Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
File: 73023bb1-a443-4047-a9f2-64a1905f67ac.roa (raw, json)
Hash identifier: AZUEDUuIRoLMIuzwQSLKKyWpJZWNTz4wmoxhBZi4eY4=
Subject key identifier: 00:41:91:74:E5:0C:AA:63:38:C8:48:4E:0D:67:5C:04:E6:16:B8:8B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 194C6AAB12B6E649DA97441A15C2057F9C4EA947
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4c:6a:ab:12:b6:e6:49:da:97:44:1a:15:c2:05:7f:9c:4e:a9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=30d9aad019fc45363959076869d5382c09e2d0c4a5b37535f1d6fe96d238a154, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:d4:4e:e9:5b:84:21:af:a0:f7:25:76:b9:
a8:ff:d5:4a:64:b0:0a:6b:15:98:2a:ad:91:aa:a3:
26:ed:ad:8f:51:f4:79:c6:19:1d:c7:bb:72:f7:78:
43:28:c1:a1:77:7a:60:af:ab:71:e1:70:c1:50:cd:
bc:2f:92:b4:81:1f:7d:de:ff:97:c6:eb:09:3f:e4:
83:10:c5:c7:c2:f0:9e:39:4b:38:19:fa:3a:ec:e4:
1d:a0:a3:cf:68:6c:71:f3:85:71:8e:55:66:06:4c:
7d:78:46:a3:14:48:82:bd:da:9d:69:6f:8d:de:63:
29:60:6e:83:c6:84:95:d7:23:26:a2:cc:5d:8f:a3:
02:b9:d7:1e:dd:7e:fd:c3:4f:ed:71:a9:7e:ec:da:
f4:43:89:50:c6:ca:14:32:37:f6:c8:e1:d1:80:df:
e4:af:cb:bc:a8:06:f2:ae:92:cd:8f:d5:27:a0:4a:
3e:d2:7c:3d:35:47:03:6e:12:0d:10:d3:ad:55:ed:
f9:b5:ae:af:de:ce:f2:ec:2c:5c:46:99:23:6e:38:
62:67:36:f1:71:cc:ef:97:21:e2:f5:2f:89:6f:cb:
7c:f2:04:19:48:8f:a5:cf:97:9b:9d:59:50:9d:4d:
ac:43:9e:d0:63:e2:9d:05:40:4c:d0:23:54:6d:fc:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:91:74:E5:0C:AA:63:38:C8:48:4E:0D:67:5C:04:E6:16:B8:8B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:8e:76:b9:08:34:40:85:d3:7b:2c:79:f8:9f:00:76:5f:0c:
6d:e5:88:0f:a1:5a:22:86:17:41:f7:2f:ec:f0:6d:a9:d3:38:
95:cb:ba:0b:02:3a:06:60:91:0b:67:82:88:fc:9e:4d:d7:a1:
1c:ba:30:f3:ed:59:cf:8d:12:d5:8e:34:33:f8:fc:d4:ab:b6:
95:f2:e1:19:6b:2d:a9:d6:a8:be:f0:7c:3a:bd:72:dc:b9:ef:
3f:85:52:07:71:99:ba:a9:a5:4a:f5:9d:b7:c6:74:b6:94:9f:
62:bd:e7:3a:56:de:57:fd:4a:18:5a:dd:de:c0:0f:26:6b:00:
88:de:8c:02:cf:f0:83:b0:b7:b5:b4:ae:92:d4:36:95:a9:8b:
ce:8b:2a:c6:f2:c7:a2:cb:89:ef:56:95:6b:c8:8b:84:97:37:
50:e3:ab:58:14:9c:1a:9e:78:f2:20:b7:e6:3d:68:8f:1f:4c:
7e:14:dd:52:16:c2:f3:d8:73:b5:ce:bf:e8:77:2d:f9:f7:90:
be:bf:3f:c7:c3:4c:f5:90:7b:b8:a9:e6:c2:22:fc:e0:3e:10:
2c:95:9a:9a:99:f0:90:86:20:64:d7:f6:55:97:22:e4:41:d4:
8f:45:05:f8:ec:1d:ed:fb:ce:6d:49:9c:c2:2e:25:04:d2:0e:
68:4d:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:29 2024 by rpki-client on console-fra.rpki-client.org