Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: Wdqszr8IsjWmFWL6OpAsOYZWDx1x4kwZdjW7sLQnWMI=
Subject key identifier: 6C:A1:A2:99:C3:0A:39:76:CE:62:72:AE:9F:A0:2F:CB:2C:68:3B:49
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6606B69F664F949386C325D7142960A21C633C0A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:06:b6:9f:66:4f:94:93:86:c3:25:d7:14:29:60:a2:1c:63:3c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=d5c437d280505af67598d9155e83c91ec6a257c796bf7e3b2f1720a09e9690e9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:8d:83:f3:9d:cb:a1:5f:ab:57:10:47:80:
bb:c3:e7:99:4f:00:40:2d:aa:31:09:eb:95:1f:be:
64:8c:cc:2c:41:55:2b:fa:87:0a:cd:44:42:0d:2b:
d9:44:af:94:05:e9:72:15:9c:b4:cc:02:1a:5f:03:
d0:cd:22:36:a1:42:36:30:6c:79:8a:69:0a:ad:12:
04:a2:90:8d:df:3d:d7:d3:2b:11:6c:b2:fd:bb:50:
35:41:82:d3:6d:68:54:88:c2:cd:e0:81:21:a7:72:
27:7c:32:e9:a5:5a:f2:32:b4:7f:a8:a9:50:dc:49:
35:28:ab:b1:ba:16:1c:a6:e3:e0:ef:64:9c:bc:07:
4e:c7:48:e8:6e:47:29:46:a0:d7:a6:99:e0:3a:78:
91:f7:d2:bc:b8:9c:af:29:4a:33:0b:34:af:93:13:
2b:ce:fa:09:56:3b:3d:33:63:c5:59:82:30:04:65:
a5:14:a6:a1:e1:9c:35:45:2b:a6:21:9e:82:b2:02:
01:3f:08:24:c1:32:5e:3e:a5:f9:6e:ba:b1:3d:e1:
e7:50:9c:6c:3d:d4:bc:af:1f:f1:b7:4c:cf:3f:38:
65:e1:90:71:5d:c9:92:e7:7c:12:88:59:16:85:5d:
e1:ea:2b:ec:5a:b5:e1:8d:c0:b2:1c:58:89:07:cd:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A1:A2:99:C3:0A:39:76:CE:62:72:AE:9F:A0:2F:CB:2C:68:3B:49
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:24:c4:19:eb:46:0a:0d:ce:2e:6f:ab:88:9e:5b:52:a4:53:
d0:78:b8:64:11:1a:99:d6:13:34:b9:93:d6:9c:cb:a3:33:33:
04:6c:43:16:50:0b:d5:1a:e3:97:05:9d:c9:33:ad:0a:71:c5:
4e:ec:8c:8a:95:a2:75:49:e4:e8:3d:50:81:0d:ab:e6:c9:63:
97:09:b6:c6:88:c2:53:28:2b:2e:38:1c:24:27:22:36:1c:38:
f1:de:be:bd:01:b8:66:03:6b:fe:80:b1:b8:ed:74:95:b0:8f:
81:d5:12:21:8d:32:0c:ad:c1:25:93:9f:64:b4:dd:94:05:98:
cd:48:52:fd:d5:18:10:99:85:08:46:54:c6:31:34:93:a8:eb:
e5:97:db:df:6a:15:d7:c3:55:a2:95:a0:af:a3:df:33:9b:a7:
6e:eb:3b:9e:d4:b5:17:d2:a5:8f:d3:91:66:67:4f:d2:f8:fc:
6d:24:cf:fe:78:6a:0b:12:2c:4d:06:c8:9a:06:e9:bb:7c:cf:
95:f7:b0:92:ac:cf:1c:38:8e:3b:c6:eb:ab:3f:81:de:6a:41:
e0:aa:43:8f:04:48:de:32:59:23:e6:08:8b:29:cc:22:9b:76:
ce:22:50:e0:94:7b:c9:bf:b1:d0:d0:ca:3c:e2:76:19:87:59:
79:57:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org