Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
File: e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa (raw, json)
Hash identifier: 46dj7HTqtvq/PvVPr0XgS+vyuYPR7FZFukT5lX5aLPw=
Subject key identifier: 01:99:00:38:61:64:BE:DE:3F:4C:26:23:57:63:F9:39:E5:1D:44:07
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3C1252CF69524859D27E4BA06A9D162951A0DEE9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
Signing time: Wed 27 Mar 2024 00:00:00 +0000
ROA not before: Wed 27 Mar 2024 00:00:00 +0000
ROA not after: Wed 01 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.102.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:12:52:cf:69:52:48:59:d2:7e:4b:a0:6a:9d:16:29:51:a0:de:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 27 00:00:00 2024 GMT
Not After : May 1 23:59:59 2024 GMT
Subject: serialNumber=c5f464db8cfc8dbb08f91c197224fd6f8b6f8100487166f96e7c88186b71ce89, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:43:80:77:5e:22:2e:60:09:19:ef:68:81:
21:9b:6a:4b:8e:59:9d:99:9a:00:4e:ef:41:69:80:
5d:09:bc:0a:1d:cd:12:fb:51:36:da:84:a8:82:3b:
c7:d8:b8:64:4c:15:36:f2:f2:45:ee:32:5d:16:4b:
90:01:99:44:dc:27:c0:d5:30:8e:66:17:7d:b7:e5:
af:41:e6:3e:f0:81:73:b7:b0:cc:94:73:b3:99:ed:
5c:b1:5f:5f:17:42:eb:dd:3a:5a:46:6f:b0:7f:a9:
42:04:c7:49:fb:4b:22:72:fd:1a:57:fb:95:f4:5b:
8d:ce:dd:b2:95:7b:6a:6f:22:f3:5e:02:e9:47:7b:
df:5b:f5:71:7d:46:20:28:5d:bf:35:33:06:7c:42:
07:af:f1:c4:18:83:4a:7a:1c:0f:3b:e9:05:a0:0d:
34:79:fb:14:51:4d:ce:1d:6a:fc:c8:a1:fe:ba:1f:
57:58:a3:72:a2:f7:f2:d1:15:d8:eb:10:3c:a9:c3:
20:73:15:eb:b2:75:c3:b1:dc:56:75:7e:58:a5:5b:
0c:d5:a4:76:06:e6:b9:35:d8:74:30:b9:6c:e3:a7:
7f:0c:6c:bf:e6:f0:52:e8:a3:31:bc:5d:81:63:86:
0a:8d:b9:38:39:99:d8:9f:93:6d:ce:13:d6:be:d6:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:00:38:61:64:BE:DE:3F:4C:26:23:57:63:F9:39:E5:1D:44:07
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:89:df:87:26:85:b0:83:09:ad:9c:46:46:45:3e:1d:a4:9c:
53:e1:8c:b3:1f:7b:ad:4a:6b:2f:f6:ed:4f:13:2a:68:e5:9e:
fe:ac:c2:f7:ff:6f:ef:d7:33:a2:f1:ce:e3:fe:23:83:e9:c1:
28:a0:b2:73:e6:8d:c2:fb:01:8c:18:c8:41:39:be:20:10:44:
8c:f4:3b:a0:8b:b0:49:5d:09:7b:25:19:0e:74:18:71:53:d7:
39:a3:3a:8d:39:7b:2d:3d:f7:a3:0a:82:56:e1:5e:ed:1b:58:
11:5c:16:ab:a3:33:00:6c:6a:3c:15:89:40:c1:b7:fc:1e:a8:
3a:a5:af:58:1c:f2:3e:6c:d1:18:12:bb:e5:88:b2:ed:00:3c:
c9:dd:ab:84:15:e8:00:29:af:e9:61:81:11:46:15:96:9b:b7:
35:c7:33:9c:20:40:7e:f1:99:c3:dd:ab:de:f9:59:92:2d:b0:
84:15:38:06:56:22:4a:ab:bc:4e:36:4d:63:c7:b8:db:7a:0e:
6f:59:4a:57:58:13:d0:aa:27:af:6a:b7:3a:42:30:87:61:6e:
05:3a:ad:82:5e:30:87:44:d8:63:68:b8:cd:ae:89:3e:1a:e2:
36:2f:58:b3:da:59:4c:86:75:b6:80:3a:fb:c3:a7:c3:15:d5:
60:50:b8:54
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUPBJSz2lSSFnSfkugap0WKVGg3ukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDAzMjcwMDAwMDBaFw0yNDA1MDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGM1ZjQ2NGRiOGNmYzhkYmIwOGY5MWMxOTcyMjRmZDZmOGI2ZjgxMDA0ODcx
NjZmOTZlN2M4ODE4NmI3MWNlODkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJy9Q4B3XiIuYAkZ72iBIZtqS45ZnZmaAE7vQWmAXQm8Ch3NEvtRNtqEqII7
x9i4ZEwVNvLyRe4yXRZLkAGZRNwnwNUwjmYXfbflr0HmPvCBc7ewzJRzs5ntXLFf
XxdC6906WkZvsH+pQgTHSftLInL9Glf7lfRbjc7dspV7am8i814C6Ud731v1cX1G
IChdvzUzBnxCB6/xxBiDSnocDzvpBaANNHn7FFFNzh1q/Mih/rofV1ijcqL38tEV
2OsQPKnDIHMV67J1w7HcVnV+WKVbDNWkdgbmuTXYdDC5bOOnfwxsv+bwUuijMbxd
gWOGCo25ODmZ2J+Tbc4T1r7WNt0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQBmQA4
YWS+3j9MJiNXY/k55R1EBzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTYwNDE3MWEtOTkwMy00ZTNiLWE0Y2ItYTBhZTBhMjFmNDlhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNmMA0G
CSqGSIb3DQEBCwUAA4IBAQC1id+HJoWwgwmtnEZGRT4dpJxT4YyzH3utSmsv9u1P
Eypo5Z7+rML3/2/v1zOi8c7j/iOD6cEooLJz5o3C+wGMGMhBOb4gEESM9Dugi7BJ
XQl7JRkOdBhxU9c5ozqNOXstPfejCoJW4V7tG1gRXBarozMAbGo8FYlAwbf8Hqg6
pa9YHPI+bNEYErvliLLtADzJ3auEFegAKa/pYYERRhWWm7c1xzOcIEB+8ZnD3ave
+VmSLbCEFTgGViJKq7xONk1jx7jbeg5vWUpXWBPQqievarc6QjCHYW4FOq2CXjCH
RNhjaLjNrok+GuI2L1iz2llMhnW2gDr7w6fDFdVgULhU
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:45 2024 by rpki-client on console-ams.rpki-client.org