Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
File: a2b57228-1239-489b-a0ad-c926f19f72f0.roa (raw, json)
Hash identifier: hztBCJgb0zLwqz4Ba807ZHG9DEd0MuYw9wbUpnaNrQ0=
Subject key identifier: 61:DB:24:C4:91:76:02:A0:EF:99:8E:7C:11:28:D8:EA:46:7E:C7:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 34FD435685CC4626D59A5238013E13E0726BAFCA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fd:43:56:85:cc:46:26:d5:9a:52:38:01:3e:13:e0:72:6b:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=f2bcc946942073547e21747e7f29d62cc990cd40438bde177db49b16e1bacd0b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:b6:8f:0d:d9:39:74:77:bd:26:aa:04:ad:
56:3b:c0:b4:75:cd:a8:f9:c2:c5:b4:ca:46:4d:b4:
65:10:09:c2:d9:39:58:9e:7f:61:2d:91:c3:07:6e:
e5:66:cd:6f:0f:97:e4:55:d0:c2:77:c5:4b:ba:d6:
b0:02:65:ac:d4:ce:fd:ba:b7:fe:0f:66:75:1b:09:
b4:c6:2c:07:b8:d1:fe:f5:60:7d:0a:74:44:75:3f:
0e:e9:ea:89:15:d5:36:03:9f:6c:91:ff:5d:ef:73:
f6:d9:f6:08:2b:65:86:3f:d2:46:2e:1c:3d:ac:da:
bb:74:a7:cb:01:09:c9:40:ea:e6:f5:fb:14:d5:b6:
22:6f:b4:58:f6:9a:29:43:cb:ec:69:67:25:7e:d5:
cb:88:6b:2e:83:3b:8c:bd:8c:59:d1:00:df:f8:e3:
1b:af:c3:13:66:56:25:f4:f3:83:0e:84:48:c6:39:
d7:a2:3c:da:a1:ff:ec:45:02:db:70:dc:74:aa:49:
e8:9a:26:16:ea:2d:b7:77:71:ce:d2:bd:04:76:61:
34:b4:ae:c6:a3:1b:fa:bb:4d:36:d5:55:61:b9:9e:
59:9d:86:08:dd:db:79:04:8c:9a:39:85:4c:dc:80:
35:3d:a6:18:a8:f6:17:37:7f:cc:76:45:bc:eb:35:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:24:C4:91:76:02:A0:EF:99:8E:7C:11:28:D8:EA:46:7E:C7:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:da:c7:06:9f:ba:78:35:5a:2b:b0:a1:82:99:1f:ff:33:49:
19:48:d2:cc:eb:6d:9a:de:23:5a:c9:e3:a7:61:11:1b:b6:69:
02:20:78:95:30:4c:91:85:9c:ec:5e:44:0a:a9:38:ae:e9:55:
47:a5:e3:91:8a:8f:ff:97:13:36:a2:98:3d:c6:e7:22:55:1e:
1d:4e:a7:f4:13:72:70:c5:8d:43:de:99:1e:c9:df:94:35:dc:
a6:07:ab:b3:7a:c4:3f:e5:85:39:72:01:6e:9d:8e:82:1b:ec:
16:a5:b3:71:4c:31:ad:00:9b:9f:a2:84:3e:55:b4:a6:9f:ea:
9d:3c:2b:05:1f:e9:8b:b1:b7:71:63:2f:08:b5:43:4c:92:1e:
5e:d6:f6:f6:9f:f0:6d:99:d3:d8:2b:51:c7:ba:4f:73:f7:d3:
dd:01:ed:6c:cc:b0:c9:3d:df:48:68:9c:89:ce:12:9f:04:fb:
89:74:44:a6:86:24:d3:33:79:b5:52:1d:73:9d:11:fe:db:fb:
a1:c6:1e:19:70:c1:8d:40:17:2e:b7:cd:fb:d4:ce:53:a1:91:
b0:f3:47:a7:f0:2a:66:41:7a:3f:bd:9c:b9:73:bd:76:63:92:
16:2a:a7:74:3f:7e:c0:e8:16:ec:20:3f:ae:5c:a2:f3:53:6d:
fa:ae:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org