Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
File: 7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa (raw, json)
Hash identifier: EWx3ycjRcSlGh2lDX5IOFaUCj4XwRf4ZKGHcSDEEtbE=
Subject key identifier: B7:73:15:B7:BD:F1:FC:97:46:08:D0:1A:CF:8F:DA:92:DA:37:1C:9B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2E476E8078710E122A7E5DA22D44ACEB6125CBB1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
Signing time: Tue 29 Oct 2024 00:00:00 +0000
ROA not before: Tue 29 Oct 2024 00:00:00 +0000
ROA not after: Tue 03 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:47:6e:80:78:71:0e:12:2a:7e:5d:a2:2d:44:ac:eb:61:25:cb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 29 00:00:00 2024 GMT
Not After : Dec 3 23:59:59 2024 GMT
Subject: serialNumber=f7e5bca1f70e7c807c04b9b6f8b97449af9d95137706bfd384c97b9e55348d2b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:8a:85:18:52:78:d6:cc:e2:7f:60:e9:17:
a3:07:b8:5b:e7:2e:c2:0d:af:b8:43:99:35:76:1a:
9b:26:64:39:53:fe:fb:fd:2f:63:c3:57:f2:25:67:
54:36:ba:96:19:8f:7d:84:72:22:1b:b7:7f:25:00:
a0:3b:a7:db:3e:47:55:a5:87:e9:c7:01:25:65:a7:
8c:6d:2d:0f:54:25:18:04:e2:9d:d3:27:60:94:c0:
00:9d:40:d1:74:00:8a:e9:30:4a:60:5d:f8:d5:f5:
68:39:b1:b7:43:df:89:a9:b9:b1:dd:bb:76:cf:16:
f3:27:6d:e2:72:d5:62:68:81:3d:07:36:e9:9c:1a:
a4:7b:dd:9e:6e:eb:2b:bd:f1:2d:40:55:08:4a:40:
a4:7d:98:7c:d4:73:bd:c6:fc:8b:c4:a2:1c:83:b7:
11:64:e1:cc:e6:5f:0f:19:7a:0d:0d:56:2e:72:d7:
ae:fd:26:f9:16:2b:d9:12:f5:05:a2:09:61:94:f2:
46:66:91:c2:53:4a:2d:e9:e0:9e:72:42:58:39:c8:
6c:9a:dd:f7:81:f1:83:8b:56:31:d2:2b:67:f4:99:
0a:18:f3:49:2e:01:c5:72:ba:ce:be:93:3b:76:3d:
09:fa:5d:e8:7b:7a:03:1d:8b:24:06:f3:db:94:0b:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:15:B7:BD:F1:FC:97:46:08:D0:1A:CF:8F:DA:92:DA:37:1C:9B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
be:4c:f8:5e:b7:71:cb:0e:9c:db:4f:6d:e4:3d:2a:eb:ee:ba:
4b:d6:73:d1:74:6b:a1:dc:35:ca:77:6a:a7:37:a0:08:37:c2:
23:0d:a7:57:10:62:02:5e:f1:16:18:24:b0:44:99:c1:e0:16:
ed:a7:b9:09:ae:1f:41:71:80:9d:3b:7f:71:0b:09:f6:ac:b0:
23:58:87:03:b3:9f:8c:cd:1b:f2:22:51:65:ef:3d:4e:09:8a:
10:7b:ca:fe:4a:d0:a8:4e:b4:bc:49:5e:72:71:89:7c:b6:a2:
15:2a:8a:af:76:95:bc:06:6f:52:62:8b:12:52:e6:66:e1:30:
d4:7c:0c:94:10:1c:d0:52:fc:a1:27:f1:fe:48:01:c0:4e:0f:
67:b3:c7:24:a7:69:6a:be:e6:67:d3:c8:94:6d:92:5e:c2:be:
a5:08:97:bf:69:3a:9b:e5:fa:0d:5c:41:cb:2c:22:85:08:b5:
a8:3f:ac:83:a9:3e:ff:20:28:60:5c:c5:fc:21:0b:77:25:ba:
67:1b:77:a0:b8:04:d9:39:e2:38:d3:69:aa:cc:e3:8f:ad:f0:
e8:db:1c:93:df:46:b1:01:5a:8d:e2:26:68:a5:9b:12:a2:ce:
ad:57:f8:5f:90:76:05:b3:86:42:df:a8:b0:d4:4c:67:51:0e:
d2:59:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org