Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
File: d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa (raw, json)
Hash identifier: mj0ZO9UM4W3FnB62EvwXXdNVBDx6ODL5GUEVam+bTRU=
Subject key identifier: 9E:F9:87:5C:A7:05:7B:B5:43:95:C9:D0:F0:C2:B6:2B:25:F1:21:08
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E68252A130BA650C8D26C7FD6B39749095B5BB5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 145.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:68:25:2a:13:0b:a6:50:c8:d2:6c:7f:d6:b3:97:49:09:5b:5b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=4d4666657be4939fb85c46640a84af686565e11e0dcf5079fd42f1d31c6374d2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:09:ed:01:12:fc:76:a5:b8:c6:08:25:9c:
17:bc:53:a3:c8:30:f1:09:2c:4d:35:89:51:c1:df:
05:4f:2c:5e:56:9e:35:65:59:5d:e9:53:66:5d:75:
92:f9:e1:30:b0:58:20:0a:6b:6d:6f:e8:18:b8:f7:
9b:8b:2f:05:2e:43:f0:09:ba:98:37:88:4c:17:01:
63:6b:82:23:9e:11:c6:1b:a0:15:c0:f4:35:fc:9d:
0b:02:2f:47:e3:98:86:d7:72:00:9a:47:e4:23:ad:
f2:6c:fc:5b:f3:b3:ec:09:4b:37:e8:9c:b9:1e:a2:
7b:19:c6:c2:57:6e:24:53:2f:62:e7:a0:50:94:74:
67:0c:74:ad:26:ff:7f:95:d3:ab:97:e8:62:9f:92:
a8:3e:aa:c3:34:53:22:41:f7:79:cc:aa:63:9f:d3:
72:de:7d:f4:f4:30:89:7d:72:98:94:00:2d:fb:42:
9c:ca:35:2e:93:2b:a1:b5:db:8b:1e:1a:15:82:11:
7a:94:bf:e2:fa:15:16:d4:24:cd:19:b6:bd:bd:43:
33:09:0e:11:48:95:8c:dd:36:b6:71:4c:6d:4d:c2:
d3:94:75:ab:65:d0:b1:a0:27:aa:b8:4d:48:77:24:
72:bf:e3:2b:95:65:b1:ad:fb:65:14:61:02:91:7e:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:87:5C:A7:05:7B:B5:43:95:C9:D0:F0:C2:B6:2B:25:F1:21:08
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:41:f4:e2:a1:1a:82:1f:63:69:61:5a:1d:de:d5:22:b0:ec:
9e:47:01:a6:ca:c7:ae:35:98:85:a3:e0:7f:f2:24:4f:11:25:
35:7c:d8:92:a6:7f:8a:0b:5e:7a:08:2e:46:b2:45:b5:68:61:
6b:06:6f:07:7a:a3:87:fc:81:22:54:a7:c9:c3:01:bb:ad:16:
7f:df:e3:b0:ec:55:f0:a5:d3:9f:0c:d4:3a:f1:a2:5a:d6:6c:
8b:2c:3d:e9:b0:05:19:c8:aa:08:9d:ef:b6:58:81:3b:ff:02:
50:30:03:b4:7b:31:f0:20:e1:0f:68:66:1f:0c:49:c5:fe:56:
a8:47:a0:89:44:a9:fe:f0:5a:90:e0:b7:02:86:ab:aa:06:1f:
08:3b:4a:ae:e0:50:54:52:9c:5d:0c:4c:d8:47:62:84:af:9f:
ba:6a:65:91:07:bc:f6:d4:b4:83:a1:86:d7:e3:21:65:28:34:
82:9e:aa:fb:7e:bc:80:b6:4d:ff:cc:64:a7:eb:32:18:d3:ba:
d0:31:4c:5c:b4:fb:ad:17:5c:f2:28:55:63:36:a2:12:7e:69:
c1:f8:2f:9b:49:66:c1:5c:63:08:59:50:a6:be:a4:ed:5f:f6:
1a:cf:93:12:ad:35:a0:f3:f8:9c:e6:1d:68:60:22:bb:81:19:
52:53:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:46:57 2024 by rpki-client on console-fra.rpki-client.org