Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c739e23-5bae-43bd-bade-a1f5158b6cc3.roa
File: 9c739e23-5bae-43bd-bade-a1f5158b6cc3.roa (raw, json)
Hash identifier: oRdQaKCSSZNI0WX4KdFz0A//7ouhqAkC39QWUFRBPXg=
Subject key identifier: 12:EA:56:38:2C:AA:8D:3D:5C:16:34:C3:85:9E:77:C5:CA:28:27:26
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1CBA615E07CA6C415FA8714C3C5DCA7823915F8A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c739e23-5bae-43bd-bade-a1f5158b6cc3.roa
Signing time: Sat 20 Apr 2024 00:00:00 +0000
ROA not before: Sat 20 Apr 2024 00:00:00 +0000
ROA not after: Sat 25 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.72.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ba:61:5e:07:ca:6c:41:5f:a8:71:4c:3c:5d:ca:78:23:91:5f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 20 00:00:00 2024 GMT
Not After : May 25 23:59:59 2024 GMT
Subject: serialNumber=1ab0a00be2605a0c48335a2d80df41b6df21e54f95e8d6f9f4de508678a552df, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:10:4e:0e:1f:41:ef:b2:b8:83:35:46:0f:
15:65:c1:e8:e6:6b:23:ee:a4:e5:0c:1e:b0:35:5c:
91:b0:c8:07:c7:c2:0a:4f:ad:68:4e:e0:dc:da:42:
b9:b4:49:f8:8e:a9:59:9e:50:55:8a:2b:03:c2:b5:
d2:a7:27:17:3a:e9:8f:a9:8a:74:cb:ce:10:e0:c5:
be:39:09:b3:01:2d:ec:7c:ad:47:65:f7:c6:33:15:
42:ad:4b:59:85:48:37:93:d1:99:37:b4:23:90:4f:
ab:0f:79:89:02:fd:98:5b:d3:a8:ac:1a:89:36:fe:
46:66:f0:67:99:fa:05:08:56:27:45:6c:6f:90:a9:
ca:1b:b1:1d:9c:9f:98:a2:4d:0d:a8:2e:45:7c:31:
74:1a:61:9f:6c:0e:34:fc:60:91:68:c2:8a:be:3c:
60:0d:cd:46:13:3c:d5:c5:92:c9:74:1f:46:7b:d5:
45:4c:79:ff:68:88:24:d5:fc:cd:f3:11:9b:fe:56:
65:72:02:85:0b:9d:9a:91:50:95:74:a7:3d:01:d9:
b9:9d:36:39:32:8b:80:60:3d:7c:d0:01:79:e9:cd:
d0:6c:56:d0:ab:13:27:35:b1:1c:4a:b1:4a:6a:29:
5c:2f:89:47:70:d8:de:48:3d:2f:d3:42:f7:36:f8:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:56:38:2C:AA:8D:3D:5C:16:34:C3:85:9E:77:C5:CA:28:27:26
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c739e23-5bae-43bd-bade-a1f5158b6cc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3a:de:03:8e:21:e6:bc:d6:d5:5d:b6:80:97:32:41:d9:0f:56:
ef:8c:61:54:bf:27:d2:b9:dc:0f:a1:af:d3:3b:f5:a2:00:af:
eb:65:73:32:5e:3f:64:83:77:f2:6b:6c:da:a3:36:9a:10:6b:
6c:f6:b8:82:fb:77:ef:a9:26:90:2a:98:15:65:e4:1d:a9:f8:
63:ea:9e:90:4d:b5:f2:c1:90:4f:91:6a:4e:2c:6d:7b:16:47:
b1:ee:8f:32:1d:cd:01:a6:c5:95:35:f1:6b:a0:19:b3:52:bb:
2d:b2:6c:32:16:51:d7:fb:4e:aa:04:96:c9:d9:3b:dc:65:53:
7a:0e:ca:d1:e2:3e:86:60:40:10:2d:38:15:eb:57:d7:e1:a6:
13:36:28:30:e0:53:00:f9:28:b6:6f:fa:e4:24:9f:89:7f:03:
49:8f:94:ed:51:7c:0b:b8:20:4e:3b:ef:08:fc:5e:00:72:26:
92:1b:b8:1c:b3:d6:5a:13:80:80:18:d5:12:db:5e:94:cd:ad:
dd:31:c4:86:7d:8d:1f:4a:f5:31:c5:1b:24:06:1b:14:de:06:
96:25:fa:df:3c:ce:f9:35:5e:63:27:d3:8f:dc:fa:f3:9b:49:
4c:8e:2c:12:69:36:96:ca:46:50:2c:d5:28:ca:69:e5:99:31:
78:8a:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:26 2024 by rpki-client on console-ams.rpki-client.org