Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
File: 9f77493f-a89e-41b4-9b06-e8928fedf80c.roa (raw, json)
Hash identifier: 619SWuV/c96M65AE2Y57HBvX19snNIjf9633sP/HBjw=
Subject key identifier: B8:16:91:42:C9:A1:18:B0:78:7F:4A:20:66:63:DA:44:79:57:AD:96
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1D806285D85B90A8CDE30E6EEEB43DA973FCE93A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
Signing time: Mon 11 Nov 2024 00:00:00 +0000
ROA not before: Mon 11 Nov 2024 00:00:00 +0000
ROA not after: Mon 16 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 85.213.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:80:62:85:d8:5b:90:a8:cd:e3:0e:6e:ee:b4:3d:a9:73:fc:e9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 11 00:00:00 2024 GMT
Not After : Dec 16 23:59:59 2024 GMT
Subject: serialNumber=1650ea9aaded2c3bb80f0127296b1a842da65bdbbaab149fd35976ba5c4c33cb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:d9:5c:41:09:5a:2e:51:1c:16:4c:ff:51:
0c:0b:66:bd:8a:3c:8f:79:aa:9b:c3:d2:fa:40:53:
d7:d7:b0:6b:37:e8:61:40:fc:87:98:e0:a1:86:fc:
bd:21:f5:c0:fc:fa:66:ff:40:77:6b:88:5b:dc:24:
70:e9:78:eb:9c:9f:94:33:45:06:7e:8d:8e:3c:1e:
d4:73:86:bf:1b:1c:68:d6:ac:de:de:72:40:53:30:
f5:df:f7:2f:07:ae:ec:0e:79:7e:2b:eb:a6:a7:af:
9c:90:82:66:18:53:6c:1a:74:af:f4:a8:82:5e:fd:
25:06:fb:25:45:9b:f6:41:c7:d6:c4:1b:75:e3:60:
3f:f2:21:ef:d0:13:1d:d4:fe:f5:de:df:42:7d:17:
ac:d9:6a:6b:eb:fd:4d:98:ca:99:b6:87:8f:eb:8b:
ff:d6:71:94:f5:57:cd:cf:92:a1:5a:a7:96:69:2c:
8a:79:c4:ae:d2:9f:dd:4c:e6:31:c6:28:5b:41:94:
6d:51:28:a6:93:e1:40:83:cf:86:cd:43:7a:b1:e0:
be:05:50:f4:87:b0:75:8c:7c:7f:b6:c7:49:1b:d6:
f6:1e:90:7b:6d:d6:b1:dd:f4:35:f1:d8:a5:61:97:
ff:c8:b8:ed:3d:7f:d1:05:f2:ca:92:8e:66:45:71:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:91:42:C9:A1:18:B0:78:7F:4A:20:66:63:DA:44:79:57:AD:96
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:d3:18:6e:fb:d1:95:8b:67:cb:c5:68:e0:27:f9:be:f8:53:
11:b5:1d:7f:45:c3:0b:db:75:7e:64:f2:7f:12:fe:cc:41:96:
f3:a6:4d:8b:16:c4:92:d3:01:12:b3:d6:04:44:13:51:88:3e:
f1:15:94:dd:c4:73:ab:94:cb:29:ca:de:95:2d:30:13:e0:9d:
21:6c:9f:77:6e:93:6e:97:70:78:9a:3b:50:c1:0b:17:b2:d3:
dd:9e:29:b9:7b:d8:cd:c4:f1:9e:1b:6e:15:54:4f:b4:49:ff:
eb:e1:db:26:b2:5c:f2:c1:d7:38:9b:d4:13:cb:d5:c2:3c:3b:
4b:e0:be:39:2b:f6:28:40:bc:9d:f4:3d:3a:f6:5a:cd:7d:4c:
f5:d9:a2:8e:12:f6:6c:cf:95:59:fc:69:35:cf:43:a3:f9:c1:
5d:ed:ba:0d:91:21:4a:15:eb:ad:b6:77:c6:31:49:a7:e3:7c:
c7:9b:a9:89:bc:00:8d:3f:cf:8c:7c:8c:f3:32:fd:e2:0e:60:
0d:17:34:4f:93:21:da:6a:2f:ab:d2:8f:8e:9e:c2:03:28:59:
f0:8e:f8:22:cf:4c:fb:ab:7a:d5:6f:97:97:13:b9:6a:37:f9:
fe:ba:54:d3:63:85:35:71:32:5c:2a:76:aa:cb:9d:dd:bc:e6:
7c:a1:93:df
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUHYBihdhbkKjN4w5u7rQ9qXP86TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTEwMDAwMDBaFw0yNDEyMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2NTBlYTlhYWRlZDJjM2JiODBmMDEyNzI5NmIxYTg0MmRhNjViZGJiYWFi
MTQ5ZmQzNTk3NmJhNWM0YzMzY2IxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxx2VxBCVouURwWTP9RDAtmvYo8j3mqm8PS+kBT19ewazfoYUD8h5jgoYb8
vSH1wPz6Zv9Ad2uIW9wkcOl465yflDNFBn6Njjwe1HOGvxscaNas3t5yQFMw9d/3
Lweu7A55fivrpqevnJCCZhhTbBp0r/Sogl79JQb7JUWb9kHH1sQbdeNgP/Ih79AT
HdT+9d7fQn0XrNlqa+v9TZjKmbaHj+uL/9ZxlPVXzc+SoVqnlmksinnErtKf3Uzm
McYoW0GUbVEoppPhQIPPhs1DerHgvgVQ9IewdYx8f7bHSRvW9h6Qe23Wsd30NfHY
pWGX/8i47T1/0QXyypKOZkVxcssCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS4FpFC
yaEYsHh/SiBmY9pEeVetljAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OWY3NzQ5M2YtYTg5ZS00MWI0LTliMDYtZTg5MjhmZWRmODBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFXVMA0G
CSqGSIb3DQEBCwUAA4IBAQA00xhu+9GVi2fLxWjgJ/m++FMRtR1/RcML23V+ZPJ/
Ev7MQZbzpk2LFsSS0wESs9YERBNRiD7xFZTdxHOrlMspyt6VLTAT4J0hbJ93bpNu
l3B4mjtQwQsXstPdnim5e9jNxPGeG24VVE+0Sf/r4dsmslzywdc4m9QTy9XCPDtL
4L45K/YoQLyd9D069lrNfUz12aKOEvZsz5VZ/Gk1z0Oj+cFd7boNkSFKFeuttnfG
MUmn43zHm6mJvACNP8+MfIzzMv3iDmANFzRPkyHaai+r0o+OnsIDKFnwjvgiz0z7
q3rVb5eXE7lqN/n+ulTTY4U1cTJcKnaqy53dvOZ8oZPf
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:29 2024 by rpki-client on console-fra.rpki-client.org