Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
File: ea779843-e76c-4279-b4b3-012bda8763a2.roa (raw, json)
Hash identifier: WjSu4JjaifMkp0bPzDgJFrYbygDNiuqJyJGWDZxN5Ng=
Subject key identifier: F8:58:64:37:F4:A5:71:B4:58:BD:C1:27:B7:AE:61:5F:DB:8C:67:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6693214D2A8BD88593F64E27C640A07018D55F36
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
Signing time: Mon 11 Nov 2024 00:00:00 +0000
ROA not before: Mon 11 Nov 2024 00:00:00 +0000
ROA not after: Mon 16 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1040::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:93:21:4d:2a:8b:d8:85:93:f6:4e:27:c6:40:a0:70:18:d5:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 11 00:00:00 2024 GMT
Not After : Dec 16 23:59:59 2024 GMT
Subject: serialNumber=a1c6841f16c9c9bc253a460b37ae20222c58669e348064ab57ead9bb1ab26741, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:5d:1a:40:1d:67:8a:14:95:52:4c:f0:ac:
ec:8c:90:0a:42:9c:8d:25:d1:8a:6c:ca:a2:f6:2b:
b3:dc:71:ab:59:a7:29:97:32:b6:11:f2:ef:6a:f9:
c3:70:f7:df:42:34:62:fe:5f:ec:f1:fb:65:5d:8b:
f6:32:79:22:03:0f:10:fd:0d:b7:b0:21:29:00:c2:
91:79:77:38:f3:96:54:7a:6d:88:4d:6b:01:ff:61:
11:5e:e6:ca:0f:43:bb:9d:f2:20:c4:8c:f6:f2:ee:
42:ba:0f:bd:4e:7d:bf:f9:5e:67:43:89:d6:c2:0f:
3e:b8:78:ec:d7:15:99:59:ee:40:82:93:a5:0b:b2:
7a:a8:7e:12:1c:26:24:e5:80:2d:a6:48:df:2a:c1:
2c:7c:ee:0a:73:07:9c:07:a6:e2:a1:20:52:a5:9d:
56:17:6f:4e:09:f8:82:2e:fd:e4:77:56:35:ed:dc:
72:ba:0d:ca:f1:e1:f6:0e:88:0e:95:79:e3:a8:d2:
e0:b5:f2:69:be:0e:f7:ac:63:8c:ee:cd:3b:8b:59:
df:c1:ab:29:b8:13:0b:84:fa:20:49:84:db:22:58:
1c:e1:72:b1:19:46:88:4b:29:90:4f:01:ae:40:59:
4b:e3:2f:21:5c:ac:ae:1e:09:db:24:25:37:6a:35:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:58:64:37:F4:A5:71:B4:58:BD:C1:27:B7:AE:61:5F:DB:8C:67:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1040::/42
Signature Algorithm: sha256WithRSAEncryption
39:98:92:1a:54:fa:af:45:50:69:49:80:59:dd:73:78:24:3c:
14:eb:e7:97:44:36:2c:52:64:b6:5d:06:a9:78:8e:ec:53:f6:
2e:41:a5:f1:06:a3:a1:46:54:8f:e2:0f:74:7a:a5:8d:c2:10:
5d:49:96:16:87:ec:d9:c7:bc:2f:bb:35:85:75:45:12:2a:af:
3b:7b:bf:73:e4:d5:77:fd:70:2a:ae:fc:b5:c6:2b:5b:0b:14:
58:ce:ec:bb:2c:2b:22:8f:a4:bd:f6:55:3d:d5:87:6e:31:71:
ad:96:a3:a5:37:93:e1:3e:e6:76:cc:4e:ec:b7:ac:35:28:c8:
54:3a:42:93:5c:e9:f2:8b:f1:89:e6:7d:1b:37:43:2b:17:69:
25:f9:72:9f:9a:17:fb:39:60:2a:5f:81:7f:a3:65:76:96:65:
5f:39:ca:db:2d:e7:b4:64:df:80:fa:cd:8e:f4:aa:8c:ea:4b:
85:bc:bf:bd:8f:dc:4f:05:c8:ef:cc:f2:e0:34:a4:0d:f8:2a:
6a:1e:11:8a:7e:45:8d:67:24:ae:a0:ec:fe:96:bd:df:1a:14:
04:1b:0b:73:a4:26:87:8a:0e:af:98:10:11:48:15:8b:3d:4a:
69:2e:0a:12:93:d9:ba:c5:f1:2a:e2:08:c6:f4:a2:ed:b5:9e:
0f:01:91:6b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZpMhTSqL2IWT9k4nxkCgcBjVXzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTEwMDAwMDBaFw0yNDEyMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGExYzY4NDFmMTZjOWM5YmMyNTNhNDYwYjM3YWUyMDIyMmM1ODY2OWUzNDgw
NjRhYjU3ZWFkOWJiMWFiMjY3NDExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMMCXRpAHWeKFJVSTPCs7IyQCkKcjSXRimzKovYrs9xxq1mnKZcythHy72r5
w3D330I0Yv5f7PH7ZV2L9jJ5IgMPEP0Nt7AhKQDCkXl3OPOWVHptiE1rAf9hEV7m
yg9Du53yIMSM9vLuQroPvU59v/leZ0OJ1sIPPrh47NcVmVnuQIKTpQuyeqh+Ehwm
JOWALaZI3yrBLHzuCnMHnAem4qEgUqWdVhdvTgn4gi795HdWNe3ccroNyvHh9g6I
DpV546jS4LXyab4O96xjjO7NO4tZ38GrKbgTC4T6IEmE2yJYHOFysRlGiEspkE8B
rkBZS+MvIVysrh4J2yQlN2o1hpsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT4WGQ3
9KVxtFi9wSe3rmFf24xnIDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZWE3Nzk4NDMtZTc2Yy00Mjc5LWI0YjMtMDEyYmRhODc2M2EyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBioBBXgQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAOZiSGlT6r0VQaUmAWd1zeCQ8FOvnl0Q2LFJk
tl0GqXiO7FP2LkGl8QajoUZUj+IPdHqljcIQXUmWFofs2ce8L7s1hXVFEiqvO3u/
c+TVd/1wKq78tcYrWwsUWM7suywrIo+kvfZVPdWHbjFxrZajpTeT4T7mdsxO7Les
NSjIVDpCk1zp8ovxieZ9GzdDKxdpJflyn5oX+zlgKl+Bf6NldpZlXznK2y3ntGTf
gPrNjvSqjOpLhby/vY/cTwXI78zy4DSkDfgqah4Rin5FjWckrqDs/pa93xoUBBsL
c6Qmh4oOr5gQEUgViz1KaS4KEpPZusXxKuIIxvSi7bWeDwGRaw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:30 2024 by rpki-client on console-fra.rpki-client.org