Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa
File: 407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa (raw, json)
Hash identifier: CJB2Jtge9RFn0UgBLpHEuB6sgMjn1Ad+lt3/JdFR4Eg=
Subject key identifier: 79:66:A7:05:F3:64:35:BC:C1:67:ED:5B:0F:56:7D:50:52:B7:B9:CE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3F3E4D48CFBB0EBFB15D1785BE8004956CF415F5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa
Signing time: Tue 29 Oct 2024 00:00:00 +0000
ROA not before: Tue 29 Oct 2024 00:00:00 +0000
ROA not after: Tue 03 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3e:4d:48:cf:bb:0e:bf:b1:5d:17:85:be:80:04:95:6c:f4:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 29 00:00:00 2024 GMT
Not After : Dec 3 23:59:59 2024 GMT
Subject: serialNumber=cd3f671ed3189b4ec76bf543dfeba2aed06ce6e99e0821e7570f210fb20a9656, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:e7:92:45:68:cc:b9:88:b8:db:c0:f2:3a:
82:b2:db:32:f3:83:71:00:ad:66:c5:18:30:c7:35:
02:17:99:40:d2:00:b1:22:df:38:b5:fb:0d:21:8d:
b2:f4:83:10:6e:25:79:1a:d8:a4:ec:23:d9:92:88:
85:f3:f4:1a:3b:c5:f2:a0:5f:34:0c:75:62:ec:c2:
91:57:c8:2d:f7:10:44:3e:13:a7:4a:9e:3e:fe:46:
05:07:7a:9b:3b:86:2c:9a:9e:0e:f3:29:78:03:82:
8b:02:fb:d5:aa:eb:08:7a:e7:25:1e:4b:76:a2:9e:
91:88:4c:f5:a3:3e:6d:02:e3:57:db:0b:6d:b7:ec:
b8:f4:83:9a:10:24:10:13:a7:35:0c:f4:b7:88:d0:
73:18:18:1c:63:dc:96:6b:2a:91:ef:45:7f:df:4f:
35:92:e3:a1:a2:3d:61:95:e3:dc:a7:2b:80:4d:92:
96:5b:ef:99:be:63:be:72:0a:aa:08:47:a6:99:67:
be:b3:c4:bb:0d:1b:15:12:d7:c4:9d:2e:c4:be:9f:
0b:94:28:91:7d:1d:4c:5e:0a:d7:bc:1d:b3:c5:a1:
59:9c:ab:a0:c0:bc:da:b1:a9:ab:8c:e2:4c:0a:5b:
97:3c:0f:14:63:44:9c:3e:b8:7b:03:86:d8:e9:28:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:A7:05:F3:64:35:BC:C1:67:ED:5B:0F:56:7D:50:52:B7:B9:CE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/407c7a6c-acd6-4eb3-9cec-9b8e2f4e8287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
01:36:c4:a2:bc:43:a0:51:e3:02:47:33:2a:f4:2f:f4:48:2c:
2f:51:8a:fc:21:79:56:33:c4:c8:92:e0:49:ee:ef:15:22:63:
8c:a3:68:65:17:88:89:00:08:fd:42:53:7a:92:e6:ff:40:77:
2a:c5:31:78:ee:69:99:b4:b6:6e:f6:8d:be:96:1a:45:38:02:
24:89:d5:09:01:b0:67:bb:a7:39:15:c2:3a:0d:49:61:2a:c5:
8b:8e:48:6a:76:8f:13:63:e1:e1:c3:ce:af:2c:0a:fe:40:ad:
2f:f1:06:ed:ce:6b:5d:22:c5:06:d5:7c:8f:cf:ac:ad:ef:1e:
86:79:25:33:b1:bf:e3:8b:7b:1f:a4:d2:2c:24:7c:77:5b:7f:
b5:45:f1:9c:ba:33:f4:48:f6:94:39:6f:71:8a:c4:ab:09:42:
53:be:af:c8:96:43:cf:eb:fd:37:40:21:d1:df:53:11:b7:a2:
e0:05:cd:7e:6e:ca:2f:10:f3:34:19:f5:d9:af:f7:5a:d2:e1:
07:49:50:21:a8:5c:f2:d8:84:7b:1b:68:6b:2f:d1:06:ce:3c:
8b:d2:27:82:0c:4b:38:9f:98:ae:50:eb:e7:60:26:55:f3:06:
4c:fb:df:b1:27:80:62:7b:aa:0c:ed:c7:7e:f7:75:60:0a:75:
f6:ff:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:28 2024 by rpki-client on console-fra.rpki-client.org