Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4dc4706c-5c38-4195-b396-c038125e8874.roa
File: 4dc4706c-5c38-4195-b396-c038125e8874.roa (raw, json)
Hash identifier: 85RjJcrjZbDrrHURP+YB5snJnmIx8BoTN/SZrtVEND8=
Subject key identifier: CC:8E:90:7C:EB:E5:1A:F4:F2:E1:C9:DE:2B:25:15:D6:8E:2E:3D:F6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 62607E2C3083DEC5ACFBEAB1C180BC425E228EA7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4dc4706c-5c38-4195-b396-c038125e8874.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.127.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:60:7e:2c:30:83:de:c5:ac:fb:ea:b1:c1:80:bc:42:5e:22:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=fcbdf29b04380e0c00ecf94c5193aa8d970beada209a89b4c37758b036f96724, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:94:74:99:e1:26:b6:6a:e8:af:48:40:d0:
52:3f:d4:65:0e:57:2f:e6:a1:83:55:a6:36:57:a7:
2e:b4:3b:43:e2:07:73:65:a8:a3:b3:14:84:a6:46:
d2:8f:be:5d:d0:f0:da:de:d1:d0:0f:bd:30:56:23:
45:45:3a:b9:5c:24:c4:bd:09:fa:f8:ce:cc:12:2e:
8c:46:0a:30:75:a9:d5:75:c9:8b:02:94:65:e5:75:
3e:e4:aa:43:68:75:3d:6b:61:da:8c:4c:46:61:51:
9d:b4:3c:9d:59:c9:8c:aa:43:cb:6e:74:7f:0a:02:
59:3e:e1:ca:b2:5c:74:86:33:fc:2f:e2:90:44:a3:
6a:08:8b:15:d8:e3:07:f9:81:58:7f:3c:59:d8:27:
20:5c:a5:19:0c:4e:8f:1a:8b:98:77:47:05:59:76:
5c:c6:10:ec:9b:3e:67:bd:38:4b:42:61:a6:06:d7:
01:9b:05:c7:b4:9b:c6:01:59:f2:66:df:6f:18:93:
a1:21:27:69:e1:72:49:19:ec:ff:40:7a:0a:32:c6:
a3:ef:5c:a0:ea:e5:be:4f:2e:91:ae:b7:59:cd:1e:
ed:71:bf:78:f2:66:f4:92:6d:fe:41:3a:0b:5d:79:
98:86:ea:2c:aa:e6:7b:75:a3:b6:05:ea:80:bf:b5:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:90:7C:EB:E5:1A:F4:F2:E1:C9:DE:2B:25:15:D6:8E:2E:3D:F6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4dc4706c-5c38-4195-b396-c038125e8874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:bf:c3:9a:93:2c:e6:cf:81:cf:9e:3d:70:90:f6:64:4c:4f:
ae:69:d6:0c:69:f6:0f:3a:7e:80:4a:10:90:c9:80:52:8b:1b:
71:a7:8b:41:45:9d:4e:56:e4:b0:7f:c3:ae:35:b1:e9:e6:b2:
94:72:70:0f:93:1d:a8:0c:c9:f5:60:3c:1f:cf:a3:87:10:2c:
d6:75:96:46:33:9a:d8:a7:5c:ab:9e:06:76:bf:83:08:f7:f4:
20:ba:5b:8f:e4:5f:a9:98:2b:3a:4c:32:c2:50:15:86:39:5b:
98:00:ba:ec:1f:87:95:b4:00:67:aa:25:e2:f7:62:0b:7a:3c:
19:a8:14:83:f4:85:7f:a6:98:25:1f:17:58:1d:33:90:f1:0c:
4b:f6:71:32:bc:c2:1c:5f:2a:8e:c1:e1:1e:fd:5d:b7:4d:f1:
79:da:23:47:3b:1f:f3:cb:95:1b:de:47:e2:9c:f9:7e:5d:5b:
a4:e8:b7:0a:fd:e4:67:50:86:23:73:cd:52:95:00:5f:d1:46:
e2:55:81:3f:a3:15:d5:19:4f:54:ef:de:04:3a:90:3c:25:16:
af:6b:b1:7f:27:98:d9:3e:54:28:47:96:9a:60:1e:80:30:f1:
5d:d4:a6:1e:fe:22:ca:56:86:bb:74:1c:61:67:45:09:9f:03:
cc:2a:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:28 2024 by rpki-client on console-ams.rpki-client.org