Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
File: ea779843-e76c-4279-b4b3-012bda8763a2.roa (raw, json)
Hash identifier: C2Oj4TA/gCeZMuePNgMhuqZdA787V4DdBCjr05/R5do=
Subject key identifier: E6:59:38:57:02:6F:54:21:02:ED:FD:9B:D7:5F:1E:B6:33:F3:74:94
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 068E76C20A7D544634381A80F93AC21645B71CDB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1040::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8e:76:c2:0a:7d:54:46:34:38:1a:80:f9:3a:c2:16:45:b7:1c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=3380d8abb366b06f3bfa4da1469955390e8dc393ffa1eedd580616ebf45ed1ba, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:07:65:9f:f8:93:f3:d0:45:6e:ed:06:17:
f4:79:32:3f:e5:86:73:40:df:9e:1c:5d:e8:8e:48:
df:3a:ee:0c:54:63:f3:7c:ab:20:1c:09:a2:0a:36:
66:6a:67:59:8d:d4:d6:6d:36:62:6f:e2:42:ff:4b:
32:53:cc:39:4e:1d:e3:20:72:45:b3:96:77:48:a9:
df:f4:2f:d3:52:31:ff:80:e4:b9:4a:24:86:39:b5:
39:71:16:ae:e8:e0:a6:21:0f:75:4b:9e:d5:67:9b:
10:98:87:62:74:e3:2e:8b:5a:2a:ab:c9:35:72:6e:
a7:e3:9c:bc:05:94:0a:ef:5c:40:2a:9a:23:4b:b0:
8d:19:c2:e9:68:ac:29:d5:5c:ac:b6:e8:68:a6:26:
05:35:db:92:05:c5:b4:5e:43:32:ff:ac:9d:30:5b:
8c:1d:02:d1:e5:73:32:5e:43:6e:84:93:f1:bd:11:
19:73:e8:0c:86:f3:a1:b0:70:f8:a0:b0:84:4b:77:
40:a9:86:51:9f:4b:a2:ae:e0:b0:89:4f:b7:65:a8:
ab:f6:70:73:a8:76:96:5b:87:b6:f2:cc:e5:40:8d:
8d:c3:cf:b9:a9:0a:7e:32:0c:80:1a:15:b1:c8:15:
e4:e2:3b:54:1d:9a:07:1c:e8:5a:90:cb:82:aa:b4:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:59:38:57:02:6F:54:21:02:ED:FD:9B:D7:5F:1E:B6:33:F3:74:94
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1040::/42
Signature Algorithm: sha256WithRSAEncryption
17:4c:ee:bb:3a:6e:77:a9:ea:a6:02:b5:97:9d:ba:c8:fd:ee:
6e:fa:87:c8:43:b9:cd:3c:51:19:7b:b5:28:a4:da:e4:96:83:
9a:d0:ca:30:17:1f:e2:af:a4:b6:e1:5e:24:ef:3d:3e:e3:60:
d8:d1:e3:85:48:74:7e:43:f0:ea:12:ec:04:ce:30:b0:40:28:
69:52:6a:a2:2d:19:e1:08:d4:f3:dd:7a:50:4c:70:31:b6:45:
32:96:f7:a0:75:71:f2:41:a7:cb:c1:e6:ce:10:e5:35:bc:e6:
ce:51:0a:9f:49:02:fc:14:cf:95:aa:ee:fc:58:27:98:1d:02:
2d:5a:bc:a0:24:a9:37:7d:2e:48:a7:b6:dd:8f:04:9f:18:82:
27:9e:8c:d6:be:20:ce:d4:cd:f0:73:13:b6:22:26:75:d4:b2:
c0:69:8f:e0:bf:f4:5d:2e:ad:a3:ce:7d:56:82:05:ee:27:8c:
8f:86:b6:7c:3d:87:fc:90:3f:1c:21:b8:21:17:fd:b1:d1:eb:
9d:81:21:99:9c:91:ac:91:06:21:c9:f4:06:9c:0f:34:17:c9:
b0:ba:de:48:87:32:19:85:85:24:b8:ff:ff:d3:a4:fe:cc:d7:
c5:43:c8:62:79:20:67:ff:b0:29:20:62:9f:21:af:74:b1:12:
4f:5b:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:40:22 2024 by rpki-client on console-ams.rpki-client.org