Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/942fda94-0f9b-4fc2-96fb-33fe58d39a68.roa
File: 942fda94-0f9b-4fc2-96fb-33fe58d39a68.roa (raw, json)
Hash identifier: ESX51QaGY4eiGVFjZsQJC96FGAc9L4/Lsi1+M9SFhXs=
Subject key identifier: BF:7E:9C:ED:23:A2:75:D5:E4:49:C8:2F:05:5B:0A:F1:F7:A7:F8:06
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 710DB6102B33063A8970AACEF75F9A390BAB39CA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/942fda94-0f9b-4fc2-96fb-33fe58d39a68.roa
Signing time: Wed 06 Nov 2024 00:00:00 +0000
ROA not before: Wed 06 Nov 2024 00:00:00 +0000
ROA not after: Wed 11 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.112.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0d:b6:10:2b:33:06:3a:89:70:aa:ce:f7:5f:9a:39:0b:ab:39:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 6 00:00:00 2024 GMT
Not After : Dec 11 23:59:59 2024 GMT
Subject: serialNumber=a46cd12c509b08c1e89ba1150c3a5ba06f31e78550ed22d3f62497335da8cea3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:79:df:71:dc:b2:de:f9:8d:6a:af:84:78:
5b:30:0e:d1:64:18:a6:cd:9f:8a:0e:f4:5a:e3:72:
a1:dd:f5:bb:2f:b5:bd:e9:d4:22:46:21:63:8b:cd:
0e:3c:16:54:d1:35:db:b1:43:0b:48:a9:7e:60:c3:
cd:a7:44:cc:95:46:07:11:ee:a8:07:80:4d:76:09:
00:30:1a:ce:3e:6b:7e:eb:d3:23:79:bb:9a:11:f3:
25:9b:df:50:12:86:4e:cd:0a:89:73:ae:c8:77:8e:
63:23:1a:f4:4c:92:30:61:f3:23:62:73:30:f2:53:
92:e3:a6:6b:2e:28:b3:8c:d9:26:e0:50:12:fe:8d:
f4:2f:e3:18:e7:89:2a:6b:b4:18:68:1f:31:ea:c8:
9d:7d:7c:bc:97:cb:10:7e:1c:52:e1:51:eb:9f:a4:
3b:ea:36:2d:d4:80:38:10:14:d6:15:7e:0b:b2:cc:
87:35:48:6b:19:63:69:01:2b:fe:ca:77:c9:bd:f8:
b0:61:b5:31:26:91:2c:b5:4a:10:67:1a:24:5e:cb:
07:e9:4d:68:5b:0d:7a:25:a3:9f:de:9b:8d:51:2f:
7f:f8:f3:67:59:73:99:c9:2e:ff:e5:e0:97:79:7d:
34:b1:e1:2b:75:62:d0:b7:9e:51:50:c9:3b:ae:7b:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:9C:ED:23:A2:75:D5:E4:49:C8:2F:05:5B:0A:F1:F7:A7:F8:06
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/942fda94-0f9b-4fc2-96fb-33fe58d39a68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.112.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c7:bb:b4:6a:bc:cf:7a:fc:a0:e9:b7:e2:7a:8e:aa:93:c4:bf:
03:88:d9:cb:73:65:42:d9:df:63:cb:e0:b7:fd:53:00:d6:fb:
cd:b5:4c:4d:fb:7d:7d:b7:d1:9f:18:4d:58:bc:e8:55:a5:40:
a5:89:1c:b3:9e:8d:1d:ef:7e:88:fa:71:54:33:70:1c:38:60:
b8:d7:4e:4c:e2:89:48:65:1c:0b:70:f5:d5:2b:8c:6a:f6:91:
f8:73:b4:0a:37:c0:d2:ee:2a:61:8d:1c:a3:c9:3c:9d:56:b2:
fd:ac:e9:1f:6a:03:dd:ef:66:52:4e:99:44:81:94:86:82:58:
b6:a7:34:69:5e:36:3a:eb:a2:9e:f1:14:21:36:32:1f:92:79:
6a:48:0d:fe:79:64:54:d9:24:46:5a:dc:ff:a5:19:cf:de:f7:
d8:e6:aa:e8:f2:43:e3:91:20:c6:dc:de:0f:3a:b8:57:72:89:
63:fe:7e:d9:19:02:a6:93:f1:1f:ae:d3:bb:44:82:82:5e:a0:
0d:59:9c:2c:24:ec:94:10:72:2a:bc:b5:a8:25:30:8b:3f:df:
c3:5d:7b:e8:5d:10:f2:49:0e:26:9b:8a:35:d6:3d:29:3d:40:
62:30:d1:4f:b8:a1:29:ca:58:be:f4:ce:13:4a:94:c8:78:97:
67:b5:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org