Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
File: 6b1fedd3-188f-4b29-88bb-0dce33df2464.roa (raw, json)
Hash identifier: 6TZu+FlX5wZXTkR19b4HXNBNpYgRxPw/F1tGZ3kWrf8=
Subject key identifier: CB:42:24:D6:9A:CE:9C:C5:C7:80:DA:00:40:D7:92:8F:C7:34:81:EC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5011BDBF85DFBAEF6111BD81D5942E4FD2BE18F8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 18:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:11:bd:bf:85:df:ba:ef:61:11:bd:81:d5:94:2e:4f:d2:be:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=07c17b0c6f5423368655b50539cd33f97bce5929f1a9df0af2a3e7c7aaa8a159, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:b0:b2:54:e1:17:ce:17:4f:74:b2:97:37:
9a:dc:1a:2f:14:7b:4e:a2:41:55:f8:0a:5b:46:e9:
50:ce:c1:a4:20:5f:0c:d3:97:59:5c:61:68:b8:fe:
c3:46:54:4a:57:3c:68:da:f1:67:5b:33:09:0c:f1:
0f:1f:57:0a:ec:3a:47:36:82:bf:c3:5f:c2:8b:14:
06:bb:1d:d2:de:cd:a4:08:df:50:fc:59:e1:fc:b4:
c9:d5:a4:2f:96:b3:c0:62:f3:99:e7:a7:0d:f2:bb:
37:ec:46:e3:68:28:fc:eb:3c:bf:53:d2:59:3c:eb:
0b:2f:ae:23:c9:7e:3f:df:e8:31:4b:01:59:fe:ea:
87:a1:32:d7:50:f0:3c:cb:7e:db:2a:1f:dd:69:ba:
9d:d9:a6:ab:f5:7f:41:9a:35:a1:38:28:0d:fa:27:
e0:5c:3d:82:ee:43:e1:34:a3:d1:a3:68:4b:00:ad:
b9:8f:84:bc:85:77:7e:e9:e4:8e:57:2f:d5:e8:18:
db:b5:67:8f:cd:b4:3a:56:de:37:24:05:7b:de:bc:
78:54:27:d0:de:f0:3e:b8:90:0a:46:f6:cc:d2:91:
bb:5d:22:51:27:5d:9d:81:6d:57:79:f7:36:d0:e2:
5a:bf:3b:a0:7a:6c:7e:8c:96:00:16:df:5c:84:a9:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:24:D6:9A:CE:9C:C5:C7:80:DA:00:40:D7:92:8F:C7:34:81:EC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:36:92:8d:89:ed:a8:11:ab:47:03:a5:1e:6e:09:55:cf:17:
06:16:a4:bb:98:82:32:c7:90:8b:44:14:c1:71:79:d2:c8:7e:
4a:3d:8f:40:f1:70:7f:53:29:14:8d:73:4e:9e:d4:0b:2a:39:
4c:6c:9e:5c:dc:63:66:47:76:95:ff:af:69:a3:f3:07:64:ca:
f6:a7:78:57:6a:1c:1c:c7:02:34:8b:8b:d1:61:0c:9e:02:0a:
59:77:77:63:1d:59:5a:8b:94:a7:6d:07:7c:2c:d3:05:b0:47:
76:9e:6c:d3:fd:52:26:10:3a:b9:85:8c:e7:c1:fa:c7:5e:13:
de:cb:86:f9:c6:82:2f:84:23:35:ff:92:40:e3:fc:29:d1:a7:
d7:97:f2:5a:2f:ad:10:7b:71:47:e1:b1:5f:8a:b0:d8:59:65:
c4:1f:e1:23:bc:35:87:f1:e7:88:e7:2c:81:58:51:08:ea:7a:
bd:51:93:d3:75:d7:06:fc:49:11:84:e3:b0:ee:9a:0d:6f:79:
82:78:00:51:f5:c8:d3:af:72:d3:a8:6c:23:07:75:90:6e:be:
31:dc:76:03:c5:43:4e:3f:5d:68:86:0d:81:e2:5a:1e:dc:fb:
40:7f:45:c4:01:91:b9:1b:39:b6:85:ee:91:03:f6:d3:4a:c6:
7a:b0:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:29 2024 by rpki-client on console-fra.rpki-client.org