Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
File: 6b1fedd3-188f-4b29-88bb-0dce33df2464.roa (raw, json)
Hash identifier: BUcNJX0aybKDyDeclqDZcKrEZbBNns/syVqwO7x6z1c=
Subject key identifier: A3:AE:E9:32:D4:72:0C:58:D2:2A:94:47:8C:5D:37:AC:FE:FC:1D:01
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3DDCFF2F94E6EA553DCC2338258E1E5C064429F7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:dc:ff:2f:94:e6:ea:55:3d:cc:23:38:25:8e:1e:5c:06:44:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=669699709f0a735e61791c5f49eba5f1fed9b49a24c6f215d0c4d663a8922753, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:1f:8f:d8:36:15:0e:af:92:06:80:81:fc:
ad:15:4f:1b:d2:e0:c2:a4:51:c3:b1:e8:89:ea:88:
c3:bb:cd:2c:b1:ff:1a:1a:85:f3:5d:4d:2e:07:e2:
26:01:ac:ed:1c:c5:96:fe:ce:ca:3d:61:a3:f0:73:
bf:e6:1c:dd:ca:3c:55:a2:0b:70:95:1e:3b:df:17:
f8:2f:3c:e8:a3:7a:1e:cc:32:9a:5b:34:41:ae:6b:
f1:3d:a3:be:09:fe:78:37:3a:f1:a7:21:45:c4:c3:
a7:a3:70:5e:be:7a:f7:fd:5e:53:a4:59:36:3e:66:
c6:be:b0:a1:c6:9c:48:35:6f:e1:22:9a:cd:d5:96:
60:c7:8c:be:d0:cf:41:0d:42:ed:9d:3e:5e:e5:7f:
49:fe:77:89:3d:6d:27:70:6e:9e:a6:fe:aa:12:e4:
13:0b:44:01:b5:1e:9b:5a:df:73:68:e6:33:8b:0a:
81:7a:2d:b6:1c:d7:fa:a4:59:5b:21:3a:ab:68:f5:
da:18:2e:41:58:b0:58:e8:62:a4:5e:45:b7:7f:80:
08:08:8e:38:1d:b9:15:8a:0b:5e:d3:6a:dd:66:91:
a4:b3:9d:34:6a:e9:0b:0b:94:ab:33:19:29:0d:d2:
9c:43:f9:5d:50:e6:9b:0b:07:e3:55:c6:12:f3:97:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:E9:32:D4:72:0C:58:D2:2A:94:47:8C:5D:37:AC:FE:FC:1D:01
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:8f:6f:db:c3:1a:89:65:01:3b:78:c8:1d:a6:af:d5:08:a0:
ff:7a:e1:73:41:1d:19:b4:e9:fd:3a:5c:76:b5:92:69:9c:08:
91:ef:43:4b:b2:4a:c0:5f:5e:3f:bb:d9:d8:07:9b:f5:3b:d2:
ac:40:86:60:cd:a7:b4:f6:0a:0c:d1:81:a4:4b:3f:d3:0e:4a:
1f:6a:ff:73:c8:44:be:27:99:74:5b:de:bc:fc:68:0f:14:53:
2c:73:6f:11:28:63:55:56:62:d6:f0:b7:92:49:35:c7:0e:74:
59:d3:99:0d:21:58:db:36:cb:b8:20:fd:ab:db:03:71:bc:e4:
82:3b:5a:0a:c3:23:9e:3b:13:90:f4:a8:b2:7e:dc:1b:d3:86:
f8:0b:44:87:e6:a2:fe:81:7c:e4:1d:ef:de:3a:c2:83:18:e5:
8d:6e:e7:bf:72:64:b5:16:31:03:86:75:33:bb:37:6c:4e:6a:
66:a5:b8:76:e2:cd:0d:39:d7:4d:99:a3:30:c6:4d:03:e8:80:
e6:0b:10:a3:43:89:98:e6:5d:0a:c6:21:fb:89:fe:79:fe:33:
5d:65:45:d8:ad:9a:8d:1a:65:3d:9f:79:40:05:03:b7:de:67:
62:5c:79:1b:6d:62:f7:d7:01:e9:07:3e:e4:b6:e9:11:55:cd:
3e:34:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org