Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa
File: 7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa (raw, json)
Hash identifier: /DgOc+yfyVFk6U5QSu9vyIDQrB0qlzGIGUmnHwRcH/g=
Subject key identifier: 8E:87:90:5E:EC:55:A9:F4:3E:6C:B1:D9:F2:88:4A:A0:22:17:4D:63
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12950E5F85343B15C106041C3F9C00402FB249B1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 2a01:578::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 18:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:95:0e:5f:85:34:3b:15:c1:06:04:1c:3f:9c:00:40:2f:b2:49:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=bd1abb71b82ab4cdc20dfaa67ce131b780fb49b9b43a108e34a3d5ab36c299e4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:98:1a:a6:10:f0:a5:a6:35:ed:59:fa:4a:
89:a7:2c:e3:54:3f:61:9c:f9:69:b1:7a:98:f0:a2:
63:92:80:23:37:89:53:b5:08:52:15:ad:87:95:f3:
18:1e:b8:32:df:47:c8:b1:22:63:15:09:3a:52:2f:
9a:43:3e:71:db:e3:cc:b4:ca:db:69:25:89:65:76:
06:b6:55:33:5d:9c:ec:ed:59:95:13:cf:ea:15:e8:
62:b9:6c:24:2e:06:17:c5:33:a8:ae:92:21:2c:ff:
d1:21:48:c2:42:e4:1a:a9:ad:d6:23:a9:31:23:51:
d5:4e:a3:d8:e6:97:72:a0:08:36:39:1c:15:48:9e:
23:9d:d1:9b:e7:f4:a1:f4:13:62:80:e3:43:a4:79:
6c:1d:36:45:b8:eb:0b:c0:37:c6:ff:ee:5b:01:da:
96:00:82:4f:03:65:1d:c3:51:68:06:94:20:f1:96:
09:34:bc:78:b5:51:a0:c7:69:00:d2:73:b8:9e:e4:
e1:06:76:ff:02:eb:64:21:d6:35:f0:fa:89:53:53:
35:5c:c1:55:12:1f:20:56:83:77:87:2a:08:75:2f:
60:27:1f:6c:12:83:51:e7:51:e8:c3:40:e0:61:1a:
4f:61:5d:94:db:9f:e2:d0:33:17:cf:29:eb:c9:c5:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:90:5E:EC:55:A9:F4:3E:6C:B1:D9:F2:88:4A:A0:22:17:4D:63
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578::/36
Signature Algorithm: sha256WithRSAEncryption
b1:19:6c:f9:c9:f5:7e:a9:09:20:8d:d7:06:e5:e1:36:9b:0a:
31:13:8c:43:39:17:04:2c:57:0a:73:06:cc:dc:87:1e:94:c3:
c5:97:df:f7:44:bb:e1:41:ce:6a:c9:70:69:cd:2f:47:2c:e3:
ba:e5:e1:20:ab:74:d2:c8:9e:a7:db:80:00:79:38:b1:59:1d:
c7:76:10:72:8e:4f:bb:e8:c4:80:15:fd:7a:e9:83:a1:b1:d6:
2f:2f:59:4f:a6:81:41:8e:78:88:27:97:3a:a2:45:32:e1:86:
2b:9e:f4:46:02:a8:ff:22:2c:f5:72:51:ec:10:2f:46:df:f2:
26:d0:19:bb:dd:80:7b:61:5b:8f:af:23:5a:67:23:16:f5:01:
b1:e6:93:70:48:f4:bb:eb:13:4e:3d:62:86:96:b9:45:53:ff:
01:4a:a2:49:b6:fb:62:fc:80:c8:e0:b9:88:b7:e7:dd:68:60:
78:85:5f:3d:22:fb:6a:5e:55:1d:b3:e4:56:12:14:45:09:10:
dc:63:39:e9:8d:87:22:c5:de:3a:b0:f5:d4:6c:06:9a:82:94:
3d:5f:92:0c:b4:4a:6e:22:65:c3:47:5c:ba:0c:e2:2c:f5:35:
c3:6e:83:e1:de:25:e8:86:55:c5:6e:75:a9:90:82:b7:53:5c:
0d:75:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:18 2024 by rpki-client on console-fra.rpki-client.org