Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
File: e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa (raw, json)
Hash identifier: 1EdZwpqLFRWyO3EA6dkZC0Yvrnp54zykgC68Dpv0EJs=
Subject key identifier: 40:6F:FE:A3:4B:EE:8B:B0:B2:E2:3D:E6:6B:AE:2A:10:06:F0:6A:B8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 28DF024B465013A31584AC88482107A14A4A3737
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
Signing time: Mon 11 Nov 2024 00:00:00 +0000
ROA not before: Mon 11 Nov 2024 00:00:00 +0000
ROA not after: Mon 16 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.102.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:df:02:4b:46:50:13:a3:15:84:ac:88:48:21:07:a1:4a:4a:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 11 00:00:00 2024 GMT
Not After : Dec 16 23:59:59 2024 GMT
Subject: serialNumber=9d9373348656defdb72355b1ec81a4639b931aa697c49e2bfe7bc20ab41ca922, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:fc:48:a4:4f:11:04:ee:0f:74:c1:d4:30:
21:40:26:08:f9:ec:9b:c6:68:42:91:66:11:12:50:
1d:ae:73:db:61:1e:ef:bb:7a:f9:94:90:35:1f:bd:
03:31:95:fb:85:98:ea:87:cf:27:6f:1e:21:cc:30:
67:f9:7c:6e:5b:ae:3e:3c:29:1a:8b:e9:96:be:ae:
e0:d1:a9:9c:50:b2:d1:86:7e:7b:51:df:0f:a7:24:
25:09:9a:82:a8:50:88:44:75:f5:50:5d:36:78:0d:
b7:5f:b1:69:c6:cf:54:b1:bc:cf:3d:8f:27:e1:94:
39:47:6f:99:8f:d2:c7:a6:4a:a1:58:10:34:5a:6d:
14:d1:02:8f:b9:80:af:46:38:8c:a9:16:c2:ae:25:
91:c7:04:81:54:48:92:ee:84:b8:15:05:8f:88:6f:
a2:43:18:d0:13:9a:a8:db:1a:bd:8f:c4:f3:04:08:
77:ef:a8:c2:9c:9a:a2:90:a9:00:2d:6f:48:8e:cd:
60:22:b5:e5:0d:08:91:53:9d:2b:ca:0b:5b:c0:38:
25:3e:fe:36:cc:b7:f0:98:2b:0c:3a:e7:30:50:48:
b6:79:a0:f2:8a:6b:14:90:67:f2:7f:61:f9:84:90:
64:c9:41:d9:47:c6:7e:ae:d0:ce:fb:4c:63:2f:78:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:FE:A3:4B:EE:8B:B0:B2:E2:3D:E6:6B:AE:2A:10:06:F0:6A:B8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:ae:ab:55:ef:42:0f:ab:b1:e8:27:e3:ab:02:4e:41:de:f6:
61:93:98:cc:13:67:d6:44:e4:5c:d6:e6:80:ca:da:a1:84:4a:
4f:12:30:6f:61:26:60:f0:5e:2b:c2:fc:a5:ab:21:ca:de:fe:
3e:42:d0:47:99:c7:87:e9:f0:28:c1:0d:68:15:e7:d8:ca:c3:
73:4e:9e:88:77:1c:0e:20:28:9f:87:ec:fd:41:b7:79:72:30:
78:ff:ec:8e:ab:34:56:72:fd:51:7e:31:44:af:a4:35:d8:e6:
dd:0b:b6:dd:5a:4b:7a:69:3d:31:c7:4a:58:2e:d0:e4:2e:4e:
e7:31:df:67:d2:7e:47:92:35:65:89:17:c0:6e:21:15:f8:a7:
f7:e4:c8:f8:be:d3:02:d4:d9:29:b0:c1:f6:2a:bf:82:61:ec:
42:db:10:d0:75:8c:9c:d3:f4:2c:55:a7:01:a5:c8:96:1c:9c:
bd:7b:a0:1c:ed:5c:e3:2b:b2:e7:21:88:dd:e3:14:f8:dd:ab:
ce:98:70:ec:e2:85:bd:70:cc:03:6c:53:5e:d4:bd:3f:84:4d:
7d:59:36:71:ab:da:b1:a7:a9:89:7b:9b:c7:5e:51:a6:80:1f:
d5:e8:a4:30:39:67:6d:74:b0:18:02:55:e8:9c:8e:0c:0f:4b:
81:13:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org