Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa
File: ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa (raw, json)
Hash identifier: Fdv8rnxv6ZBTCLCxEnYHoirgBj3p3flQvfz3X5Vbq34=
Subject key identifier: FE:6F:F3:A2:B5:30:9C:45:E3:DB:CC:50:1B:FE:F4:41:64:28:36:4E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1FBCFC3D9F6319B1E20CF2DC1B080E2E389D3285
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:bc:fc:3d:9f:63:19:b1:e2:0c:f2:dc:1b:08:0e:2e:38:9d:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=b235249d16fbf26dccb4c9ee20f48f2f6ff405e793d6d91a6575c958082ee038, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:ef:86:a6:89:d7:c2:43:73:0f:55:fe:b5:
2c:cb:ee:6b:d7:ea:ff:5a:d1:8a:8d:76:bb:90:a9:
c0:3e:ff:77:07:87:e2:59:12:2b:66:83:bf:4c:a2:
9b:77:7b:f9:ef:91:68:4f:34:e1:24:e7:43:56:39:
d8:34:1b:fa:bc:23:0b:bd:13:fa:a9:12:ee:ad:3c:
0d:6b:0f:62:60:47:49:6d:f1:27:c5:f9:09:36:de:
d8:c2:48:ea:18:5b:c1:2e:19:d9:0b:0b:73:19:8d:
c0:e9:d0:36:4a:52:26:5a:9e:b6:ca:fd:c6:53:7f:
9c:e1:10:07:72:55:45:40:b3:26:4e:02:8e:30:c3:
89:00:fb:cd:fc:6b:a4:0e:2e:0b:56:4a:18:94:84:
71:be:7a:d4:23:1b:0d:8f:47:d7:37:fa:a1:ea:4a:
b6:1e:ca:0a:25:c5:25:20:70:ed:79:22:24:e8:dd:
9e:65:cc:b8:4d:71:3c:44:85:b5:fe:2c:fc:5b:88:
d4:3b:9c:5f:56:cf:1b:36:fc:92:0c:89:b7:8d:7b:
f9:89:9f:c7:6f:cc:bc:3a:21:aa:84:69:3e:30:35:
b8:f0:07:2d:cd:d6:92:27:60:8d:5f:52:c5:ae:d3:
04:5f:25:bb:03:df:1a:68:c2:c5:8a:6b:b8:26:ab:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:F3:A2:B5:30:9C:45:E3:DB:CC:50:1B:FE:F4:41:64:28:36:4E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf9de9c-f37f-4256-bcd9-c7bf26e83e9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:df:62:a9:c2:c8:c1:3e:0d:69:85:7e:40:0a:98:70:c0:17:
a0:29:ab:0f:5c:d4:16:af:88:fa:d1:76:35:49:68:8c:83:57:
36:d4:d7:4c:f3:94:ff:37:71:b0:2d:47:ce:b6:c1:09:87:20:
7f:ec:37:a3:38:af:25:d0:31:a1:66:f8:84:95:37:24:18:bd:
d4:c8:ba:0f:3d:fc:b2:85:7a:68:e4:f1:1d:c9:3f:76:f5:fc:
03:a5:02:32:7e:10:a2:bf:35:09:97:a3:46:71:d1:97:9d:67:
eb:15:2d:6a:11:99:48:61:e1:36:fd:bc:c3:b0:55:94:87:7d:
c8:a7:65:a2:b5:84:8f:ee:8f:09:66:59:6a:f3:43:aa:01:d3:
26:fb:2c:3d:1b:77:db:3e:31:54:a4:ca:bf:af:4d:ff:de:03:
25:cf:38:3a:d3:32:c0:ad:8a:4c:f3:ce:64:fe:6b:01:3a:6b:
be:f1:3a:2b:7a:f6:50:3e:63:5b:51:af:a9:e5:22:b1:e5:6b:
cf:0a:a9:46:81:b1:0a:83:bb:6e:a4:4d:8a:86:f8:cf:f4:38:
b6:eb:61:03:46:ae:32:5b:7e:3c:2f:bf:1f:db:5a:0a:48:05:
50:a3:ab:fb:bc:35:5d:b1:55:4c:bc:45:3e:b1:39:2c:81:10:
f9:da:78:04
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUH7z8PZ9jGbHiDPLcGwgOLjidMoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTgwMDAwMDBaFw0yNDEyMjMyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyMzUyNDlkMTZmYmYyNmRjY2I0YzllZTIwZjQ4ZjJmNmZmNDA1ZTc5M2Q2
ZDkxYTY1NzVjOTU4MDgyZWUwMzgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALEl74amidfCQ3MPVf61LMvua9fq/1rRio12u5CpwD7/dweH4lkSK2aDv0yi
m3d7+e+RaE804STnQ1Y52DQb+rwjC70T+qkS7q08DWsPYmBHSW3xJ8X5CTbe2MJI
6hhbwS4Z2QsLcxmNwOnQNkpSJlqetsr9xlN/nOEQB3JVRUCzJk4CjjDDiQD7zfxr
pA4uC1ZKGJSEcb561CMbDY9H1zf6oepKth7KCiXFJSBw7XkiJOjdnmXMuE1xPESF
tf4s/FuI1DucX1bPGzb8kgyJt417+Ymfx2/MvDohqoRpPjA1uPAHLc3WkidgjV9S
xa7TBF8luwPfGmjCxYpruCarq1MCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT+b/Oi
tTCcRePbzFAb/vRBZCg2TjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZWNmOWRlOWMtZjM3Zi00MjU2LWJjZDktYzdiZjI2ZTgzZTlhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADN1MA0G
CSqGSIb3DQEBCwUAA4IBAQBj32KpwsjBPg1phX5ACphwwBegKasPXNQWr4j60XY1
SWiMg1c21NdM85T/N3GwLUfOtsEJhyB/7DejOK8l0DGhZviElTckGL3UyLoPPfyy
hXpo5PEdyT929fwDpQIyfhCivzUJl6NGcdGXnWfrFS1qEZlIYeE2/bzDsFWUh33I
p2WitYSP7o8JZllq80OqAdMm+yw9G3fbPjFUpMq/r03/3gMlzzg60zLArYpM885k
/msBOmu+8TorevZQPmNbUa+p5SKx5WvPCqlGgbEKg7tupE2KhvjP9Di262EDRq4y
W348L78f21oKSAVQo6v7vDVdsVVMvEU+sTksgRD52ngE
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org