Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ef0ea6-7a32-4830-bc70-a378537a2733.roa
File: c7ef0ea6-7a32-4830-bc70-a378537a2733.roa (raw, json)
Hash identifier: iO2t9KG4MbeT8SIW8QDLNvqNJg0kBHtqUWgxH/81pOk=
Subject key identifier: EB:E5:5A:E5:BE:31:B1:D1:59:3F:68:5E:1B:0A:F0:AF:2D:21:77:57
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 27D6D2D5A03D11EE317667C73F3F1D2B80FA76D1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ef0ea6-7a32-4830-bc70-a378537a2733.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d6:d2:d5:a0:3d:11:ee:31:76:67:c7:3f:3f:1d:2b:80:fa:76:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=e8324ba4895f754ba5148933f05a8669bfddcd1a8be75b5a0f6a5aad4b274b10, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:ff:91:4b:d3:e8:45:d9:5d:40:6f:ed:f5:
09:2e:60:fa:32:00:3c:e6:d1:0a:68:53:d9:05:2a:
2a:5b:ad:b5:ba:bb:75:3f:27:0b:4a:06:22:70:00:
6c:4a:54:0d:6d:78:06:55:ad:68:93:5e:98:7e:ef:
f7:7a:a0:01:54:d4:e8:8e:66:9f:54:b7:90:25:e1:
60:35:57:11:9e:07:c8:00:02:2f:83:e4:48:c7:14:
fa:fc:bd:5a:72:8c:5c:ee:4c:dd:c4:22:5e:ac:d2:
a0:db:36:4b:b9:05:7b:5d:2d:5a:e1:08:92:4a:04:
fa:2f:c8:4f:11:89:d8:98:46:fb:ff:9b:88:83:90:
85:1b:27:dd:8a:31:af:f7:e6:af:2b:98:2d:d9:1c:
70:45:43:1f:71:71:39:a7:de:2b:3f:dc:92:93:99:
6d:e7:7f:6c:b3:a9:c6:38:15:c0:7a:6c:ca:44:8c:
dc:7d:ee:2f:c7:ac:fb:1a:02:6d:b4:cc:00:18:fc:
0c:46:3b:00:38:19:c2:eb:cb:69:b1:2a:52:ea:57:
6c:e2:73:57:59:3e:17:04:b7:b8:3d:58:4f:16:21:
d5:a5:9f:a1:1a:07:57:1d:9d:18:36:7c:38:2c:c9:
ca:f7:ec:c8:20:43:df:c2:d0:3d:41:35:ac:2b:cc:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E5:5A:E5:BE:31:B1:D1:59:3F:68:5E:1B:0A:F0:AF:2D:21:77:57
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ef0ea6-7a32-4830-bc70-a378537a2733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:9a:87:c9:0b:f0:aa:6a:f6:6d:ac:76:8f:27:bd:49:76:97:
5d:2d:ad:89:8d:dd:a0:23:cb:ac:6b:d0:51:5c:11:6b:33:b1:
4f:94:6a:e6:c3:b7:d6:66:41:60:1d:be:0b:5f:2c:18:9b:da:
b2:29:dc:18:6a:54:87:2b:d3:7c:e2:d0:12:d4:bd:5f:09:66:
27:d0:51:b7:51:d9:c1:5e:4c:9d:2f:97:95:9c:22:ac:b5:14:
fe:a7:44:2e:b3:33:33:41:62:b2:1d:71:d8:83:85:9d:d2:69:
e7:47:64:e7:0e:08:47:22:58:bf:12:09:7e:91:f3:b2:d6:ee:
fe:59:33:42:b5:84:ca:89:a1:08:82:b3:1b:7a:d6:2b:43:f2:
57:65:6c:d6:2c:85:40:41:c7:2a:c0:7a:73:46:3e:98:f6:db:
30:81:e6:6d:86:09:89:cb:b0:6d:b4:40:f7:66:7d:7c:0e:4f:
a7:f4:0b:61:f0:eb:9a:68:7e:14:3c:d1:da:c0:94:9e:6a:98:
21:63:ce:d5:a3:90:a1:76:c9:ac:a6:d1:0a:a1:ab:d0:cd:54:
ae:ca:5d:e4:10:df:b4:24:ef:b5:39:73:8d:1a:c6:3b:80:fb:
28:52:aa:84:ef:bd:ec:93:d7:d7:e1:a5:d7:77:19:08:f6:d4:
78:0f:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:28 2024 by rpki-client on console-ams.rpki-client.org