Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: DnuHcDAXD5cG/pVtF3d6Sevhky51oqKZ0rTYHS5vR40=
Subject key identifier: BA:C4:C7:3F:67:1F:35:88:56:AC:7B:A0:6E:FE:82:98:94:81:10:94
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1FF10C0ADCC4069A22C4854BA4A78944B8A81D48
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Sep 2023 08:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f1:0c:0a:dc:c4:06:9a:22:c4:85:4b:a4:a7:89:44:b8:a8:1d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=ef17478cb0c96ed1585f2de283f1e61501a2525ed4c1bc0dcba57d3c000ab524, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:e8:51:d8:2d:22:c1:99:81:70:34:7d:b2:
17:26:86:b7:86:41:b7:27:f2:51:aa:aa:14:12:28:
e4:a8:30:0a:cb:8a:4e:7c:22:23:df:4c:02:d1:52:
4f:7b:2f:55:e5:97:e2:51:9b:be:46:1e:24:0b:cc:
66:2f:c3:50:b6:b6:3e:c6:d5:88:7e:e1:e2:15:a3:
bd:5f:65:dc:db:0c:96:a2:30:84:e0:a8:88:8e:b0:
bf:6b:37:c8:f2:4d:2a:96:89:8b:01:03:1b:4e:9b:
de:a6:db:7d:c2:d1:e8:fd:42:e0:af:b2:8e:41:9e:
14:d9:c7:fe:4b:72:1a:f4:7a:f9:23:fe:aa:f7:e0:
b1:c8:ca:0d:cf:73:4c:e2:f6:57:e4:ba:20:ec:d4:
61:ba:3d:99:93:e6:83:34:09:e3:3c:9c:1a:5b:f2:
97:10:7a:ad:00:ca:b3:83:a5:ee:3d:ce:d5:5f:1c:
9c:5b:51:88:55:d9:1c:f2:35:47:9e:77:f0:17:64:
96:ae:95:f8:65:36:65:0d:48:b8:7c:02:ce:29:72:
a4:09:2f:9c:f3:ff:00:54:b4:a9:d4:c8:63:51:7d:
59:7b:83:93:07:91:84:c1:61:48:3c:34:1e:3c:d9:
2d:f2:d5:ec:75:34:d9:e3:04:c7:4a:3a:38:79:0c:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:C7:3F:67:1F:35:88:56:AC:7B:A0:6E:FE:82:98:94:81:10:94
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:da:77:e9:f7:0b:29:63:cb:39:cf:fe:43:3e:2e:18:cd:34:
37:41:ef:6b:e4:b2:99:c6:06:9e:78:3e:96:b1:04:a0:d3:6b:
7b:0f:49:d9:08:bd:d4:cd:87:11:e4:44:dd:32:c9:e9:ef:47:
de:42:67:2d:4f:5d:c8:7e:b5:b9:71:1e:0a:9b:dc:01:49:0d:
47:7f:00:3d:3d:5a:db:70:25:c4:a8:cc:d6:ed:88:4e:8c:33:
30:37:64:92:29:f3:fe:57:16:03:3c:8a:1b:66:0e:14:88:da:
6e:cf:f0:c4:54:93:a8:12:b9:57:3c:85:2f:41:c4:e9:06:d0:
4a:e3:ce:15:d0:d4:03:82:a4:63:09:ba:92:36:c4:52:b1:1b:
91:1b:f0:ab:f9:9f:1d:30:13:26:ea:16:85:ed:4e:c1:aa:47:
b3:bf:12:5d:7c:f7:12:72:d9:2b:e7:6e:d2:b2:6a:29:be:5f:
4d:c5:d3:9a:1e:88:cb:d1:13:68:12:8d:97:7b:a8:35:cd:8c:
08:74:b2:c7:1a:3b:32:a3:85:f7:0c:9d:03:1a:ed:70:0b:97:
4e:b6:43:b9:ce:7b:bb:0b:09:3a:7c:41:f7:6b:32:7b:b4:a9:
50:a3:b8:3c:83:12:6b:aa:a6:29:c6:c4:f5:39:2a:dc:c9:a4:
ab:82:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 15:47:32 2023 by rpki-client on console-fra.rpki-client.org