Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
File: a15337be-3f91-4e80-a89d-26de9d37ed80.roa (raw, json)
Hash identifier: fnbwAyAN5O7PJmsnn0IuEud2K7hqnlGA+jrb/hKTLdw=
Subject key identifier: CA:5C:FC:35:49:C2:57:26:DF:EF:15:E6:1F:70:4C:E0:8E:A0:DB:9C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 34F40B80AECCCF6F82E252386573DDBF1428C8C9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.0.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f4:0b:80:ae:cc:cf:6f:82:e2:52:38:65:73:dd:bf:14:28:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=158f0a2ce42a0c824430205e6b8b2c874ac281d051715c381f7d3353c7f2fc07, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:74:74:53:7f:32:c4:90:5f:6a:fd:ab:17:
08:20:8c:53:ea:c3:e1:67:39:47:40:80:97:b2:85:
88:d7:2c:d0:65:3a:3b:9b:ec:0d:62:8c:a6:08:43:
7d:8b:69:8f:34:9c:1e:05:06:68:81:f8:f7:31:3c:
49:79:0b:c8:6f:aa:06:41:f2:8e:7c:72:5e:b1:b6:
42:e6:39:a8:9a:2d:38:db:c2:55:81:78:44:ae:1a:
92:36:12:8c:0f:89:1c:c0:97:97:eb:fb:a2:23:3f:
38:81:4f:18:87:ae:cf:a3:27:92:da:90:0e:6c:1e:
57:63:1b:e6:64:54:66:26:81:97:9a:83:0d:29:a3:
4f:e0:2f:6f:47:96:e1:14:02:65:19:87:61:aa:be:
11:2c:e0:c9:7a:c8:ee:b0:dc:ea:1c:c9:55:a3:4c:
f1:37:23:6f:05:ab:b4:73:07:84:76:ca:52:56:1a:
81:a0:95:88:89:08:bc:43:83:67:d1:38:f1:78:04:
cb:4d:4b:1a:6d:c7:ed:98:b8:a5:8d:c6:df:52:e5:
86:7f:1b:6d:4f:64:f8:32:b8:53:0b:22:12:04:27:
32:c6:ac:17:d2:54:4f:19:f3:0e:0c:4a:aa:ad:5d:
b0:8e:8a:f5:0e:7d:b7:e1:90:5e:86:1f:f5:ad:f8:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:FC:35:49:C2:57:26:DF:EF:15:E6:1F:70:4C:E0:8E:A0:DB:9C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:f9:b2:f4:2b:49:28:a1:a8:4b:31:ff:2b:f1:da:2a:1f:3e:
02:83:05:f0:db:86:17:96:dc:12:64:f6:e1:2d:8f:0d:51:66:
4d:c3:d6:56:3e:c2:97:f2:40:15:6f:3c:51:ad:81:74:09:1e:
89:63:26:32:80:45:c5:51:59:65:54:84:a6:93:64:26:41:0f:
db:6b:a1:34:ba:50:3a:f7:07:75:68:3a:87:d5:75:aa:76:94:
d0:72:bd:93:ee:b9:84:e5:a4:0c:00:ac:fe:c7:8b:8f:f1:e8:
f9:9e:89:2c:3b:cb:a5:08:15:97:b5:27:27:f0:ce:11:4e:bb:
d3:b7:17:a5:48:26:f7:99:4c:43:8b:79:f4:0c:9c:a1:07:f2:
da:ff:29:f9:99:3c:09:b5:be:85:6b:df:a7:8b:68:72:e2:6d:
1d:be:92:8e:82:aa:5c:2e:56:4e:b2:6a:bf:3a:ea:78:50:35:
8b:a3:24:b7:9e:48:e0:92:70:0b:97:05:8f:7f:6e:d6:a8:69:
e9:a3:e8:4b:58:d7:82:db:73:53:b0:6f:55:99:44:1d:49:1f:
3c:7c:ab:9f:45:2b:6e:51:4d:7b:63:c4:bc:7b:51:c0:8a:a2:
c0:9e:03:88:51:24:07:e9:fc:c8:c6:bc:d0:42:3d:66:f9:3c:
06:69:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org