Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
File: d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa (raw, json)
Hash identifier: i1v8UVDnqjJe2uUlydTUjCXxyNLmwp1MNvToOsr0f4M=
Subject key identifier: 83:26:F6:15:15:C4:A2:61:C9:A8:D6:16:A2:D2:94:A0:A1:8D:34:B6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0CEFC6B2F0BD9FB24B124169940DB3A698D8E7FF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 145.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ef:c6:b2:f0:bd:9f:b2:4b:12:41:69:94:0d:b3:a6:98:d8:e7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=531e154d486f6f8bf8f3ea8b0da50b5abbc2cbc9f281fb8d1a5c51e8605ae647, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:d4:29:aa:1a:9e:7b:df:94:a4:a9:5e:fe:
dc:bf:44:46:4e:f0:0c:cd:46:40:bb:e6:68:b3:bf:
b6:29:d8:db:e1:82:43:25:80:47:04:19:7d:3f:7a:
3f:96:1e:3f:e9:27:4c:32:7d:a7:7e:85:e1:99:d3:
71:f6:9d:fd:e6:4b:e9:5d:91:20:50:82:00:96:8e:
6b:a2:ee:d4:4e:46:ff:9e:0a:07:4e:8b:91:d6:e5:
96:be:22:58:42:ae:f9:6b:89:07:58:86:26:5b:1d:
06:11:f1:93:f7:75:fd:29:a6:69:0c:de:66:10:5e:
1e:52:93:c1:ee:a4:39:ef:94:97:d5:21:e2:98:94:
d2:fb:15:dc:3f:a4:4a:b3:f0:e5:ab:6b:86:05:87:
8d:9b:1f:61:f0:de:cb:15:8e:d7:05:f7:ef:8e:a4:
f4:c1:7a:da:90:56:58:ed:c9:77:45:7c:4b:1c:fb:
41:3a:b7:10:6c:4c:dc:8a:71:82:14:63:61:67:e2:
ee:fc:89:26:e1:b3:70:f3:e8:93:08:42:c7:82:f4:
88:6c:37:8b:3a:aa:9c:0a:d2:e4:4b:00:7c:3d:91:
4a:d6:c2:7f:c9:e7:77:59:40:6a:4f:04:17:23:f4:
14:0e:ec:3f:17:09:78:be:fe:97:06:36:93:30:cf:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:F6:15:15:C4:A2:61:C9:A8:D6:16:A2:D2:94:A0:A1:8D:34:B6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:d5:8e:c2:e4:78:32:e8:eb:59:dc:03:40:a3:21:2e:19:14:
ce:1b:03:3c:b3:33:ea:45:6c:2a:02:0a:dd:96:7a:8a:83:27:
09:76:7c:1e:88:09:fa:f5:72:a9:71:57:23:e9:f0:e3:1f:a4:
70:97:67:83:70:bc:fd:9c:2f:55:3d:f9:b5:34:b0:a4:c5:8f:
bb:bb:05:ae:01:fb:39:8e:e7:5b:e0:3c:86:f0:92:28:08:e6:
83:df:ee:a8:b7:42:8a:26:36:df:1f:48:9b:7f:9f:b2:7b:0e:
6a:9c:a1:bd:80:74:8e:a9:3e:e6:90:53:b0:a0:73:3b:ef:d2:
cd:b6:96:ed:af:f5:d3:44:52:69:eb:a4:de:55:f8:69:34:b6:
bf:1b:aa:c7:2a:1f:a2:24:74:11:31:2c:a2:f6:fd:d9:d7:53:
96:c4:2b:ec:5d:9a:1a:a3:1a:05:a2:b1:d2:d9:4d:c9:6d:bc:
84:c0:b5:2b:ee:13:19:29:78:6c:aa:3a:4b:a5:48:25:40:8d:
c7:50:75:60:e7:13:14:03:c9:2a:aa:ae:f4:8e:36:ef:f0:6a:
69:90:6e:40:5e:0a:04:1f:8a:ba:ec:d9:1a:62:f1:4c:2d:98:
83:2d:c0:19:20:ab:53:b4:65:36:77:5e:ce:6f:91:73:02:cb:
cc:09:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org