Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
File: a2b57228-1239-489b-a0ad-c926f19f72f0.roa (raw, json)
Hash identifier: foTggx53dnK+rUlE+9ouapP0Masc0pUksx5djpIAnKY=
Subject key identifier: 66:60:11:61:76:AA:2A:17:24:20:94:00:29:DF:B1:B0:B9:6B:E4:41
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5F59EAA51041AA136C975FB97CEF39857040E0EA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:59:ea:a5:10:41:aa:13:6c:97:5f:b9:7c:ef:39:85:70:40:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=47f573558fe5ebf2be80583b8e10838d724945efb7f27532269f122b3b4d1c9f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:18:da:2f:0c:f8:3e:f7:70:ba:fd:67:6b:
11:a1:90:c1:a6:aa:be:20:88:ba:38:39:52:32:b0:
03:80:64:1f:52:4b:36:4c:2c:a3:cf:d1:d8:44:26:
2d:6e:d0:eb:e4:99:fe:6e:62:4d:4a:96:78:bc:ec:
b9:ca:e7:1f:4d:9d:bf:66:34:49:da:b0:c9:6b:a5:
4a:bd:71:58:85:dc:1f:3f:99:65:41:b1:e1:de:bd:
24:bc:4e:3a:25:33:70:ab:83:eb:ac:62:93:4b:a7:
47:98:30:38:36:30:60:29:92:0b:71:90:d0:c2:ef:
82:b3:b1:03:58:52:56:68:6d:1c:34:e1:9a:f1:ff:
eb:92:80:4f:7e:50:3c:ad:68:42:1c:08:19:42:c8:
19:60:f6:a7:e2:c1:ed:33:27:87:78:5d:a6:81:79:
cd:8f:48:e5:29:b5:42:44:b6:03:5f:e2:d8:e1:ce:
9c:3b:cb:00:ec:31:a8:e1:f9:49:49:30:25:ba:c3:
17:ef:e2:72:f4:84:56:ce:4c:ff:b9:ff:02:a5:3c:
da:44:f8:15:f8:cc:db:52:65:9f:b7:7b:48:b6:60:
e7:fa:41:93:24:ee:38:7f:0f:18:9c:b2:47:63:28:
52:06:03:a2:4c:39:e0:71:83:1b:7c:9e:1e:fb:28:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:11:61:76:AA:2A:17:24:20:94:00:29:DF:B1:B0:B9:6B:E4:41
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:b5:f3:6d:b2:4a:9b:a8:36:19:9e:b2:4a:ec:12:28:87:13:
66:18:ff:71:56:af:6c:de:b4:4b:a3:61:56:70:6c:70:cb:5d:
5b:43:92:a1:27:e7:e9:77:d4:db:52:4b:d0:71:3f:c7:45:fb:
32:af:2e:03:43:4e:db:68:3f:d5:5c:ff:f0:2a:2e:79:84:17:
a7:8d:23:72:00:32:dc:40:c4:dd:c9:17:97:da:3c:98:33:9e:
b3:2a:0c:e6:59:22:83:cd:99:76:fa:54:ee:3e:2b:96:6a:af:
2a:e1:f7:68:00:68:d9:aa:07:7a:6e:b3:32:2a:a0:3b:4d:ca:
22:82:b7:06:ce:43:e2:14:e3:cc:dc:c9:8a:74:e8:88:a8:65:
53:be:a9:9a:3a:86:63:e0:41:80:16:88:8e:50:e3:a8:f1:35:
12:a8:e3:d6:e2:5d:1c:ef:4a:1d:5f:71:43:63:77:63:d9:d7:
91:dc:46:cc:25:4e:94:c8:b7:6a:d1:04:2d:96:e9:04:15:e5:
c7:3b:0c:fd:67:ab:18:78:4a:46:d9:a8:fd:1b:c6:9e:27:12:
c2:4e:53:f5:b4:7c:1d:b3:f5:71:83:5e:75:19:6f:88:b3:70:
c7:80:d1:a7:b8:db:75:bc:53:0d:a8:d6:55:17:3b:ff:f9:a9:
04:6f:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:10 2024 by rpki-client on console-fra.rpki-client.org