Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
File: ac15d5af-b90d-456e-b53e-55f7c17fc512.roa (raw, json)
Hash identifier: n7Mx0t8AQre2H1Pii22axtxrD7Iy7Mbx3By3UvgaiVo=
Subject key identifier: 09:E3:9E:4E:F6:42:58:14:8C:E0:72:5D:B3:EA:E3:09:05:0B:BC:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 60B73870843C6D3F1F96F50CF70F4587FFD84E95
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:38:70:84:3c:6d:3f:1f:96:f5:0c:f7:0f:45:87:ff:d8:4e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=210feb80b01a15dabb6d33e2104dcb414eb01170b3c9e5b34751b24fee70099d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:ec:65:0a:89:75:b7:db:ca:8c:17:f3:0b:
14:e4:ad:bc:34:6b:22:67:92:17:a5:e6:f0:7e:80:
e8:7b:24:bb:20:9c:0f:23:0f:90:41:7e:f4:74:00:
21:5b:53:2d:ae:f6:9f:f3:04:f8:47:39:85:c4:da:
0e:9f:24:ea:b6:be:1d:ae:8b:81:54:cd:74:2b:34:
80:1d:bc:74:d0:a9:3f:95:51:9c:22:39:09:78:55:
2e:1f:c8:f7:b9:13:f6:96:49:74:9e:ee:58:54:41:
d4:75:1a:40:c4:29:31:08:d5:8c:2f:ff:0c:d4:ce:
c2:51:75:0c:36:b6:e2:a0:f4:9f:d9:19:91:a2:73:
e2:c5:de:40:48:df:bf:86:27:01:55:e4:1c:f9:02:
5f:13:08:3d:88:ff:36:51:dd:54:97:12:5a:38:9c:
b1:ec:a3:f9:70:a7:61:8d:45:3c:58:3b:97:48:0d:
c6:89:b0:98:6e:4e:0a:d2:dd:42:0f:45:58:17:10:
08:e6:82:49:6a:b9:bd:80:c7:63:ff:00:15:a5:10:
7a:66:bc:5b:fc:b9:89:a9:0c:1b:8f:45:dc:c1:d7:
4d:43:8e:ac:b0:7b:35:cb:41:e8:94:51:bf:bb:6a:
04:69:8f:b9:4c:a2:ab:49:cb:90:a9:6b:b3:2b:39:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:9E:4E:F6:42:58:14:8C:E0:72:5D:B3:EA:E3:09:05:0B:BC:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:84:95:af:97:48:fa:97:ce:81:26:27:2c:5f:34:7e:ed:fa:
8f:55:93:cf:75:2d:b0:e8:c4:d1:e3:fc:24:93:1e:28:58:55:
69:c0:19:bd:79:2c:c1:5e:94:0a:7f:84:68:c7:cb:3d:eb:3d:
0a:b0:4b:bd:ae:ba:5a:ba:5e:9c:f8:4d:09:3e:db:b0:f6:f1:
f0:8d:a1:0c:e7:87:3f:95:5c:61:c0:5c:05:eb:74:b8:e8:ab:
e9:12:42:bd:0d:07:2a:21:11:b1:a0:71:63:70:0d:f8:1a:6a:
58:50:fa:66:72:c6:79:d3:be:31:9d:2d:2c:24:e3:48:c6:46:
94:e6:d5:54:21:7c:b2:b0:44:91:d5:1a:c9:be:90:d4:07:60:
22:22:7c:fc:55:89:d0:a1:fa:3a:d0:10:92:23:56:78:c6:72:
d3:ff:06:ef:bd:16:d6:e8:66:fe:56:55:8d:17:84:5d:05:8b:
5a:76:fa:b7:d5:de:75:ad:35:05:5e:ba:ed:31:94:0e:5a:f9:
5e:4e:ab:0b:e9:b0:0a:95:bf:f3:19:df:57:9c:4a:fe:5c:fb:
85:86:6a:90:ca:25:81:0c:00:26:9c:78:d1:40:53:01:fc:89:
41:9e:c3:38:ce:27:61:72:87:1c:75:d2:8b:90:7d:e7:c0:79:
1c:17:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:29 2024 by rpki-client on console-fra.rpki-client.org