Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: oW834BO9PGQh0iJcN7qg3COa/ZgBSKsiXo+fwjnMr38=
Subject key identifier: B5:99:85:68:0E:93:51:EF:09:8C:07:52:53:58:BD:4A:94:D8:71:7E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7DEF90B0DA4A0E3BBE6E8EF07D923DCCBB2D83AC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ef:90:b0:da:4a:0e:3b:be:6e:8e:f0:7d:92:3d:cc:bb:2d:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:a1:6e:f2:f1:59:2c:ed:81:14:39:a7:3b:
b5:af:5d:0c:04:a8:69:c5:08:4a:af:33:c9:ca:ae:
51:e8:8f:b0:81:69:14:15:c4:62:0a:b6:26:78:96:
91:ea:60:ad:fe:d1:43:e4:94:61:8f:a4:e5:4f:a7:
19:cc:12:ad:5a:b1:f1:4f:8f:75:ed:17:e4:1d:c5:
34:c5:22:df:cb:01:18:7c:7b:48:c7:3c:fb:31:8a:
78:ec:e0:5c:8f:d2:04:52:f9:f1:a6:47:47:cc:ef:
d2:69:26:3e:a8:35:cd:ed:92:a4:e7:da:d2:26:9b:
b0:dd:95:6d:2f:f6:61:88:7d:62:7d:4f:54:2c:62:
07:43:44:6b:e9:be:d7:c3:bd:87:9f:29:2c:8a:42:
c5:41:44:97:1c:d8:60:f3:11:43:1a:50:0b:fd:26:
ac:be:2a:bc:9d:46:de:71:4f:55:82:a4:41:c8:a4:
d9:00:e4:ca:84:e7:9c:24:53:ad:62:18:a6:2d:f3:
c7:16:5f:d4:4a:73:3a:e3:80:53:4a:d1:38:1d:a4:
03:5f:ef:9f:da:c7:69:87:fa:07:91:5a:06:ce:18:
b8:22:0e:b7:d3:88:88:76:d4:2d:de:82:58:07:bb:
39:1d:3b:05:cc:cf:70:c8:af:43:bc:5f:05:93:43:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:85:68:0E:93:51:EF:09:8C:07:52:53:58:BD:4A:94:D8:71:7E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:e3:bb:8b:fb:64:60:1c:dc:b4:0c:da:92:b4:7d:b7:c7:7e:
b4:29:f9:ae:3b:c3:cb:90:b3:b5:a3:dc:f4:cd:15:9c:be:9b:
a5:5d:f6:8a:73:df:70:7a:5a:84:d1:06:e4:2b:7e:48:0a:bf:
19:29:f3:6a:e8:c3:fc:c0:db:73:c9:cb:d1:b9:27:53:6c:a6:
7e:f7:53:c8:27:7a:1d:ff:ba:91:1b:05:3e:35:99:ec:f8:4e:
fb:44:09:a9:e0:73:73:34:2f:4e:82:3d:72:38:e8:f2:0a:8f:
99:4e:7f:a4:d2:07:d1:39:bb:29:ce:e6:8e:cb:dd:8d:49:26:
29:e4:5e:12:69:cf:42:67:27:ee:db:c0:8b:a5:2a:f2:15:df:
37:24:b6:77:a1:e9:d2:67:98:eb:d7:3e:f2:11:d8:e4:a1:8f:
ca:cb:bb:08:26:89:06:d8:a6:d5:7c:a7:9f:95:78:04:e2:6f:
c8:4a:87:71:c0:1d:49:a0:c9:91:33:91:d2:91:4b:81:21:79:
b2:22:32:e1:fb:d7:ed:82:48:92:68:55:bd:ea:ed:0e:83:ab:
e1:17:78:71:25:63:ca:97:9e:f9:e3:c4:47:78:da:aa:41:ed:
16:c7:ce:2e:63:6c:f7:1f:e5:61:74:ee:de:d6:37:fb:d3:0c:
0d:b4:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:09 2025 by rpki-client