Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d2cafa09-dd67-4a5d-a97a-e84d85c7bc68.roa
File: d2cafa09-dd67-4a5d-a97a-e84d85c7bc68.roa (raw, json)
Hash identifier: aa0mwF5WtUs7275LUK37M+0I3eE+1TVIFA+6wbMeo+0=
Subject key identifier: EA:91:F2:FF:1D:1A:7A:58:2F:24:BE:F2:2B:0A:B1:CB:D7:82:F2:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7C3238709EC256F11AB439C0F97FB94DFAAB4043
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d2cafa09-dd67-4a5d-a97a-e84d85c7bc68.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1200::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:32:38:70:9e:c2:56:f1:1a:b4:39:c0:f9:7f:b9:4d:fa:ab:40:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=8291d32abed848d68a1e405b674151d8ca4a72cec74df49ad2a8e93e64983c5a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:78:e5:a9:a7:b0:d2:9c:9d:1c:16:a5:d6:
bd:1f:65:db:e1:b4:f2:a9:b1:3e:8a:a7:56:72:57:
3a:45:55:58:d4:1c:56:1a:f2:49:26:82:6b:4d:d4:
f2:79:c3:a4:44:00:f0:ff:5d:07:02:79:2b:00:2c:
21:52:0e:9c:b1:53:a7:f7:5d:a4:42:a3:34:c2:d2:
2f:89:2e:38:c7:45:2f:ae:62:50:1a:5c:19:e8:7c:
06:fe:70:da:78:24:b6:7c:95:03:de:6c:4e:3f:a0:
f5:2d:28:a2:e5:a4:b0:17:01:2a:bc:dc:e3:cc:08:
e6:f3:12:9e:12:ce:56:23:5e:96:9c:9e:db:25:d5:
be:4f:3b:99:56:c7:35:c3:f2:43:4e:0e:97:77:75:
05:3f:08:ac:b9:43:6d:e0:ed:3e:72:6f:55:14:30:
23:d3:48:17:65:56:fc:88:15:c4:e2:b2:9a:a0:08:
c0:35:25:80:81:66:1f:9f:08:7c:f2:7f:49:54:02:
f5:d2:ea:73:eb:6e:d8:f2:9c:4c:6c:e5:e5:a0:4a:
31:a9:74:37:07:02:d1:f9:1b:a4:dd:07:8b:66:ca:
67:33:1d:3a:27:2e:e1:02:36:49:2d:59:d0:6e:e3:
58:84:5e:32:ca:d0:93:39:1d:f2:9f:0c:73:79:49:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:F2:FF:1D:1A:7A:58:2F:24:BE:F2:2B:0A:B1:CB:D7:82:F2:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d2cafa09-dd67-4a5d-a97a-e84d85c7bc68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1200::/39
Signature Algorithm: sha256WithRSAEncryption
b2:d7:f0:30:04:37:26:55:e2:47:67:83:a9:6c:a4:6d:72:5e:
66:ea:9f:e7:5b:c3:ab:bc:20:4b:99:98:5f:9e:de:ff:a8:4d:
90:7b:0b:17:d0:28:30:fa:16:97:cc:5d:2c:08:99:ce:f7:c3:
b7:b0:c4:73:d3:39:46:d6:58:de:d1:28:ff:48:9a:2f:f9:82:
39:eb:5f:3e:4a:61:d5:6f:3e:c9:a6:27:95:ee:f2:73:0f:99:
cf:f0:4d:61:35:f1:8b:4f:55:60:51:a7:f3:4f:7a:bf:b0:93:
8a:61:eb:68:6b:a3:af:13:13:b2:dc:3f:40:e3:8a:44:4e:5e:
ba:ff:1a:c4:75:0c:1c:44:cd:53:f1:0b:b2:8c:24:c4:ca:16:
57:c8:2f:91:ab:38:68:9b:d7:4d:60:24:0b:02:3a:63:c8:db:
8a:4e:9f:39:a8:73:50:15:35:8c:f4:1e:34:4b:6b:b4:43:75:
38:d7:2d:54:e0:3a:f0:01:2c:77:33:c0:8b:82:12:d6:e5:39:
ef:8d:2d:56:af:81:4e:cc:ec:7e:9c:3b:91:24:1f:71:3c:05:
3f:9c:4d:c2:56:b6:3f:1a:41:cd:47:27:37:34:70:72:b0:7f:
61:0e:0c:94:4f:ac:c9:62:31:a8:3b:b2:4b:bd:65:15:10:1c:
35:59:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org