Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
File: 7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa (raw, json)
Hash identifier: AW5l+vaIGBO7afugzWLLuZj+fHtnuSi9fSaiYTpfgBM=
Subject key identifier: 56:48:C4:19:40:63:C1:87:2A:96:6D:3D:35:DD:78:2D:54:CB:1A:51
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 09E27E052B82402813F89572E5076D4747C6B4FB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
Signing time: Mon 08 Apr 2024 00:00:00 +0000
ROA not before: Mon 08 Apr 2024 00:00:00 +0000
ROA not after: Mon 13 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e2:7e:05:2b:82:40:28:13:f8:95:72:e5:07:6d:47:47:c6:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 8 00:00:00 2024 GMT
Not After : May 13 23:59:59 2024 GMT
Subject: serialNumber=0f2db5b0c50ed27929eef20717e83784d22715c4e0ea66773162226a90218259, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:81:a6:c2:d2:78:19:1f:7f:6c:d6:d5:81:
7f:35:d9:d9:60:4e:66:60:63:74:ea:71:db:41:7c:
3d:c2:99:af:8d:83:66:f3:4d:95:af:cb:26:d7:95:
8f:e7:f6:39:26:3d:9c:b6:c7:f8:30:8a:94:41:93:
0f:84:9f:f4:44:4c:78:8d:6a:2f:e7:79:03:7f:dd:
7e:3f:e7:6e:70:5a:29:c1:6a:1d:0d:c3:be:49:03:
cc:19:6b:a2:fd:00:22:9f:66:28:79:16:cd:c0:40:
ba:f1:c8:3a:a4:98:4a:4b:bc:03:11:ad:01:95:00:
69:85:80:a7:46:2c:1c:b3:eb:3f:5c:fb:3f:78:68:
d0:8d:b5:cd:99:9d:3f:a4:82:ee:46:e8:e3:f9:93:
28:0c:e8:13:b9:a4:53:03:1d:49:a6:ba:f9:e1:28:
9c:63:61:46:b3:0d:9e:0c:79:45:2e:a9:b0:69:36:
e6:5a:1a:ec:1e:fb:8c:4d:e5:34:99:48:d8:a8:93:
32:6b:d0:fd:c6:b8:21:4b:2e:f9:0d:00:62:23:44:
cf:ea:15:98:b1:34:a8:0b:33:38:df:0f:c1:8c:23:
05:c0:80:50:a6:0e:22:a7:5b:7f:d9:4c:58:21:16:
0b:eb:76:c2:63:cb:0d:e5:31:b3:59:aa:63:3b:e8:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:C4:19:40:63:C1:87:2A:96:6D:3D:35:DD:78:2D:54:CB:1A:51
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
10:f0:d2:2b:c1:fe:27:fd:5b:2e:c8:35:84:6b:3c:0a:b0:48:
2b:bb:ae:9a:d3:bb:2f:fd:d5:6c:17:fb:37:21:21:59:e8:45:
8c:e5:bf:fe:ba:76:38:10:7c:23:3d:62:d8:90:83:66:87:c9:
8b:9a:c8:6b:6a:9b:2d:5a:15:88:de:7a:56:35:86:1b:1c:17:
9b:af:b4:1f:4c:24:46:f2:25:cc:59:71:7e:a0:8c:a9:60:80:
c8:cf:a5:12:37:5f:a0:91:38:8c:a2:97:28:05:3a:49:91:b4:
51:fa:f8:5d:16:0f:db:7f:9b:34:09:40:58:ec:7c:e1:af:04:
2e:4b:08:40:e4:51:df:4b:39:62:8e:d1:be:ff:2c:fe:8a:10:
6e:12:7a:b4:ae:48:9c:f7:a7:e8:ff:f1:60:a8:df:29:6b:50:
cc:6b:76:0b:c3:bd:7b:ef:97:81:7b:14:7f:a8:4c:d2:db:cd:
53:68:8e:d3:ca:81:cc:51:9e:34:7c:58:19:14:41:43:d4:3e:
6b:1d:5e:7b:f5:e4:6b:2d:75:f9:24:85:5e:18:c2:c5:97:cf:
a7:34:dc:47:8a:78:a3:3d:64:26:58:07:2f:ed:ef:cd:b8:7e:
5a:9d:98:02:3c:1f:c5:60:1d:35:4f:e6:d2:ad:a2:fd:06:e1:
3d:97:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:26 2024 by rpki-client on console-ams.rpki-client.org