Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ab6975-6f0b-4ac3-882f-29a8794b713d.roa
File: 88ab6975-6f0b-4ac3-882f-29a8794b713d.roa (raw, json)
Hash identifier: c0QP+WCwaNdbOcCasvzOrVUw6fTgA+/cBy/TrAYxuiY=
Subject key identifier: D6:00:F6:FE:98:D9:8B:75:BE:3A:EB:6B:A6:46:13:88:35:E0:F1:F1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 73E595A08F5356A6C4FAD65763B3774DBFAD7431
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ab6975-6f0b-4ac3-882f-29a8794b713d.roa
Signing time: Tue 12 Nov 2024 00:00:00 +0000
ROA not before: Tue 12 Nov 2024 00:00:00 +0000
ROA not after: Tue 17 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.24.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e5:95:a0:8f:53:56:a6:c4:fa:d6:57:63:b3:77:4d:bf:ad:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 12 00:00:00 2024 GMT
Not After : Dec 17 23:59:59 2024 GMT
Subject: serialNumber=adfdd1ec0054e3df46feb199abfd23684b9bcee8a59eb2ee5b4d3c1c2cc191cc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:ac:e1:6a:b3:93:e2:51:fa:81:2d:73:eb:
ac:1f:fa:5d:7a:4c:87:f6:90:80:e6:3c:f3:df:7e:
85:78:25:98:33:fd:5f:6e:ab:78:b7:48:d6:ae:08:
cd:77:7d:6a:93:2a:26:7e:16:56:5a:75:f3:1a:bf:
ad:06:52:5e:74:61:d2:d3:76:95:a1:1d:43:e8:86:
a2:16:f4:f8:77:53:90:f0:47:f8:6c:b1:e9:36:13:
5b:f3:88:1a:14:6c:b5:0e:dc:0e:74:72:0c:9b:2a:
5e:58:43:3c:ad:a0:93:85:76:db:04:9d:83:08:5f:
aa:74:4d:98:52:6d:05:36:78:fe:a9:82:75:9e:fd:
bf:be:cd:24:cc:69:2b:af:85:59:c4:14:e7:5c:59:
7a:4a:c1:78:a0:9a:33:3b:03:1e:4c:fe:b2:b6:d4:
80:8f:2e:5e:ff:bd:0b:b7:4d:ee:94:50:f6:0c:11:
3e:55:87:44:78:d1:15:e1:e0:9c:05:89:d0:49:fd:
78:7a:05:38:1c:87:9d:ad:f7:ac:76:c5:b3:26:3c:
87:55:db:86:e3:2f:02:e5:b8:c7:0d:fe:e2:0a:8f:
12:dc:25:d5:39:02:c4:b7:ad:88:75:79:73:49:f6:
e0:b6:dc:65:8e:f7:39:4f:5f:ef:e2:c3:c8:6b:23:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:F6:FE:98:D9:8B:75:BE:3A:EB:6B:A6:46:13:88:35:E0:F1:F1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ab6975-6f0b-4ac3-882f-29a8794b713d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
19:be:d5:e2:92:da:d7:40:70:c7:51:df:d7:0f:17:aa:1d:38:
cf:02:10:4d:b6:9f:c8:be:72:d5:d2:e1:93:74:d6:ec:c6:e9:
6c:c0:b8:20:08:70:8c:1d:c4:93:8c:4e:68:73:9a:b8:a6:ca:
df:85:46:71:d4:40:8b:ad:b4:e3:a4:95:cb:b2:1d:e7:af:9d:
a8:c1:da:4c:8c:6a:13:40:52:aa:3a:d0:26:3e:94:79:52:ca:
36:18:70:08:70:ac:c3:dc:3c:c4:ce:33:47:30:b9:ab:7f:19:
7f:4b:5a:7d:8b:23:d8:77:c3:ef:c7:d9:d4:81:c1:90:2b:c0:
6d:8c:14:c8:94:63:9e:41:c4:4c:33:3f:06:9f:3d:e9:12:de:
92:5a:a6:1d:d4:92:01:8a:27:a0:1f:cc:43:e9:41:a4:d0:39:
39:ea:c2:35:53:d5:47:d4:21:28:8d:56:e5:37:7d:65:81:44:
b8:01:ce:16:ce:01:4d:d6:b6:f0:e4:bc:8a:ff:1a:6e:66:f4:
7d:81:4a:46:cf:53:ea:59:15:a2:16:ba:b1:97:52:cb:e2:2b:
17:e9:e6:3e:51:de:cd:8a:5b:c4:69:e1:0a:0f:4b:c9:ad:cd:
ad:91:f0:45:96:87:b0:e8:14:b6:43:1d:fe:20:09:13:d8:7a:
d5:9b:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org