Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/be32e063-2484-4f24-b3d4-21b5c8f55455.roa
File: be32e063-2484-4f24-b3d4-21b5c8f55455.roa (raw, json)
Hash identifier: ke8XlWwGSM/8ZLYlzu7zk62glxF0/3t+go7hcr57DCI=
Subject key identifier: 3A:CB:98:80:85:CA:C6:68:10:18:EC:93:B8:6C:1E:94:C9:C6:F9:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 281A80F11C91E4754C0A371F9BFF914A160469F4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/be32e063-2484-4f24-b3d4-21b5c8f55455.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.139.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1a:80:f1:1c:91:e4:75:4c:0a:37:1f:9b:ff:91:4a:16:04:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=4aabc9dece3214b60016bd3bdb6125a3596392dd09440ff092b738aadcf9435f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:66:f1:4f:04:f1:3e:18:f9:28:f1:8e:c4:
da:75:d2:1b:d4:95:69:6a:34:c6:be:3c:48:09:0b:
6e:cd:fe:85:67:9e:ae:fb:ed:3e:60:5c:3f:8f:a1:
5b:37:1d:04:a4:5c:02:2f:32:bf:b1:54:8a:8d:93:
0c:fd:2d:56:50:48:16:66:e0:bc:76:84:97:09:cb:
21:55:af:57:1a:ef:f6:d6:23:d4:29:21:c5:63:9f:
77:69:d8:ad:39:ca:a3:51:d1:08:42:28:ac:03:d6:
23:c3:2b:8f:d2:ed:41:8b:a3:73:84:12:3f:26:17:
22:86:d8:33:18:2d:89:d6:78:63:88:a3:ec:6d:0e:
27:6a:81:21:f7:77:d8:b9:09:94:4b:7a:69:bd:ce:
70:6b:e0:c5:1b:54:b7:f1:53:1d:a2:64:d8:58:a1:
3c:78:6b:f5:ee:72:16:0a:8a:db:2a:29:bb:64:e0:
ee:ee:e3:f9:2c:5e:8d:e9:e5:8c:c9:94:14:4c:8a:
c7:b1:ca:58:83:56:35:e4:8b:a0:eb:ea:90:f6:f2:
4d:88:7a:07:68:cf:69:a4:75:39:4b:67:86:b3:91:
3c:b0:ff:89:aa:8c:c2:f0:1a:54:b6:ca:6c:33:5e:
43:bd:f5:bc:93:fa:92:9d:cd:e4:8a:59:b6:e1:9f:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CB:98:80:85:CA:C6:68:10:18:EC:93:B8:6C:1E:94:C9:C6:F9:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/be32e063-2484-4f24-b3d4-21b5c8f55455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:9f:1c:79:13:51:d7:ee:29:60:e4:5a:f7:81:f6:02:ae:32:
3d:37:79:ee:6c:a6:4d:e2:5f:26:22:b3:7c:6e:f6:e6:24:af:
a5:54:5b:87:f8:a3:10:57:f1:ca:7e:34:bb:fd:5b:62:51:d4:
e9:e5:41:08:ca:c9:c5:aa:07:26:67:73:4b:69:72:ed:46:ee:
cc:58:92:3a:ce:43:ff:e4:e8:e9:fe:d1:cd:0f:fa:c9:cb:3f:
28:a4:0b:fc:b2:0c:c0:7f:98:eb:7a:87:73:93:88:af:31:92:
f4:46:92:39:a3:24:05:49:6f:e5:3e:04:e2:bb:84:49:99:f1:
79:88:bb:05:49:7d:e7:e8:6d:a8:3d:0b:70:0b:22:b3:4f:4e:
44:18:19:10:e3:e8:63:11:f6:d7:00:87:58:a3:da:e6:e3:fa:
58:45:ae:c9:2f:3e:2e:9a:85:3a:05:c3:43:ee:fb:ae:d4:7a:
19:cd:5b:95:8a:56:97:21:6d:68:1a:09:79:e1:82:41:95:5d:
29:90:c7:d8:fa:93:48:ca:44:19:0d:63:04:41:7d:6b:0c:fe:
c5:05:6a:ec:c4:84:af:1f:0b:65:11:be:5a:48:74:5a:34:35:
57:dd:65:e1:e9:04:83:12:00:70:13:d8:da:53:f3:df:55:f1:
f6:c5:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org