Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa
File:                     ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa (raw, json)
Hash identifier:          lWNnC4dnLCl0VQjm3ZkWQJOkyeEPiP0pQwPgBXE+joo=
Subject key identifier:   63:11:4E:37:7F:54:E9:70:1D:72:2F:87:75:67:80:7E:AE:06:E5:CA
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       08E59FDE856C26B2E52586274916A4EC9E874E6B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        51.117.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e5:9f:de:85:6c:26:b2:e5:25:86:27:49:16:a4:ec:9e:87:4e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=d25e1cf222e53204c2bb7041cb5782fdeac15ef9aad906b838766d545ef3531e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:d6:1e:0d:90:a4:be:6e:01:73:12:b3:9d:
                    42:ad:99:ed:bc:10:c0:59:4f:9a:29:d2:8d:c5:d2:
                    d8:52:bf:2c:e8:d0:bd:65:b3:59:4a:b7:87:19:54:
                    69:e8:5c:05:2b:88:62:99:de:ce:eb:4f:13:9d:ed:
                    07:68:fb:4e:45:eb:98:94:f6:72:b9:c4:9e:96:7c:
                    dc:49:d2:79:f8:7e:d4:c3:21:12:17:d0:33:da:72:
                    a8:c5:c2:67:01:2d:8b:8e:62:34:5e:8a:d7:d7:e8:
                    ad:cf:9b:a0:4d:9a:41:fc:88:95:15:13:62:6d:b7:
                    80:ad:b0:17:2a:3d:d0:04:73:21:9f:34:9c:59:bf:
                    9a:50:7f:3b:94:92:75:53:a8:13:8e:67:59:bb:ab:
                    23:08:38:82:02:f9:fe:90:94:62:81:1c:42:f3:c6:
                    c0:e0:5e:42:f2:9f:d3:7f:84:81:a6:f6:04:af:0e:
                    a4:be:eb:34:c3:01:10:f9:40:c2:eb:09:e8:c5:aa:
                    3f:7f:7e:01:ee:1e:f0:91:f1:23:41:f7:c1:2e:8a:
                    85:d0:e4:e5:b9:be:ac:cd:1d:2f:68:da:03:a7:7d:
                    bc:73:ea:c9:f0:74:0d:ce:c8:1c:82:73:ce:1d:3d:
                    d4:b2:32:50:6d:b7:07:33:ec:a9:e4:69:b2:a4:3d:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:11:4E:37:7F:54:E9:70:1D:72:2F:87:75:67:80:7E:AE:06:E5:CA
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.117.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:19:17:87:db:97:76:8a:1d:90:11:99:af:22:1a:b1:c6:df:
         27:55:22:aa:a7:44:28:c0:b0:bd:4d:59:07:69:69:e5:d8:ac:
         74:25:1b:58:3f:17:5b:36:92:2a:ca:90:d0:bc:35:1a:4a:34:
         1e:22:6e:7f:10:04:c1:37:39:53:b3:e5:df:23:f7:22:7c:de:
         7b:21:66:da:b6:65:e0:df:24:b4:e0:0d:98:3f:73:9f:68:e1:
         7a:ab:53:b6:f2:e6:35:c6:0f:bf:a0:05:78:82:45:8c:f5:fe:
         ef:2b:3f:00:d8:73:1b:a1:25:d3:c7:b7:c1:0e:15:e6:63:ee:
         03:71:c3:8e:b8:fc:ac:40:86:12:77:65:fa:03:1b:9c:52:97:
         7a:dc:98:dc:1e:29:70:f9:05:d2:b7:6e:98:6c:67:93:6c:15:
         4d:83:af:45:76:61:9d:66:13:f6:ec:18:4a:e0:c1:bf:03:65:
         42:8a:2e:7d:6e:60:47:7f:f2:db:b8:b1:ef:10:6e:53:cf:50:
         f6:4b:08:31:e4:6b:87:d5:cc:f5:48:c9:5b:57:f3:97:1e:40:
         7d:d6:fd:5d:72:eb:70:12:76:30:e0:f4:aa:a7:27:e1:52:2c:
         0f:9b:25:0d:67:da:b2:3b:1f:8c:4b:0f:41:70:3b:00:bb:56:
         1d:ee:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:24 2024 by rpki-client on console-fra.rpki-client.org