Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
File: ad3850cc-845f-4fcd-8675-43476aa1af0b.roa (raw, json)
Hash identifier: dzfyjnnjkVfZRzACRwL5u7vohYx2d1RTRwayjTgJEcI=
Subject key identifier: 21:9E:72:14:B7:94:7F:D9:81:C1:9F:91:A1:D1:ED:E3:2E:45:EA:8B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2BC1B29DA80040A204588AB6F65ACAC1DAF3395C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 18:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c1:b2:9d:a8:00:40:a2:04:58:8a:b6:f6:5a:ca:c1:da:f3:39:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=d5282ff85c1a40c02f44749092c7811704e82f2731a42ed65fd07191a00d0379, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:ab:68:fa:55:c6:77:e8:99:11:3b:13:b0:
3e:1f:3b:48:30:a4:1b:e9:bc:fe:b3:1f:1c:61:67:
35:3d:92:0a:4d:0f:0f:46:0c:8d:69:10:20:47:eb:
07:f3:90:70:b2:26:17:d3:f0:3c:79:4e:ab:ae:2f:
4e:16:1d:f5:a2:e2:ca:53:57:39:1b:4e:dc:67:26:
f3:c4:dd:21:bc:a0:62:1a:b1:6a:4a:e7:ff:fa:ca:
e9:b0:bf:ab:89:61:68:61:27:91:68:fe:54:5c:9f:
9b:c6:79:18:9f:dc:02:72:b3:7d:c9:b3:d1:e5:16:
82:09:8c:0f:4e:70:0d:9d:40:6c:20:24:b9:bf:db:
5f:0d:06:5c:93:1e:96:1d:2f:7a:37:c1:bd:e4:26:
28:b6:c0:f8:67:0f:17:07:fa:ff:50:69:fe:76:89:
14:33:60:c0:e9:a1:a9:8f:12:6c:41:17:fe:64:8f:
98:30:52:2d:51:cd:85:cb:53:75:23:d0:0e:c0:02:
aa:55:ad:a2:91:9b:cb:d1:96:5b:6e:eb:fe:38:84:
18:13:71:ae:fa:36:06:6a:09:e6:69:ca:5c:36:80:
3c:15:54:6c:bb:dc:f2:e1:e9:95:82:a5:fe:e4:36:
64:1f:92:e2:4c:4e:e2:16:0a:b9:88:d0:19:9f:65:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:72:14:B7:94:7F:D9:81:C1:9F:91:A1:D1:ED:E3:2E:45:EA:8B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:14:63:66:af:85:a0:53:4b:9e:bb:d9:83:c3:a5:bb:6c:06:
b4:20:84:2d:a6:2a:42:5e:70:a6:55:29:88:76:3f:20:44:99:
05:4b:a0:c9:91:d4:dc:10:7f:b9:83:e3:ae:7b:c9:55:7f:78:
dd:e4:a6:a6:01:46:05:ca:7d:a3:12:6d:33:be:ff:bb:1c:36:
56:b0:46:f9:ed:d9:fe:68:83:cc:7e:8f:70:18:ef:a1:fe:a5:
48:5e:61:66:71:1a:10:43:35:5b:0b:e3:43:76:ee:dd:47:13:
36:89:5d:3f:54:03:1d:e0:a5:40:f0:35:20:0f:11:6b:2c:46:
46:03:16:7d:63:1a:5b:3d:8f:7f:1f:b7:e2:38:95:68:d8:ca:
9c:81:e1:4b:48:b0:80:79:1e:a5:fc:3a:f7:ce:73:eb:82:da:
4f:4a:06:ba:f7:30:6c:39:df:ff:78:6c:4b:01:bb:33:78:d5:
c2:3d:73:89:65:e8:d6:60:a6:a3:2b:04:88:18:6a:89:c6:e5:
0c:a5:77:68:d2:b8:ac:2a:15:d6:8a:a5:d9:c4:7e:c7:d9:2b:
80:38:7c:58:ba:e0:8e:dd:16:d6:e1:b2:9b:dd:84:42:aa:dc:
ca:e1:3d:ad:85:17:9d:fc:d8:e7:74:64:b4:c5:93:88:a5:d9:
80:2e:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:19 2024 by rpki-client on console-fra.rpki-client.org