Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/469cc7d0-efb3-4887-80fe-b6b29492890f.roa
File: 469cc7d0-efb3-4887-80fe-b6b29492890f.roa (raw, json)
Hash identifier: jn/4MLgNFGd3qqav816WZCQP99Woy0DvLP/obrTnN40=
Subject key identifier: 52:14:81:66:FD:17:84:83:92:BB:0E:B8:97:FD:10:0F:83:DA:4D:B3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57C7E34308ADF760748083CD0C6E2EAA55E5BA96
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/469cc7d0-efb3-4887-80fe-b6b29492890f.roa
Signing time: Wed 27 Mar 2024 00:00:00 +0000
ROA not before: Wed 27 Mar 2024 00:00:00 +0000
ROA not after: Wed 01 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.168.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 Mar 2024 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c7:e3:43:08:ad:f7:60:74:80:83:cd:0c:6e:2e:aa:55:e5:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 27 00:00:00 2024 GMT
Not After : May 1 23:59:59 2024 GMT
Subject: serialNumber=41b51c60861b800bf8a4657e5801ddbda45c6c1f8fd61007df1e7a649c75cf35, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:1c:db:ef:9c:9b:cb:e7:88:4d:47:85:c0:
a8:70:90:fd:cd:45:73:a1:97:2e:d8:9e:e9:de:47:
d0:10:ee:2d:37:d6:3b:a6:cf:d9:3e:12:5a:f0:31:
8e:f6:12:77:5b:5f:e9:3b:94:37:00:49:cf:e9:ca:
68:25:f9:3e:e7:41:b2:28:ff:58:36:cc:0d:f8:43:
ac:45:1d:4d:08:50:a8:9f:90:64:88:8c:1a:08:6c:
60:10:d2:cd:f2:17:de:ac:f4:d4:8a:96:f2:f5:96:
49:81:7f:11:1b:d1:eb:d5:8f:22:8f:1d:bc:6d:a2:
87:40:6f:8c:a0:01:6b:76:29:91:2a:ab:0d:aa:28:
b0:92:98:a7:18:28:ad:a5:89:ed:d8:57:29:96:b0:
05:1b:47:bd:cd:bf:b1:0a:76:bd:ca:6f:f4:a5:8a:
5d:14:12:d8:47:6e:bb:77:fb:2e:20:fa:6d:6f:d1:
70:c7:79:70:c4:c8:42:24:50:85:1b:df:b6:74:37:
3b:27:a5:b7:99:81:68:c8:14:fa:e0:87:f2:1d:e9:
76:7c:40:5d:9f:62:f7:10:35:3d:38:fa:0e:25:53:
67:5c:65:9b:27:7f:41:cb:9b:7d:1b:d2:ae:a7:7f:
ef:f7:a5:6a:f6:c9:43:d8:8b:2c:77:54:e5:bd:3f:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:14:81:66:FD:17:84:83:92:BB:0E:B8:97:FD:10:0F:83:DA:4D:B3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/469cc7d0-efb3-4887-80fe-b6b29492890f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:45:98:d0:11:fa:17:47:d5:25:d5:12:ef:10:1e:80:b4:2d:
b7:f7:f6:91:bc:dd:69:f2:dd:ad:2c:3e:78:eb:37:d9:71:1f:
93:41:46:bf:13:a1:e3:2c:b8:00:a1:99:f1:28:10:54:1d:a9:
4a:ad:a3:e2:fe:7a:3f:2f:bc:fb:41:06:db:03:f1:31:e5:0e:
ad:2d:fd:81:af:13:52:7d:ff:6a:84:d8:6e:0c:94:e7:ef:04:
67:40:e2:1f:fc:95:f6:b9:b3:12:2c:c9:f6:87:59:7a:a2:11:
e0:b8:a2:a9:52:bb:83:a9:d6:63:5f:57:8b:92:09:0f:c4:33:
05:99:f7:7c:e2:73:36:c0:3f:10:2e:70:0b:c2:04:6b:15:a0:
54:95:2a:0d:f2:6c:98:33:59:72:3d:b0:88:f2:35:f0:97:e7:
77:55:ac:57:ab:b2:d6:b8:34:6a:9a:30:b7:ef:7b:e8:01:59:
23:08:a0:da:c3:31:27:c1:fc:ce:c7:ef:23:54:86:f2:cd:a2:
37:94:70:07:87:09:c9:bc:7a:27:fe:21:2c:93:fc:f1:56:a2:
a7:a7:23:d7:32:16:cd:4a:a5:86:a9:34:2c:a7:04:b6:ec:83:
be:44:bd:a8:ee:32:17:f0:ca:a8:15:12:b2:36:2a:c0:fd:20:
72:fb:17:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:28 2024 by rpki-client on console-ams.rpki-client.org