Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
File: 3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa (raw, json)
Hash identifier: LOKIGUJDuQvkyjYu0jpwlOwzEe8B03iyZo/bUOQIXrw=
Subject key identifier: 6B:7E:7B:A7:39:B5:1F:90:36:F5:7E:61:FA:A0:C1:4D:C7:5C:5F:A8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0D57114EEE10DE294F4286A17772234B5C51B249
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
Signing time: Fri 12 Apr 2024 00:00:00 +0000
ROA not before: Fri 12 Apr 2024 00:00:00 +0000
ROA not after: Fri 17 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 19:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:57:11:4e:ee:10:de:29:4f:42:86:a1:77:72:23:4b:5c:51:b2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 12 00:00:00 2024 GMT
Not After : May 17 23:59:59 2024 GMT
Subject: serialNumber=fb8b3aa64614a045511528662ea06d4f32318fb7e83da3e3733c109176102b0a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:88:0c:9b:f4:84:21:83:6d:ac:8e:f8:ab:
a2:fb:d8:d2:ff:b1:49:d5:d7:14:99:48:14:7e:d8:
8d:63:38:0c:90:62:b2:45:03:1b:f3:b3:d2:f0:c4:
bc:92:37:0b:be:ad:a1:f7:b9:65:ea:ac:b7:6e:cd:
60:43:61:41:32:3b:c8:0f:fd:fd:d9:de:73:e2:b5:
58:45:98:98:ab:d5:40:c3:17:10:ac:c4:9c:18:b4:
e0:5f:b9:e4:20:cd:77:94:92:8a:c4:39:4e:91:30:
d7:ac:cd:64:36:a4:d0:e0:ec:6e:47:4b:86:2e:15:
db:6b:5a:90:66:22:c1:75:89:97:08:cd:bf:0d:fa:
e1:32:d2:4c:b1:83:4c:57:ad:15:22:f4:b0:61:66:
9d:37:fa:e3:44:7c:7b:b0:ef:44:ac:99:a1:66:ce:
e0:7c:59:7d:0f:71:7a:fd:ab:42:98:9b:10:74:c0:
83:e3:db:af:36:d0:21:92:78:68:36:51:29:79:d9:
f3:34:5b:ef:72:da:ff:41:06:e6:8a:a8:41:bf:e0:
63:d8:11:26:e5:1d:e0:a9:1b:1f:8e:1d:62:b2:e9:
72:0c:28:e9:1a:a3:ae:2d:8f:dd:88:ba:5e:31:38:
e8:c5:e9:9d:56:c8:7b:0e:51:e4:70:2b:dd:66:53:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7E:7B:A7:39:B5:1F:90:36:F5:7E:61:FA:A0:C1:4D:C7:5C:5F:A8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:41:0e:27:b8:f7:e7:92:30:91:18:8c:e2:6f:a4:d2:a8:10:
47:04:77:05:92:53:9d:0c:0e:c8:44:dd:f0:ca:48:15:4f:ca:
62:0e:dd:5f:da:5f:31:54:ec:cb:db:50:5f:71:ab:1c:11:51:
5f:a4:47:00:bb:5c:dd:b6:14:84:7e:a9:52:03:d6:c8:c6:61:
ce:28:d5:f1:9a:af:e4:68:30:1f:82:c5:d4:df:ed:d6:85:00:
56:71:b6:ca:3e:05:a5:68:90:d9:f6:be:ad:f5:33:de:8e:c1:
17:8f:2b:38:00:0c:15:97:0a:ea:36:95:04:c9:da:42:2e:02:
97:48:f8:b2:f1:9e:59:a8:b8:f2:bc:a2:19:53:4c:27:16:9f:
7b:8d:83:86:89:95:6d:65:d6:db:f1:a0:8a:0c:23:a3:3d:3b:
3b:95:ef:ea:7e:b1:91:a7:b7:41:83:89:c0:7f:c6:82:72:47:
eb:ca:8f:a5:06:cc:15:a1:7d:ce:3e:af:38:42:b0:5e:00:78:
96:31:75:a2:f0:9e:28:d0:31:ff:68:23:dd:d5:ff:b2:f2:3c:
ae:1c:a9:b0:69:33:ee:75:f4:ac:d7:27:66:1f:49:2e:57:4f:
24:90:b7:cd:5e:95:dd:6c:8a:c6:5a:46:b3:fd:35:60:66:7f:
da:b7:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 01:02:48 2024 by rpki-client on console-fra.rpki-client.org