:63:d5:c4:c5:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=813febf32451bb62531e8074e4c77455bc5de0ede4ddc984dbc8321cc40ade0b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:0b:f4:3c:3f:ba:70:80:20:9f:23:8b:06:
94:1f:42:ba:30:38:fd:ad:97:2b:83:c7:e4:49:ff:
a4:31:f6:2b:cd:e7:39:68:d0:c8:0e:44:d6:dc:89:
fe:4c:51:aa:54:eb:fa:61:b9:ce:dd:02:c6:40:7b:
84:2a:0d:7a:66:e4:69:d0:7f:b4:75:99:02:0f:e3:
5a:9e:7b:2a:8c:33:1e:54:a1:1b:11:bd:90:f5:de:
cb:5a:49:bd:25:5b:29:3b:73:2f:cb:82:f4:a8:6a:
cf:08:4a:56:73:41:12:d0:c7:65:fc:b2:d4:67:86:
d3:b4:31:41:3d:51:87:63:df:57:1b:1d:fd:67:fc:
78:8b:e5:43:91:1c:4f:22:4c:4a:f6:f8:9c:a7:a4:
68:9c:46:13:27:80:32:ec:df:ed:0f:25:13:53:7b:
0b:b8:2d:7a:a6:62:1c:94:b5:8d:f9:39:45:60:0a:
e0:22:69:d7:e1:a9:19:60:33:54:57:df:4e:61:05:
dc:c7:4e:f0:fe:46:b1:0e:1e:ee:04:6e:76:28:85:
73:a4:86:cc:05:4b:5a:67:41:f8:c4:6d:b8:17:ba:
f5:91:21:cb:36:e6:00:ef:05:25:95:29:ad:56:c5:
9f:fb:6d:1f:78:ac:38:31:c5:65:b8:b1:8b:3e:69:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:E9:8E:F9:1F:91:AA:1C:2D:63:89:0C:0C:41:00:E6:65:44:A6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:7f:6e:f5:83:f4:9c:f8:54:dd:38:49:74:e1:b6:de:e9:8a:
b3:10:fc:13:b9:30:95:51:00:6b:5a:4f:ac:d3:41:73:a9:a1:
7c:32:17:1d:01:b3:fc:c9:19:48:cf:00:c2:15:f6:95:8d:7f:
12:dd:e5:83:4f:6c:a2:f3:c3:1b:ef:3c:06:f6:6e:8f:ba:53:
62:5e:c6:da:20:ce:08:3b:cc:5a:7f:60:70:51:6d:f7:e1:2f:
1c:21:d2:cf:d4:05:a4:fb:28:81:29:16:46:07:71:c9:50:13:
9d:83:48:fb:1d:48:61:cc:0c:77:1c:4d:0d:1d:3a:66:ca:04:
8e:91:aa:71:b1:6d:0e:99:17:8d:75:51:1a:fc:60:e5:7a:85:
30:4c:06:21:d3:60:f3:b8:51:3f:6d:c2:3d:02:f7:9e:25:67:
04:f4:2f:ab:2b:51:91:fa:ed:ba:c7:e0:51:e1:4b:c8:1c:7f:
a0:f6:6e:67:3b:ba:40:fe:b8:77:a5:bd:4a:6e:19:ee:57:be:
fb:f3:98:4d:4f:b9:68:74:61:f3:04:63:4d:9b:50:82:c4:21:
0f:bf:32:bd:c7:4c:a9:4d:0d:1d:68:d9:c8:eb:2e:8d:52:c8:
93:9b:78:ed:f7:4a:78:d4:a6:bf:c1:fc:9e:31:4b:46:36:0c:
b5:f7:4e:c8
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUKR6PBACFTcrJ+rUo7/Jj1cTFVGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTgwMDAwMDBaFw0yNDEyMjMyMzU5NTlaMHoxSTBHBgNV
BAUTQDgxM2ZlYmYzMjQ1MWJiNjI1MzFlODA3NGU0Yzc3NDU1YmM1ZGUwZWRlNGRk
Yzk4NGRiYzgzMjFjYzQwYWRlMGIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbUC/Q8P7pwgCCfI4sGlB9CujA4/a2XK4PH5En/pDH2K83nOWjQyA5E1tyJ
/kxRqlTr+mG5zt0CxkB7hCoNembkadB/tHWZAg/jWp57KowzHlShGxG9kPXey1pJ
vSVbKTtzL8uC9KhqzwhKVnNBEtDHZfyy1GeG07QxQT1Rh2PfVxsd/Wf8eIvlQ5Ec
TyJMSvb4nKekaJxGEyeAMuzf7Q8lE1N7C7gteqZiHJS1jfk5RWAK4CJp1+GpGWAz
VFffTmEF3MdO8P5GsQ4e7gRudiiFc6SGzAVLWmdB+MRtuBe69ZEhyzbmAO8FJZUp
rVbFn/ttH3isODHFZbixiz5pzl0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQjBOmO
+R+RqhwtY4kMDEEA5mVEpjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzdjYWZhNTEtYTEyMi00ZGMzLTk0NjItODM5MjJmMDMxYmI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJ/0MA0G
CSqGSIb3DQEBCwUAA4IBAQAOf271g/Sc+FTdOEl04bbe6YqzEPwTuTCVUQBrWk+s
00FzqaF8MhcdAbP8yRlIzwDCFfaVjX8S3eWDT2yi88Mb7zwG9m6PulNiXsbaIM4I
O8xaf2BwUW334S8cIdLP1AWk+yiBKRZGB3HJUBOdg0j7HUhhzAx3HE0NHTpmygSO
kapxsW0OmReNdVEa/GDleoUwTAYh02DzuFE/bcI9AveeJWcE9C+rK1GR+u26x+BR
4UvIHH+g9m5nO7pA/rh3pb1KbhnuV77785hNT7lodGHzBGNNm1CCxCEPvzK9x0yp
TQ0daNnI6y6NUsiTm3jt90p41Ka/wfyeMUtGNgy1907I
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:28 2024 by rpki-client on console-fra.rpki-client.org