Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
File: e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa (raw, json)
Hash identifier: dr47nL1ajf9dHLH0+6FQGVvatD5YCKRxXz2TAdmkGKc=
Subject key identifier: 3C:D8:69:49:B5:D4:7D:84:53:D3:DE:64:C8:C5:9B:28:89:8A:45:6E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 332BF67F23F0BED800A9D5A8FCFD5B616E112A5E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 193.218.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2b:f6:7f:23:f0:be:d8:00:a9:d5:a8:fc:fd:5b:61:6e:11:2a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=c4345d43481777725287af658a29a6e062209c3667da49ceacde246f7dc80a2e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:52:e1:78:cd:84:10:5a:b2:aa:f9:75:53:
82:9d:fd:c7:74:4e:4e:09:be:98:12:55:ea:f3:3d:
17:52:f8:9f:24:06:39:dd:de:14:bd:6f:79:3c:33:
fa:87:ef:ac:e0:3f:af:7d:78:dc:b0:c8:43:f3:16:
b3:04:35:22:c6:35:29:a6:0a:66:91:4c:77:9f:1f:
6a:98:44:00:b8:2b:23:8c:ce:6a:ec:8e:dc:7b:fe:
4e:cc:92:68:08:da:e7:a1:ff:f2:84:7d:db:5a:30:
3e:1f:2d:41:11:25:1a:6f:3b:26:14:12:8d:0b:34:
ea:e4:f5:33:a4:c1:6c:5b:72:fb:a2:c7:d6:b9:ad:
55:10:59:4c:ff:bf:46:46:bb:be:c8:3c:66:df:bd:
64:7c:70:4b:96:c5:91:2a:f0:6f:f7:2a:d8:83:bc:
7f:45:e0:09:7b:cf:94:15:ba:5f:4b:52:ad:06:b4:
81:94:87:6f:21:b0:1a:d5:97:85:10:1d:29:cb:f7:
32:a4:85:8b:56:46:59:96:1a:db:03:d4:6d:78:c6:
84:e9:98:03:e0:59:af:9e:5a:3d:5a:10:89:68:1a:
3b:55:0b:c0:d8:e6:ef:4c:90:34:ea:d2:b2:b6:dc:
b6:7c:24:f1:cf:00:2a:e4:c2:fb:09:18:23:df:40:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:69:49:B5:D4:7D:84:53:D3:DE:64:C8:C5:9B:28:89:8A:45:6E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5f:c7:97:44:47:1f:e6:0b:42:ee:61:e4:73:67:ee:77:28:
e2:e5:64:e6:22:72:44:9d:28:a2:3d:f6:a5:71:24:11:63:88:
35:ec:18:cd:84:26:5f:c0:8b:0a:75:87:81:99:e5:17:9c:04:
1c:7a:20:d6:74:f8:a2:e9:7c:60:bf:d4:7b:43:67:dd:cf:68:
71:e8:ee:90:7b:f0:0b:3b:d6:e9:b1:70:7a:31:e7:7e:82:77:
b9:a3:aa:03:f5:42:06:2c:b1:e4:31:7a:22:9b:46:e3:f3:f8:
82:a7:f3:e0:42:e0:d1:d9:ce:40:10:e8:18:8b:42:93:25:8f:
e0:a7:28:af:8a:dc:2f:7c:ff:42:db:f0:01:9d:f3:d9:29:07:
64:0b:79:fa:0c:9b:ec:8a:93:1f:4a:a0:4d:95:5e:6b:03:14:
07:74:f4:52:b7:4f:66:a4:0c:6a:c8:3f:73:f0:43:97:fe:64:
86:7d:98:25:9a:d1:30:29:16:78:64:7c:fe:8b:6b:97:8f:a7:
82:69:b3:d1:a3:74:18:4e:a8:f9:d3:97:5e:f9:77:70:c2:58:
c4:b2:2c:e3:76:d7:03:fb:4f:b5:87:db:ea:c7:a2:3f:f3:d9:
9d:c9:fa:de:1a:e8:f0:6d:66:09:25:f7:b3:20:4f:74:6e:42:
d8:74:2d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org