Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ba68fedc-c9ae-4605-8ac5-3b7e5b85efa0.roa
File: ba68fedc-c9ae-4605-8ac5-3b7e5b85efa0.roa (raw, json)
Hash identifier: JxrsEnIejgEXJyr0k4J0Dwwx4Sq35kbT0OWVem4MUko=
Subject key identifier: 22:52:26:C2:BB:2F:72:12:45:69:BA:E4:94:17:55:9E:4B:BE:12:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B59F26D4541B3D9D8959465D9F264EFD5FB06DE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ba68fedc-c9ae-4605-8ac5-3b7e5b85efa0.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:59:f2:6d:45:41:b3:d9:d8:95:94:65:d9:f2:64:ef:d5:fb:06:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=a6a0e7f62bcbe4bdf4c6f181f9b314a285445b6058c42c7e3af09f82ce06387a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:34:11:dc:41:4e:03:6e:bf:c0:54:c5:a7:
3e:7b:dc:c9:5a:06:6b:15:66:15:6d:d2:ae:70:3c:
0f:64:0b:2b:a0:24:7f:9a:20:eb:2a:ea:88:a9:1f:
5a:50:7d:0d:eb:d5:d4:b9:3e:1b:5a:41:53:99:b8:
1a:de:af:7b:95:85:ec:93:7d:48:8c:c7:9c:a3:21:
07:fa:82:37:39:b3:b9:e3:e4:5c:c3:cb:61:24:74:
af:61:39:6d:c6:a4:7a:9b:09:87:f2:2f:75:db:bb:
ad:2a:e3:3a:9b:b6:5b:76:11:5d:ce:2e:f6:65:f2:
b2:85:2e:c9:0a:a6:2c:0a:d0:d4:d3:5a:73:87:1b:
0d:f0:e9:fd:3c:17:70:f4:7e:ec:0a:77:92:dd:ef:
74:92:df:be:61:60:d6:6c:1f:e9:1f:37:57:f0:17:
50:e4:1b:2f:39:19:c9:34:1c:85:7f:d4:aa:ec:e1:
aa:cb:6d:0d:74:73:a1:fa:79:cf:e1:6e:50:70:47:
bd:de:da:35:ba:f5:e9:12:38:20:90:0a:34:c5:08:
ea:41:68:73:88:00:75:c7:32:62:53:e8:22:68:1e:
0e:76:74:e7:a9:a9:c6:8c:64:29:e2:31:0f:74:f2:
14:3e:49:3d:83:e3:f3:36:2f:3c:92:54:2b:50:5a:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:52:26:C2:BB:2F:72:12:45:69:BA:E4:94:17:55:9E:4B:BE:12:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ba68fedc-c9ae-4605-8ac5-3b7e5b85efa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:08:15:74:36:4e:43:a4:9e:74:80:65:3b:05:6b:7d:88:dc:
48:47:20:9f:06:f6:78:84:c0:0f:fc:1c:56:c4:bd:55:5c:79:
6b:44:af:7b:0b:c3:e9:8e:c0:eb:04:54:a9:ea:3c:42:a1:2c:
7a:ce:a0:c4:e0:c4:0b:a3:53:23:22:9b:ad:c3:eb:0c:5c:f1:
31:fe:d3:80:a2:69:3f:b7:48:ea:ca:a5:c1:03:8d:19:47:d3:
7d:8f:ec:19:5d:d4:f9:03:cf:bf:08:34:d4:74:4e:5e:23:3a:
05:08:02:dd:1f:d5:70:52:03:10:24:40:5e:e8:43:d3:db:3c:
43:57:e7:d9:85:f7:88:04:ee:df:9c:18:27:f3:db:7f:00:a5:
65:9c:79:7a:e2:19:2d:62:63:ec:33:3f:e7:aa:4e:a3:95:b4:
99:f4:84:0f:5c:c0:02:a2:15:25:6c:02:28:d3:d1:b3:c1:b3:
cb:52:3d:88:9a:84:45:f8:49:e4:39:8b:90:90:e7:7c:8e:37:
83:09:27:89:59:e4:0b:0a:c0:b8:79:07:93:be:c6:bc:9f:72:
44:2b:a2:00:be:2f:56:0b:c6:05:26:86:a2:91:09:25:65:6b:
1b:f1:bc:99:3d:93:6a:9e:34:7d:58:4c:60:63:e3:9c:5c:25:
7f:ee:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org