Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa
File: 407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa (raw, json)
Hash identifier: 0j1zka2ewTIomS/k/Z6wC264yMmOok28eUQ7BHYUO4U=
Subject key identifier: A1:9D:23:BD:B9:12:1F:79:8E:BE:CD:6A:F7:CD:16:53:0B:2F:9B:4E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 333434C8D2D8435971AEC78416AE5DD9639F75AF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa
Signing time: Mon 08 Apr 2024 00:00:00 +0000
ROA not before: Mon 08 Apr 2024 00:00:00 +0000
ROA not after: Mon 13 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:34:34:c8:d2:d8:43:59:71:ae:c7:84:16:ae:5d:d9:63:9f:75:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 8 00:00:00 2024 GMT
Not After : May 13 23:59:59 2024 GMT
Subject: serialNumber=a7e9ab28a497519c855f12e60ac74c39237324e3cf5052b17949d9f9e53cbd2f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:f4:97:e4:55:1c:00:b0:ac:5e:81:df:38:
8b:73:07:6a:af:de:ee:f2:b8:04:9e:7b:86:dd:f9:
09:7d:69:40:ac:5d:e8:12:b7:06:cd:e6:86:c1:01:
24:8c:c6:9b:4e:c9:ab:60:9d:68:0e:ad:e4:d6:25:
9b:d5:e8:e0:4c:bf:c8:83:65:a8:97:39:bd:42:12:
95:fe:ab:9c:d1:5c:4a:15:ec:32:be:a3:e2:2c:0b:
6d:ce:dd:f5:5c:52:7e:09:03:bf:94:64:05:82:f8:
8b:74:19:b0:59:a0:10:3f:74:d4:c1:31:1e:a1:71:
dd:81:cd:d8:9d:64:c0:bb:e6:2a:22:45:3e:dc:25:
23:e4:d4:8e:12:a6:db:17:26:1f:cf:69:3f:2c:09:
99:70:19:fc:49:ca:fa:b2:e4:66:4e:ea:f0:09:a8:
51:da:47:ea:4b:d9:c7:7b:49:eb:73:05:55:97:30:
ac:aa:b8:37:04:80:d3:b5:d7:53:d8:f2:8e:58:6c:
d3:c5:5b:31:49:b6:46:ca:39:05:c1:a4:31:92:b6:
56:db:ec:24:a1:05:2b:61:7f:51:47:36:e4:13:e5:
6a:d0:2d:85:e7:c1:63:61:3d:64:64:8b:66:de:e5:
67:df:b4:24:77:ec:b0:05:8c:ab:2b:4a:b3:fc:9a:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:23:BD:B9:12:1F:79:8E:BE:CD:6A:F7:CD:16:53:0B:2F:9B:4E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c3:54:f0:4e:4a:c8:d2:39:eb:c9:ac:55:00:93:99:2c:70:b6:
28:89:58:51:44:9e:b1:22:0c:85:37:61:9e:f6:e0:fc:71:b1:
46:27:f6:65:19:22:b7:43:72:84:d2:1b:aa:b5:12:d9:f0:4a:
2d:da:87:fe:87:93:aa:86:5c:a6:bd:52:5e:70:ff:74:ee:60:
5e:8d:48:38:75:cb:10:33:22:56:cf:ad:0d:a4:8a:4a:5c:47:
4d:47:dd:8d:5c:83:f6:f1:3a:92:8f:fa:ab:09:d8:45:5e:f5:
80:b5:b2:ac:e7:2e:d4:74:a9:f2:74:b0:d2:9f:92:6b:da:04:
f3:2e:8f:49:c4:e2:85:c0:37:a0:1f:69:56:1c:fe:4f:4c:a3:
22:d1:c7:f2:65:8f:87:be:61:a1:be:c8:ea:24:16:ca:98:95:
b7:1e:15:f0:a8:ee:74:44:cd:0b:5c:bf:b0:b0:b0:6d:a3:61:
d1:a0:04:10:3b:6a:ec:ba:1a:00:eb:5a:08:2d:25:f0:a8:4a:
72:b9:55:1f:fe:70:d5:43:5f:2c:ad:c2:50:49:25:62:8d:49:
01:91:d1:71:07:db:55:28:48:0f:b9:f8:63:d8:bb:d4:15:57:
90:35:b6:c4:67:14:87:52:54:22:22:87:99:51:39:56:a7:3f:
d8:c5:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:46:56 2024 by rpki-client on console-fra.rpki-client.org