Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8674188-9c19-45d7-9426-d8b2517cf0d4.roa
File: f8674188-9c19-45d7-9426-d8b2517cf0d4.roa (raw, json)
Hash identifier: poa9MzM4jZKLumKK1JAgLW6CjFmiOiVDWy0Wa0WQQsA=
Subject key identifier: 82:C5:ED:B0:36:56:E3:67:24:73:15:E5:0F:AB:5F:C2:EA:78:35:46
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0AD816A3B1CAA806C931B9824004D54664B741AB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8674188-9c19-45d7-9426-d8b2517cf0d4.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 83.118.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 18:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d8:16:a3:b1:ca:a8:06:c9:31:b9:82:40:04:d5:46:64:b7:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=581e7b6602177ad8d0e8726723b186343cce5be5e789c3daf71394894c455ad2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:75:b6:69:2f:e0:b7:ef:a2:da:a7:0b:98:
56:21:be:15:b1:47:c1:d2:92:4d:3d:7e:3a:e1:a2:
b8:65:79:4c:f3:10:bb:08:1a:a4:2d:7d:de:fd:df:
7e:e4:ba:7b:3d:ca:9f:25:f3:a0:87:03:2e:b9:53:
94:a1:d0:04:7c:09:63:de:d7:88:49:a3:b6:3e:d7:
1d:36:f1:e9:4f:06:0a:25:27:83:19:89:07:e0:bd:
0e:a8:80:41:c2:4f:05:3c:3f:5b:ce:cf:77:18:2e:
ac:47:dc:02:f5:23:2f:8b:aa:3d:6c:0a:ba:d2:8f:
d8:07:cf:81:cf:f3:07:ed:b2:1c:0d:f5:5f:33:0d:
1b:ad:ab:fd:9d:26:88:24:94:7e:96:64:15:06:c1:
58:6c:6c:66:fa:0a:e9:09:7a:e2:90:50:69:11:24:
9a:d0:e3:88:01:74:6a:31:8b:37:f9:46:1e:94:01:
d2:b5:9d:e5:1d:d5:c4:f4:fb:85:57:75:7c:9f:3f:
fd:14:46:d2:c2:bb:f9:75:5d:96:d7:b8:80:45:19:
83:9a:e7:2e:ef:3d:b4:5a:83:d4:f0:16:12:6b:13:
a2:f7:1e:50:e4:b3:50:7b:a1:de:5f:29:c7:7d:98:
7a:bd:11:43:13:a6:96:42:b6:ff:dc:7d:8f:4a:37:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:ED:B0:36:56:E3:67:24:73:15:E5:0F:AB:5F:C2:EA:78:35:46
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8674188-9c19-45d7-9426-d8b2517cf0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.240.0/20
Signature Algorithm: sha256WithRSAEncryption
d4:f3:10:0a:24:b3:34:87:cc:a6:e5:4b:e0:4a:27:57:9c:ef:
41:89:c8:d0:ba:82:25:c7:c2:f8:df:ae:03:49:ad:a0:36:23:
92:03:8d:0e:01:0a:13:48:c4:a6:fb:aa:d0:fb:9c:a4:76:ed:
bd:10:79:6f:54:52:ab:9b:d3:31:3a:25:32:1c:07:b4:08:4b:
f3:62:24:d0:1f:ef:9e:ba:4e:f8:5f:bd:28:f8:2e:0a:89:ce:
4e:a8:68:0e:83:dc:11:1f:e3:f8:32:70:60:2e:16:f3:0e:cd:
6d:b7:97:ee:04:3b:ee:47:d0:81:c7:45:5d:98:65:d2:73:63:
c7:1d:d9:6a:7d:c0:f1:1f:11:60:b7:8f:27:3a:bf:ed:78:ee:
8c:e6:c3:52:50:24:c8:e5:48:24:a2:9f:f7:c7:f2:5f:16:0c:
a5:ae:f0:8e:11:24:4e:e8:65:59:19:f9:91:73:ad:fa:54:4c:
cf:67:0c:93:06:cd:ab:0e:f5:57:67:64:2d:fd:df:45:38:91:
f5:1f:e9:33:31:3b:86:5b:f9:78:41:8a:a0:fb:3e:fb:00:1b:
07:60:ca:d5:ae:1b:6a:57:86:9e:c0:28:59:ef:72:c7:62:cb:
aa:34:17:b7:3b:31:4f:9e:66:f8:7a:af:cf:77:74:67:91:6d:
bf:b9:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:30 2024 by rpki-client on console-fra.rpki-client.org