Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
File: e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa (raw, json)
Hash identifier: 9xLtUa4Xoeq16ZC8NsiWaiM7aZO1aaUIFAN7OtLfMF4=
Subject key identifier: 3F:BC:3A:4A:2A:C3:EB:EF:53:65:9D:24:1F:EE:11:3F:B9:7F:3F:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 42DE0FA641B1DFEE69E2DD0474C08138063A6C07
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 193.218.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:de:0f:a6:41:b1:df:ee:69:e2:dd:04:74:c0:81:38:06:3a:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=98cda76a96d766cf47c26cd19a660527c5fb3dd87557f47f0e5fedcd32d8b159, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:5c:96:e2:e0:cf:09:d9:95:d5:c6:16:b6:
f5:fe:d3:8f:4d:8a:6e:05:d9:c9:8f:9e:17:94:40:
e9:02:66:9a:34:04:92:a2:42:86:aa:71:69:b8:a8:
63:8a:84:1d:1e:aa:08:a9:86:73:56:38:8e:11:25:
e4:46:d2:4b:f9:34:1a:fa:f9:82:80:32:25:ee:bc:
0f:e8:96:80:72:71:80:8b:17:4a:20:92:11:2d:e8:
d4:73:dd:82:d2:37:5f:40:7f:5c:29:b3:6e:81:f2:
b8:d9:b5:7c:e8:95:2c:76:8e:88:de:29:0a:cd:ec:
fd:86:ac:7c:57:19:bd:9e:f3:46:91:b8:e4:26:2b:
14:0e:8b:98:2d:50:77:32:26:a7:0c:a6:d4:a7:17:
cf:6d:95:c0:df:f4:f4:5d:ee:9b:0d:89:60:8e:11:
8f:79:8d:1d:27:c5:05:a0:40:9f:15:c1:5d:3a:fa:
19:23:23:c3:8a:db:f9:24:ab:17:8e:29:46:13:5e:
41:bb:76:8b:ed:5b:52:d3:47:eb:de:30:c1:97:6f:
ec:44:dd:c9:34:ee:26:ba:be:ac:28:e1:be:a9:f9:
4b:3c:c0:bb:6e:c5:c4:e2:13:ac:a2:d2:a2:24:aa:
09:3f:fb:b1:f5:35:05:ac:90:66:c3:32:89:e5:4c:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:3A:4A:2A:C3:EB:EF:53:65:9D:24:1F:EE:11:3F:B9:7F:3F:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:85:87:a2:97:e8:f7:8d:c0:71:71:bd:56:b2:16:ff:8f:54:
57:b6:c5:d8:6e:46:bf:56:d2:09:31:67:00:7b:f3:fe:74:f5:
f6:28:1e:51:08:22:4e:fb:85:f2:06:76:ab:16:95:8c:4b:71:
a6:c9:38:70:8f:86:a9:0c:17:5d:d1:ca:09:c0:90:d5:78:0a:
99:39:a9:40:dc:23:04:03:4a:e8:55:f8:ed:9f:51:53:8e:fa:
c8:6c:23:ba:b0:ba:19:98:cd:9b:41:91:99:5f:fb:f0:5f:15:
a7:6b:4d:66:84:7f:62:8b:76:d6:e0:ce:9c:dc:18:b5:89:1c:
a9:43:1c:2c:ca:27:61:ef:18:48:df:fb:8a:31:f1:59:29:9b:
bc:73:3f:ee:4e:25:e5:d7:35:52:4e:11:27:77:bc:d4:69:7e:
87:9f:1c:cd:de:ba:e1:80:23:06:ae:51:51:36:1a:23:c2:93:
24:cc:97:8a:19:d9:84:e7:88:1c:80:ac:74:59:fc:c6:d8:b9:
b1:32:e0:e0:d5:7a:37:ef:90:77:c6:a2:d4:60:2a:09:46:63:
41:fe:3b:c2:bb:43:4a:39:73:b5:52:5d:27:05:ed:f9:eb:17:
d5:b1:0e:12:1e:70:d0:0b:42:e1:13:3e:d5:37:e2:14:c5:fb:
66:97:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:10 2024 by rpki-client on console-fra.rpki-client.org