Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c864a337-1849-4930-bc3c-6984d2b51a7e.roa
File: c864a337-1849-4930-bc3c-6984d2b51a7e.roa (raw, json)
Hash identifier: CVJFhladZ5X9XdQJa4OMwxDJLD1+iKp7hsNa/uJLQPo=
Subject key identifier: FA:78:C9:1E:5E:9C:EB:07:16:AE:50:FD:1D:CB:70:05:F6:2E:C7:FC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 03965D898ABB209E27A7694D907CB092ADB5F26E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c864a337-1849-4930-bc3c-6984d2b51a7e.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:96:5d:89:8a:bb:20:9e:27:a7:69:4d:90:7c:b0:92:ad:b5:f2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=27d34d7d552f3be81ba85e2a12b53e600be2e280a16c261fc1ca8be33e075fba, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:7e:d2:1f:d9:5e:1f:68:8b:39:93:73:6b:
82:43:11:7c:5d:d9:f9:92:3a:ec:44:2c:54:21:f9:
f2:73:66:53:7c:14:79:65:87:e6:94:ea:1f:69:68:
45:db:4e:03:01:2e:5b:7a:05:b7:43:25:6a:54:99:
10:c3:34:e7:cf:ce:e3:df:33:ea:f8:ce:fa:f9:83:
6c:62:32:18:51:ae:bc:ab:20:31:cb:3d:71:50:9e:
bc:07:66:87:3e:0b:c0:7b:69:7a:78:8e:dd:8f:b0:
92:00:ca:a2:5c:25:12:7b:bf:e9:2d:46:56:a4:1c:
06:89:f9:0b:98:98:36:72:57:0b:54:c6:e0:25:76:
c2:e4:41:5c:50:5c:f9:e1:5d:08:c5:34:c3:ff:db:
76:23:c8:b4:e8:44:65:56:99:e9:e8:90:e6:fa:54:
92:83:20:5d:14:5c:38:2a:2b:30:34:12:73:8e:ec:
c3:53:9d:05:f5:7d:9e:99:67:85:e3:7d:8d:30:9e:
5a:f0:5b:15:a6:3e:b0:9e:62:8d:d1:b6:bf:e9:4c:
ef:81:0b:4f:5a:b8:6f:ed:5e:c0:7c:49:39:40:68:
4d:60:e1:e4:68:b1:10:63:73:64:20:0d:50:af:1e:
0a:a1:0d:ed:cf:7a:15:82:65:7b:cf:09:06:74:62:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:C9:1E:5E:9C:EB:07:16:AE:50:FD:1D:CB:70:05:F6:2E:C7:FC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c864a337-1849-4930-bc3c-6984d2b51a7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3f:9b:da:4c:42:34:0e:ff:4d:67:38:ee:4b:2d:04:19:7b:d6:
87:2f:c3:37:8c:2b:4f:26:45:d3:3c:50:6a:e8:6a:ce:26:83:
37:c7:b5:02:aa:a8:fc:38:74:35:2c:a8:7c:62:1c:80:7b:a7:
fe:e7:98:a9:48:ac:2d:d4:9c:04:63:2a:a2:20:75:f7:c0:6e:
88:24:8e:de:2f:3c:62:76:52:51:60:77:77:75:62:7a:e1:aa:
a6:3a:8f:08:70:cc:be:06:82:95:ca:c2:bd:64:64:42:71:9e:
a2:ca:5b:cd:12:da:a2:7a:2a:36:23:11:40:b1:22:52:f1:54:
ed:ce:2b:a3:3c:49:a7:57:b9:de:ff:0c:b4:2b:8d:d5:32:60:
ae:9e:7d:da:c3:96:d4:b8:50:da:fe:ff:74:14:a1:41:b3:59:
34:5d:14:1c:34:e7:56:77:09:7e:6f:8c:d5:ce:e4:a9:26:48:
2a:d8:75:2c:57:72:ba:2e:33:a0:83:2d:3a:6c:74:b6:e7:9b:
ac:02:9b:07:d0:0a:dc:65:37:52:a0:e7:51:b4:33:f0:43:45:
8f:77:c3:c4:b1:15:73:9f:94:a7:eb:98:12:a6:02:02:a9:c4:
73:5a:b5:a8:0f:cb:aa:d1:5d:17:90:4c:11:5e:6a:25:34:4b:
1b:32:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org