Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3f8b75d5-ee83-4794-8d04-a4e42412f346.roa
File: 3f8b75d5-ee83-4794-8d04-a4e42412f346.roa (raw, json)
Hash identifier: Sg+VQlYZ5dOm5bMguJprZz/ZvpgHferc2N/UcBDcBDs=
Subject key identifier: 3F:09:03:80:AC:13:94:B3:B4:BE:0D:29:8B:43:DA:55:97:5F:6D:34
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 53E6A75324667C676C95C96AADA7046A463554
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3f8b75d5-ee83-4794-8d04-a4e42412f346.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.48.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e6:a7:53:24:66:7c:67:6c:95:c9:6a:ad:a7:04:6a:46:35:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=73d21e02b83e82017be0f1ac1b4b2cb283893bb7b80a31325d1a84b6b4e956a3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:bf:ff:ec:7c:25:b4:f4:c8:fd:1e:37:30:
56:b1:84:0f:f5:74:ba:5a:82:5e:c0:8c:4c:c5:a5:
14:97:5e:1d:33:2a:20:9f:bb:25:c0:81:45:99:f6:
43:50:1f:3b:56:39:00:03:d0:97:07:21:d6:61:5d:
4c:89:7d:bf:46:b4:89:bf:3e:75:09:98:fe:2f:19:
a5:9f:8e:83:43:f1:ae:65:c7:99:ca:03:ac:07:2a:
bc:33:db:f6:f9:0d:94:0d:5a:de:af:bd:bc:60:8a:
4f:e9:21:e0:de:6b:8e:85:5c:19:b3:13:8d:7d:2b:
9b:4c:db:27:84:cb:78:83:80:45:84:02:fc:0b:7f:
65:6b:97:43:72:fc:e7:c4:20:ef:2f:41:58:5b:0c:
82:53:d7:76:37:ac:d5:ab:de:00:42:00:9c:ba:11:
2c:7a:f5:cf:6a:cc:a8:35:e0:c9:00:be:99:9e:55:
0d:70:b9:21:33:e2:05:62:18:f3:e9:45:a3:30:0b:
a1:3f:2b:f0:1a:58:32:64:3f:1b:63:81:a4:a7:4c:
99:3b:2a:10:54:e5:cd:75:e4:87:b7:c4:ee:49:de:
db:23:01:4c:40:47:0f:46:73:87:66:87:a4:93:f9:
5a:2d:17:03:c2:91:a0:25:27:2c:22:dd:e0:ec:01:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:09:03:80:AC:13:94:B3:B4:BE:0D:29:8B:43:DA:55:97:5F:6D:34
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3f8b75d5-ee83-4794-8d04-a4e42412f346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.48.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:42:4e:b5:56:44:51:be:8b:51:1b:62:b4:5e:56:21:38:fb:
53:63:66:b4:c0:e7:6c:dc:72:16:70:51:14:04:9d:c1:ad:ea:
22:02:8c:de:e3:85:a4:80:ed:1d:13:fc:65:1b:c4:a3:d6:95:
30:8d:07:a9:a2:f2:d3:8f:bc:35:2a:c7:3c:18:8c:93:f8:ec:
4b:5b:29:57:ec:a8:32:e7:77:b4:27:f2:ef:34:f2:ec:9c:b6:
ed:30:d0:c6:fe:7d:05:81:96:f8:96:46:84:e3:0b:f5:8d:48:
dc:f6:07:11:ea:72:10:0b:72:77:e1:a4:a8:c5:28:00:d5:f0:
b7:28:16:25:8e:69:93:28:09:a6:58:31:95:a8:bf:0f:51:d7:
70:a3:9b:38:e3:5c:00:7f:bc:d4:1e:3c:0f:9c:5a:ba:19:0a:
25:3e:25:53:a4:c3:78:02:52:25:b7:bc:18:96:be:07:e7:a1:
05:d2:97:7b:c6:5a:4c:64:02:fd:fd:87:06:3c:01:5c:8b:8e:
c5:f8:27:2b:4d:7c:0b:55:de:e0:08:2a:00:0c:df:a3:29:09:
3e:48:35:63:94:0b:77:dd:2f:f1:02:ed:3b:21:0e:3f:c3:35:
83:c7:a6:6c:3a:7f:93:b2:9f:1c:8a:b7:3d:59:a0:36:fa:9c:
ed:7c:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:25 2024 by rpki-client on console-ams.rpki-client.org