Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/baaac50b-ec4c-4064-ae5f-9d0c16806d61.roa
File: baaac50b-ec4c-4064-ae5f-9d0c16806d61.roa (raw, json)
Hash identifier: D4Tar2lP/7HtiHkGmkxY/0EjgmKMMXjyDrEkV5/ptdI=
Subject key identifier: C0:65:1B:46:03:8E:83:A1:41:09:3E:00:86:CE:A5:C3:BA:B0:EA:ED
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5E9668658006025EE98A7376EFC35BCA62347424
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/baaac50b-ec4c-4064-ae5f-9d0c16806d61.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 194.234.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 18:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:96:68:65:80:06:02:5e:e9:8a:73:76:ef:c3:5b:ca:62:34:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=37847fbd6c096f98bdd6bf9a4f5d870d36c8763be37555276c0af3eafceb51c9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:91:a5:08:8c:7b:ae:87:61:ae:bb:a2:89:
fa:33:5b:12:2a:3d:91:af:09:46:a4:f2:da:4e:28:
0f:0f:ad:3c:61:50:c1:44:94:fa:21:5c:d2:21:c1:
de:ec:2f:74:d3:6d:d2:0d:8f:2b:c7:64:91:cf:06:
d8:42:eb:c9:dc:12:ca:df:8f:a6:0a:5f:81:4b:30:
bf:07:bc:1a:00:4e:99:b2:c5:9d:68:17:31:dd:ac:
b9:e5:ec:a4:71:f3:ce:05:a9:46:ec:bf:3a:64:79:
a7:3e:f9:5c:c9:71:8b:a4:85:56:bc:4a:73:0a:63:
dc:66:a0:5b:ac:9f:e2:e7:32:b6:a1:59:8e:16:5d:
27:65:da:bf:0b:7b:9e:90:9e:54:85:8a:49:b4:97:
73:d3:20:58:f6:33:84:3f:81:67:cd:c3:1a:ce:d9:
ff:87:5b:7f:43:4d:b1:af:12:2d:f3:e7:f4:1a:4a:
a7:33:54:ae:e9:b7:cf:49:34:73:f1:61:d7:a0:59:
b5:2b:7c:b9:1a:a5:e4:bf:a3:41:4a:24:14:9e:2f:
63:e6:29:92:2e:98:99:31:31:62:4d:92:ab:6b:8c:
16:50:ec:55:e1:5b:73:e7:a3:e1:db:64:5b:03:03:
58:6d:7a:71:22:22:40:b3:ff:f9:c4:0a:d0:1d:9e:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:1B:46:03:8E:83:A1:41:09:3E:00:86:CE:A5:C3:BA:B0:EA:ED
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/baaac50b-ec4c-4064-ae5f-9d0c16806d61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.234.0.0/15
Signature Algorithm: sha256WithRSAEncryption
33:f1:7e:87:dc:3f:14:4d:b1:91:a8:b2:72:f5:f2:db:0d:4d:
a2:b0:aa:ec:6f:b3:44:47:09:3c:0e:4a:28:a4:bd:99:64:e7:
b3:fc:8e:8b:80:48:b5:c9:01:38:eb:fc:d0:87:88:1d:f2:c6:
02:21:06:1f:ea:6f:86:4a:8a:7e:d0:a4:79:69:e4:b4:16:a6:
0d:0e:98:35:86:33:59:f4:c3:d1:fb:8e:83:cd:f2:c3:81:63:
9b:99:f0:e8:4f:14:a6:76:f1:13:b4:e9:ed:a5:78:cb:2f:f1:
be:60:e5:bb:aa:fd:f5:6a:93:ed:09:7f:21:46:e4:07:c8:b3:
af:b8:30:7a:68:04:78:0c:81:ba:e9:a8:7f:ea:de:d3:b1:5e:
a3:8b:3d:4f:86:a2:2c:9e:52:e0:a2:64:3d:17:2f:95:9d:3d:
4c:08:92:f4:1a:95:0e:7a:cb:f1:1d:25:ad:f7:08:1f:cc:d2:
1f:ff:0f:f9:1d:2b:b0:df:3b:ac:27:98:f2:c5:74:51:d3:12:
d9:4b:37:5c:e8:c7:93:30:bb:6c:96:16:22:76:f7:71:eb:3a:
34:b0:f4:c6:7e:2f:0f:79:ba:c3:fb:3c:a5:f5:b9:d3:61:a8:
aa:a2:8c:13:25:94:73:f7:a1:b5:a6:c0:a7:fe:65:09:eb:37:
00:67:0f:b6
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUXpZoZYAGAl7pinN278NbymI0dCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA0MDEwMDAwMDBaFw0yNDA1MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDM3ODQ3ZmJkNmMwOTZmOThiZGQ2YmY5YTRmNWQ4NzBkMzZjODc2M2JlMzc1
NTUyNzZjMGFmM2VhZmNlYjUxYzkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKw9kaUIjHuuh2Guu6KJ+jNbEio9ka8JRqTy2k4oDw+tPGFQwUSU+iFc0iHB
3uwvdNNt0g2PK8dkkc8G2ELrydwSyt+PpgpfgUswvwe8GgBOmbLFnWgXMd2sueXs
pHHzzgWpRuy/OmR5pz75XMlxi6SFVrxKcwpj3GagW6yf4ucytqFZjhZdJ2Xavwt7
npCeVIWKSbSXc9MgWPYzhD+BZ83DGs7Z/4dbf0NNsa8SLfPn9BpKpzNUrum3z0k0
c/Fh16BZtSt8uRql5L+jQUokFJ4vY+Ypki6YmTExYk2Sq2uMFlDsVeFbc+ej4dtk
WwMDWG16cSIiQLP/+cQK0B2e3H8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTAZRtG
A46DoUEJPgCGzqXDurDq7TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YmFhYWM1MGItZWM0Yy00MDY0LWFlNWYtOWQwYzE2ODA2ZDYxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAcLqMA0G
CSqGSIb3DQEBCwUAA4IBAQAz8X6H3D8UTbGRqLJy9fLbDU2isKrsb7NERwk8Dkoo
pL2ZZOez/I6LgEi1yQE46/zQh4gd8sYCIQYf6m+GSop+0KR5aeS0FqYNDpg1hjNZ
9MPR+46DzfLDgWObmfDoTxSmdvETtOntpXjLL/G+YOW7qv31apPtCX8hRuQHyLOv
uDB6aAR4DIG66ah/6t7TsV6jiz1PhqIsnlLgomQ9Fy+VnT1MCJL0GpUOesvxHSWt
9wgfzNIf/w/5HSuw3zusJ5jyxXRR0xLZSzdc6MeTMLtslhYidvdx6zo0sPTGfi8P
ebrD+zyl9bnTYaiqoowTJZRz96G1psCn/mUJ6zcAZw+2
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:19 2024 by rpki-client on console-fra.rpki-client.org