Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
File: a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa (raw, json)
Hash identifier: 4QeA9nqt8STo7E4rTGM/6VBZJ+kAmLWe0yUxaJNZ9eU=
Subject key identifier: 97:63:5F:41:B5:FA:15:C1:DF:12:40:71:75:1C:40:7A:AF:FA:16:6B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 53F37A7BED928CD3AE1877E1DD301369C8968E29
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f3:7a:7b:ed:92:8c:d3:ae:18:77:e1:dd:30:13:69:c8:96:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=27992522bcedab4f3f8467ae51afddec333f0d6c5fec3ee34d8f05553fbb9486, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:21:10:cb:41:dc:fd:33:0b:45:eb:0b:df:
57:2c:f6:c4:59:5a:34:40:ac:15:db:67:1b:a5:14:
66:e5:66:b5:fc:b4:f9:67:0f:94:b9:89:b5:98:1e:
b3:f0:20:06:ff:fe:83:7a:9f:c2:3e:73:27:34:b1:
c4:05:87:0c:f1:94:30:7c:5c:23:ce:37:c3:b6:17:
e9:a4:ea:73:54:1c:d8:58:65:a2:22:ed:ac:96:9d:
f2:05:e5:ce:e5:2d:97:8d:1f:ce:42:b9:8c:c9:8a:
ad:97:fc:fa:ce:b6:a3:5d:36:90:1a:f1:fa:26:4b:
fe:02:39:71:3d:ac:b3:d6:92:80:cf:15:d7:7d:44:
7b:8d:5d:d0:1a:88:a3:b4:05:cd:bb:9a:29:1c:37:
50:59:7e:3f:80:21:2a:eb:08:b4:91:33:31:0b:53:
e9:1d:c4:57:cd:69:cb:c1:59:f7:36:fe:6a:97:90:
5f:c2:1e:fc:1a:ef:e8:06:71:24:97:65:05:0f:00:
03:3a:83:48:2c:27:dd:fc:fc:53:e0:9a:25:24:1e:
5d:8b:07:9c:86:b0:e3:43:90:33:f7:51:53:d5:45:
e9:36:ab:cd:54:2f:18:c8:4d:05:db:9d:d1:f0:2a:
94:6f:f6:88:59:53:49:55:be:fa:9e:9c:f2:0b:93:
0e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:63:5F:41:B5:FA:15:C1:DF:12:40:71:75:1C:40:7A:AF:FA:16:6B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1010::/44
Signature Algorithm: sha256WithRSAEncryption
97:28:22:13:d1:dc:0b:96:8f:5b:1d:49:14:95:ce:e4:1c:1c:
33:cd:4b:91:c6:ec:17:2e:e1:42:e1:36:db:84:d5:51:12:ed:
ea:ab:20:e2:6c:0e:18:c1:14:00:b5:8f:c3:65:66:2c:25:58:
fa:36:bd:98:66:e2:76:30:0d:3f:72:95:07:4d:0d:f4:5a:7a:
03:d5:a0:7d:1e:8b:18:b3:27:23:d0:79:4d:e1:40:fd:74:e4:
ba:82:5a:3a:df:4f:af:f2:77:2b:1e:08:bf:1e:d3:ce:18:41:
55:10:ed:64:03:40:05:52:63:f6:71:42:28:7e:63:70:8e:89:
8a:87:84:06:23:9d:e6:8e:5d:bc:46:66:ec:38:00:6d:7b:81:
a4:cb:49:10:86:c0:de:ba:3d:ef:eb:16:2a:0f:f7:31:df:97:
f8:f7:b3:44:e5:78:46:ee:05:7d:09:4d:c9:f0:83:b4:49:7e:
e9:a0:80:1d:38:dd:fe:c2:3f:8b:00:1b:f4:f7:09:20:aa:9f:
b5:c9:34:ec:99:99:04:40:8f:60:e1:15:bf:48:e0:e1:dc:a5:
24:cc:44:5f:1a:bf:3b:0b:1f:47:bc:78:a5:b5:b5:59:f7:aa:
ba:cb:dd:79:70:b7:74:1d:34:4a:06:5a:f3:e3:27:96:42:0b:
98:df:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:30 2024 by rpki-client on console-ams.rpki-client.org