Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: +1M1gaMmWmzpg4FLQAPXPvt7TcYfy+VI8kuY1Ped48I=
Subject key identifier: F0:6F:5B:E2:C2:90:BC:7C:CD:78:95:DF:49:E7:2E:A0:92:3C:0F:3B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7DDBD81C8B594270996DF5A5B37B87F2253092F7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Sep 2023 08:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:db:d8:1c:8b:59:42:70:99:6d:f5:a5:b3:7b:87:f2:25:30:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=76d6378f4fcacc33c0ee7ef87006983d27bb6cd7b5d5da545df5965ba7ae70fd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:75:41:8e:68:1e:74:e0:2a:7a:dd:94:e7:
c6:3e:7b:fb:11:31:65:ea:b0:90:25:d9:ff:33:61:
14:c1:23:10:f5:cf:b2:1e:4c:bc:0d:83:14:fe:df:
c1:3c:cc:bb:27:e4:82:67:9e:11:bd:3f:6c:a1:cd:
e5:db:e5:74:be:4f:55:fc:12:35:09:7a:f6:84:9e:
58:69:e5:62:fc:2a:01:67:46:dc:3a:23:0d:ae:e3:
e0:f1:c2:bc:f8:87:6e:8e:cb:50:8f:79:16:66:fa:
de:b7:e4:0a:39:3f:17:41:53:dc:ec:b2:f4:db:28:
57:82:6e:7d:0f:d8:a1:b3:d8:9d:22:db:1c:8d:dd:
ad:a1:20:f3:e6:97:9d:5b:69:f3:9f:c5:c0:b5:9b:
4e:15:b9:8e:87:10:89:d4:8d:fa:67:04:4e:c5:23:
8e:f1:af:93:d4:8f:3f:67:5f:8f:27:ff:d4:72:1d:
47:a0:5f:de:ad:dd:28:2d:53:da:cf:7c:37:6b:fc:
84:10:c1:0e:b1:f2:83:1e:30:d9:68:29:2c:86:45:
c4:f7:21:a8:63:30:54:03:69:9d:47:5d:34:10:47:
7d:8a:2c:dc:a3:bd:68:46:77:b0:a4:27:67:8f:16:
b1:8e:14:44:a6:26:3e:b2:8d:93:d9:ec:3c:ee:e2:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6F:5B:E2:C2:90:BC:7C:CD:78:95:DF:49:E7:2E:A0:92:3C:0F:3B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:e7:c7:2c:02:f1:4a:6c:be:30:0b:87:2a:25:4a:9c:1d:c0:
5f:6f:9d:5f:0c:fe:97:d8:71:da:41:8e:fb:1d:c4:70:a9:e4:
f9:68:d7:99:b4:b5:bd:4d:a5:e0:40:50:c5:ca:e5:c8:9e:e2:
f3:5d:09:31:e2:04:4e:17:e5:29:1e:1f:6b:b9:fe:72:48:44:
c7:f6:e3:e1:09:66:ca:a1:a7:8f:ec:55:de:9e:56:c6:07:8b:
af:53:9e:07:99:4b:5e:3b:f4:dc:10:43:4c:9c:8a:92:eb:af:
d1:af:84:fa:d0:58:3d:ea:07:bf:6b:56:e5:4c:7e:85:34:55:
f0:7a:3f:ef:8f:3c:c7:47:25:aa:32:12:05:ce:0c:d9:98:e1:
08:69:5f:7a:d5:4e:4b:c6:2b:1b:b7:c2:c7:ea:0e:85:c1:9e:
42:2e:67:3a:f0:ca:e1:e4:4f:d1:75:d7:8c:ed:a1:67:ae:2d:
9a:00:82:c9:52:42:d6:3e:15:2c:57:6b:8e:ed:bf:e8:2b:f1:
ed:3a:fa:b9:cd:56:ae:56:13:d5:bf:e9:b2:a0:d8:8a:1d:fd:
1d:c6:06:d2:4f:11:c2:81:b9:28:ab:d9:80:5e:a8:96:8a:5a:
4e:b0:d8:a2:59:01:bf:15:8d:8e:3a:87:9a:2b:37:3e:e7:df:
2c:e2:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 15:47:32 2023 by rpki-client on console-fra.rpki-client.org