Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
File: ad3850cc-845f-4fcd-8675-43476aa1af0b.roa (raw, json)
Hash identifier: py1QtRsFtVEExsiobqL2A4WHT/pgf5mcblwnUNRahoI=
Subject key identifier: 66:B1:91:E6:A0:F4:26:A1:50:C2:0E:41:50:33:67:9D:FE:93:BE:03
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6C07A4C8F622BD70262BCBD30C930329C19B56A9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
Signing time: Mon 04 Nov 2024 00:00:00 +0000
ROA not before: Mon 04 Nov 2024 00:00:00 +0000
ROA not after: Mon 09 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:07:a4:c8:f6:22:bd:70:26:2b:cb:d3:0c:93:03:29:c1:9b:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 4 00:00:00 2024 GMT
Not After : Dec 9 23:59:59 2024 GMT
Subject: serialNumber=920f65617825cf6bf70ddf6c8bc25d5ca3d167d8278b6f1a17d443a75b88fc22, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:49:35:c8:c0:c9:a4:a6:ec:9d:ec:35:d6:
db:5c:e9:56:f8:e9:d3:a9:d2:cd:23:02:8b:59:e3:
35:f8:59:30:ba:87:52:97:ee:36:ba:aa:00:c1:d0:
cc:18:92:11:78:33:c4:07:ec:b0:b9:85:c8:1d:c8:
23:f9:5f:9f:ee:d9:1e:4e:ff:7b:5b:59:12:8c:d4:
2b:1f:d3:60:22:5a:21:fa:d5:98:ca:fc:ee:4a:b5:
77:9c:8c:ba:59:82:e2:db:0e:60:e5:f5:f9:2b:04:
30:a5:5a:44:45:58:c6:e3:e8:73:38:76:15:d8:77:
7d:2c:00:5e:a0:8d:cc:2d:9f:af:ed:db:0c:8c:4a:
36:c4:41:bf:f3:49:c6:e9:9a:16:1e:fb:f7:76:f1:
23:17:2c:26:ab:eb:32:89:02:7b:c7:b9:23:bc:cb:
bc:42:07:af:de:fd:c2:82:61:49:0c:8b:c0:59:8b:
4e:a7:97:d9:b3:38:40:0c:dd:2e:3f:20:ab:dd:27:
3a:09:ba:71:03:28:3c:84:97:bf:6c:56:3d:7a:55:
36:f1:96:c8:95:d0:b9:d0:e9:11:db:1f:b5:e2:08:
24:55:47:44:0f:dc:d3:55:5a:21:1b:78:da:e5:e3:
89:d7:60:b9:46:7b:ec:a1:57:91:c2:b0:4f:46:bc:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:91:E6:A0:F4:26:A1:50:C2:0E:41:50:33:67:9D:FE:93:BE:03
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ad3850cc-845f-4fcd-8675-43476aa1af0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
50:21:4a:82:02:0b:b5:c6:f0:71:a5:d3:36:5c:ad:68:02:10:
c0:ee:ad:0a:8c:21:bd:ab:2a:ae:6e:ca:26:a0:38:65:69:3e:
ab:85:36:0e:b7:b9:80:85:24:66:fc:27:68:40:3d:57:af:41:
c2:06:38:89:95:41:ae:73:01:29:aa:91:99:70:c2:68:89:ce:
f1:a7:f7:ae:c1:0f:db:1d:6d:dc:9e:67:c4:1e:8d:35:a4:f4:
dd:10:de:8c:fa:68:d7:31:5c:09:ca:1a:5d:ec:fe:d5:7e:80:
f5:db:bf:44:c0:e2:97:f5:fd:6c:ce:5c:81:45:78:d3:74:6a:
4d:45:62:82:ab:f5:0a:71:0d:4b:3b:7c:3d:e4:65:bd:0c:d0:
d4:52:26:19:8a:dc:4d:49:8d:ed:32:b6:8b:45:2e:ca:36:86:
3a:07:6d:61:4e:92:6b:f4:0f:c1:61:c7:c3:a1:ac:b0:7f:5f:
bc:0a:f4:1d:81:b8:bc:98:8b:ea:17:c4:11:9f:c2:29:09:0e:
30:7d:8a:8c:d7:ec:bf:2b:b3:94:a2:87:51:de:bc:db:76:20:
b8:c7:69:d4:b5:c7:54:fd:46:f6:be:89:89:64:46:09:5e:c0:
05:96:00:ed:f6:c6:4c:98:41:23:f1:22:f8:98:ce:99:14:6d:
62:f2:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:07 2024 by rpki-client on console-fra.rpki-client.org