Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/53a9be89-d507-454e-96fb-d2a28e64f836.roa
File: 53a9be89-d507-454e-96fb-d2a28e64f836.roa (raw, json)
Hash identifier: 4+92kZtu10k7Ma6wx9otAbEMH6jUt7DOGxfHeVNSdG0=
Subject key identifier: CA:7C:7B:2B:41:AB:ED:2C:0E:11:69:19:03:6B:D0:97:27:E3:BB:0E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5DCD0AD846FEDC3B2BE9E03388742E633DC8F4DC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/53a9be89-d507-454e-96fb-d2a28e64f836.roa
Signing time: Tue 29 Oct 2024 00:00:00 +0000
ROA not before: Tue 29 Oct 2024 00:00:00 +0000
ROA not after: Tue 03 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cd:0a:d8:46:fe:dc:3b:2b:e9:e0:33:88:74:2e:63:3d:c8:f4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 29 00:00:00 2024 GMT
Not After : Dec 3 23:59:59 2024 GMT
Subject: serialNumber=86e570611c168b944ebd6fe916fce56720351622b0f73296bee1b23f1e7e0ad8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:d0:d8:cb:98:55:9a:50:8c:77:dd:2e:ed:
62:75:a3:3a:15:da:f3:f6:7b:e1:03:a3:7e:bf:40:
44:aa:44:e9:58:bf:a6:84:93:f5:1a:69:c7:c5:04:
58:99:48:33:d4:be:68:85:d1:f5:53:f2:21:45:d9:
5c:03:db:c9:14:13:5a:1f:5a:77:2f:0f:8a:19:48:
79:f3:d8:64:8f:bb:58:4c:76:a5:98:b9:1a:6c:2d:
3b:90:84:76:eb:4e:48:b6:f2:17:b4:83:41:61:95:
55:98:84:a9:f2:2e:48:d6:06:d2:4a:47:e8:19:60:
11:76:63:6f:62:e6:94:05:61:87:61:33:29:8e:13:
09:dc:1b:91:d3:29:fd:51:f0:2e:b4:16:5c:38:05:
cb:e5:c5:8b:18:27:c7:1b:b3:51:75:d9:9e:d4:a5:
a9:e6:b9:cb:32:0a:6f:8e:a0:e9:8e:bf:0e:80:cf:
65:c0:5c:a3:f0:35:6e:f1:b8:70:9c:94:f7:7e:1f:
4a:02:e6:23:11:93:63:a1:e5:39:14:62:5f:a2:b6:
fc:80:cc:1c:1c:28:3d:1e:33:70:ac:84:35:92:0b:
07:02:fd:f5:1c:b8:cd:dc:35:69:ec:49:31:f8:c6:
fe:ca:e3:29:13:45:73:05:e9:f4:ea:28:a2:d8:9e:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:7B:2B:41:AB:ED:2C:0E:11:69:19:03:6B:D0:97:27:E3:BB:0E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/53a9be89-d507-454e-96fb-d2a28e64f836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:fc:0b:f5:31:d2:42:da:26:5e:ab:50:af:ff:04:36:42:35:
3d:5a:e1:1e:64:ca:a5:f8:2b:c6:d4:77:db:54:01:95:2c:73:
e7:cf:98:10:00:fc:aa:47:d1:89:22:35:59:f9:c3:7a:56:57:
9d:89:c2:13:1c:c6:03:f0:70:0f:01:2e:2f:a2:da:70:d8:09:
fa:69:2f:2d:0a:00:37:f1:88:5c:1c:cd:e1:77:25:95:01:6a:
7d:5b:b3:4b:a8:30:2a:9e:d4:52:14:d8:80:7d:b3:2e:fa:aa:
a0:7b:ea:a1:5e:df:cd:0b:47:84:b0:5d:c7:42:cf:cc:31:c4:
8a:2a:db:28:95:b5:25:21:d0:d5:dc:da:7f:4e:9a:22:02:ea:
92:0b:03:77:e7:68:5e:60:d4:41:0a:48:45:8f:e1:ed:5e:21:
34:7b:88:b2:26:42:80:9a:eb:29:53:da:0f:8b:c6:d0:70:d5:
2f:9f:e9:ef:52:6b:81:98:de:a6:5b:c4:20:f4:b1:42:80:51:
33:c1:6f:7b:fe:15:5e:60:73:3d:fd:4e:74:7c:41:9e:94:af:
fb:93:41:d6:86:a6:10:98:64:a6:12:ed:a9:7d:e4:2a:72:53:
79:87:74:4c:b3:ec:32:8b:68:51:41:87:a5:4a:c2:71:a4:a5:
a3:68:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:29 2024 by rpki-client on console-fra.rpki-client.org