Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa
File: d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa (raw, json)
Hash identifier: EQrUQz6Jvi645sXDsJla19DpqkAjl8bC5vOYpIZ3XOo=
Subject key identifier: A5:48:71:12:24:39:F2:D0:D8:12:A9:87:F2:26:7A:F5:2D:5C:8B:EC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 766290F1C8564E55600BC63CB82D4FE81F40B1DC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 151.176.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:62:90:f1:c8:56:4e:55:60:0b:c6:3c:b8:2d:4f:e8:1f:40:b1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=2783144fc75b2a8280efc23153edd6913eb97213d4fbce391a6f4476247a8ef1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:4d:7d:a3:24:1d:e8:c4:f5:50:48:2b:b3:
28:7e:93:2d:95:8a:24:89:62:ac:15:a7:41:57:83:
5e:54:ad:69:ec:6e:dc:bc:26:13:e0:93:ca:37:23:
1e:41:b3:24:55:57:b8:e8:8e:c7:58:26:72:eb:60:
23:24:7b:09:ea:ff:b5:bf:14:9a:09:ba:24:d8:d1:
53:e3:c7:ff:c4:db:41:1d:3b:d3:6b:93:07:0d:fe:
0b:b5:91:e6:4d:86:3b:dd:1a:68:ce:49:62:15:da:
ac:d0:7a:2d:42:38:e5:2c:b4:4d:ce:63:f6:6d:c1:
33:70:f1:2f:67:3c:86:87:d5:8e:34:fb:d9:61:05:
c6:ea:8b:15:76:08:92:fc:86:b6:56:8b:82:8e:f3:
c1:6b:10:ad:a6:0d:9b:5a:8b:64:b1:77:80:9c:ba:
fc:f4:04:78:11:8e:7d:84:3d:3c:a7:35:81:63:f5:
68:27:3c:ac:66:bd:02:23:9b:e4:15:a5:3c:3a:33:
a2:a9:ae:ce:1a:ab:1f:90:ae:7d:bd:07:a1:8e:2f:
b4:fc:4d:9d:7c:ed:f9:32:2f:fe:7d:12:3c:48:08:
a2:a4:7f:73:f4:27:41:15:37:6c:49:03:cd:7d:f3:
55:65:72:f5:b0:82:46:77:a5:6a:b6:cc:b2:be:61:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:48:71:12:24:39:F2:D0:D8:12:A9:87:F2:26:7A:F5:2D:5C:8B:EC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:13:9d:b4:f7:82:47:1e:01:af:be:92:f6:1c:d5:4a:5f:72:
07:c1:93:06:de:ff:35:e8:8d:c3:1b:e5:de:da:00:15:5f:1a:
55:e9:fc:14:7b:b9:46:33:5e:58:f5:7f:f4:08:26:26:19:8b:
b7:e5:47:63:37:6b:8d:1f:50:93:eb:86:09:29:0c:cd:c5:93:
dc:63:2b:ec:97:42:62:bc:7a:d7:9d:81:ac:c1:8e:b7:9d:77:
ef:fd:3f:81:ab:01:00:2c:29:ac:47:ad:ef:62:8e:be:79:ef:
08:03:a9:46:c0:53:6a:cc:ee:26:09:d9:e4:fe:44:59:4b:de:
66:8d:49:c5:ca:2d:21:5f:ed:ec:3c:d3:7f:b5:45:23:71:a4:
f3:42:74:7d:ca:8d:82:9e:62:05:3c:bb:32:c9:94:38:5b:17:
a8:7e:32:b2:21:dd:e4:5d:40:0c:af:78:3a:bf:52:c9:e0:a9:
14:d8:6c:f9:b9:33:cf:c8:b1:a5:a6:5a:fd:a5:c0:cd:26:4c:
fb:0e:e5:d6:74:64:a1:9b:15:a4:fd:49:44:fb:67:57:77:c4:
0e:73:06:f1:02:90:f9:1a:04:d0:6c:09:8a:69:ae:2f:62:d8:
46:58:95:98:2f:b6:f4:78:a0:ff:8b:b7:5e:39:55:a4:d8:cf:
68:05:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:31:26 2024 by rpki-client on console-fra.rpki-client.org