Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c6e5629f-2225-4c0c-962b-6950ec611f11.roa
File: c6e5629f-2225-4c0c-962b-6950ec611f11.roa (raw, json)
Hash identifier: 4rZ46DzN/XS7ksxp4O+vySeakUFWLR/klQtwn3tr0/8=
Subject key identifier: 94:AB:63:02:1C:E9:47:8A:46:FC:B4:AA:17:F7:3A:9F:2C:9C:A1:6B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3373950F41596A7D2BCB2E9345282103F4A4369A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c6e5629f-2225-4c0c-962b-6950ec611f11.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.122.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:73:95:0f:41:59:6a:7d:2b:cb:2e:93:45:28:21:03:f4:a4:36:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=897a9a75bf519b83a51e9dd816c3cea737943d519ae0de36ce2cd1982e032c80, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:44:33:7b:fb:74:99:1f:d8:8a:93:c4:dc:
8d:c0:e6:e6:5e:22:1c:86:9d:88:09:58:17:eb:8e:
be:a3:1b:ef:ae:0f:76:ea:5d:c2:dd:76:be:63:87:
55:9f:5f:eb:cf:42:9e:29:da:ce:ee:ba:f8:6f:80:
29:bb:1d:e2:ce:1f:e0:9e:ec:eb:63:ef:94:64:e8:
67:e5:00:fd:95:d1:c0:1e:21:3b:4c:a8:00:81:73:
b3:54:fe:8b:3a:fc:7c:db:a3:b5:73:0b:a3:be:d4:
7c:23:99:fc:82:7f:50:7d:6b:9d:55:2e:13:f5:c3:
ba:eb:76:35:d8:21:44:3c:cd:ef:dd:af:65:5f:1e:
df:eb:2f:8b:dd:9f:f4:8d:89:5f:f7:b3:7f:fa:51:
10:30:f6:9e:e0:e9:0e:e7:54:21:49:33:2e:61:2d:
ec:7f:23:6b:74:ad:fa:ed:ad:13:15:50:ee:be:0d:
a4:68:0d:87:03:13:45:7c:f6:e0:fb:9f:f1:61:9f:
ac:7f:90:77:62:a4:04:2b:bb:c3:e5:c8:b0:aa:b8:
4f:25:36:b9:fc:f1:9a:86:b4:e1:80:44:7d:25:4e:
c1:27:5a:bc:2a:96:9e:fc:90:42:69:ed:19:a6:53:
d1:bc:72:76:59:4b:44:82:a5:1e:fc:98:cc:fa:63:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:63:02:1C:E9:47:8A:46:FC:B4:AA:17:F7:3A:9F:2C:9C:A1:6B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c6e5629f-2225-4c0c-962b-6950ec611f11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
46:9d:73:d7:7c:b0:88:ec:d6:a6:4d:1c:f2:46:15:ea:de:f3:
94:53:54:76:56:9f:65:50:53:db:4c:72:ea:0a:01:1f:e7:48:
1a:41:bb:3f:e4:a6:3c:9c:9d:56:10:97:f1:5f:42:5c:38:9e:
65:19:c5:bd:65:88:64:cb:5e:d4:28:39:bc:8e:82:cf:05:41:
c5:fc:23:d6:1d:12:f9:d3:8c:cf:06:86:30:46:5a:9f:9b:f8:
09:a8:b4:c0:a6:7a:7a:70:bf:73:84:be:78:08:60:1d:fc:aa:
e2:62:67:7b:39:e0:be:dc:8c:2a:64:78:e4:01:cf:50:f5:c0:
21:d7:2e:8d:ba:0b:b3:a7:e3:a7:9e:02:e2:3d:38:b6:70:9a:
b2:a3:a2:ed:bc:ce:40:82:b0:83:31:5f:8d:f5:91:e7:e8:72:
e9:ce:bd:ef:8c:c2:59:41:6b:8d:b0:77:e5:ea:f7:01:19:ef:
79:a8:94:e2:1a:83:76:bf:c3:cb:b2:55:79:0a:84:d2:6f:e7:
f0:0b:dd:9f:b0:cb:ad:51:8a:b5:10:87:da:b5:e7:a3:4d:8c:
5f:53:c7:5b:10:39:8a:69:f9:8a:c3:e8:88:ac:a6:ba:a9:f0:
f1:e4:43:6d:c8:c9:07:32:d0:a3:a3:b7:14:76:b9:1c:05:49:
57:71:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org