Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
File: f98cf399-52e9-47a9-a65e-9953c8a44c49.roa (raw, json)
Hash identifier: 8Pt3rS1nS8C66BVtnZBiVG+RimE+yITpkr8rdsGm/UY=
Subject key identifier: 08:CA:98:11:5F:C8:76:C1:A5:D4:33:59:58:11:00:75:BF:F7:86:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7161A83EFC21B61B36B77DA230152F375B72C646
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:61:a8:3e:fc:21:b6:1b:36:b7:7d:a2:30:15:2f:37:5b:72:c6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=8847ab418704916e53e834e944ba63f459d2fa57c69cb0c2899adac66362f8c1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:b3:f5:2e:1b:c9:b9:f8:51:c6:68:6e:68:
92:6d:39:67:11:fe:8c:87:4c:6b:47:c2:a9:2a:c7:
01:2a:42:74:ff:ef:c1:b2:e5:da:5e:82:dd:e1:16:
d3:e7:8f:9c:ca:56:19:1c:73:9a:f8:a9:c7:14:30:
17:24:84:f6:d2:06:70:c5:18:bd:dd:d1:0f:0f:39:
bb:c2:e8:bb:b8:50:f8:be:ba:41:f3:cc:8a:9e:53:
18:fa:e7:52:13:62:8d:83:a6:28:59:bb:a3:fe:31:
ea:ee:91:c4:04:07:89:6f:93:e0:ee:d4:62:fd:05:
ef:4c:93:b0:af:fd:48:6c:d3:ce:6e:88:e8:62:a9:
4a:78:bb:05:88:e2:7e:3e:d6:13:da:ab:16:ed:83:
3f:1a:5d:56:d7:a0:d3:0c:a7:5a:80:71:e1:b6:d7:
0a:dd:aa:fa:a7:44:55:28:39:b1:14:54:62:9b:99:
29:60:a6:0d:98:32:a9:e0:0e:08:cb:48:8c:b6:20:
42:5b:a7:14:97:53:ae:26:1e:c0:90:cf:d5:ed:3e:
22:da:6c:42:cc:27:32:51:55:88:e1:04:b1:20:cb:
3d:0e:c2:db:15:92:cb:ef:34:bc:2a:f6:e5:7e:c8:
c5:f4:cf:c5:e8:37:9d:3d:2d:38:df:d2:0e:c8:54:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:98:11:5F:C8:76:C1:A5:D4:33:59:58:11:00:75:BF:F7:86:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:91:5a:07:7f:ec:b6:85:4b:8f:b3:b8:16:59:e4:00:5e:4b:
3d:ec:d2:b7:ea:c6:7c:12:a8:8d:f0:85:87:63:23:ba:50:67:
01:f0:b2:e6:d2:4f:ab:a8:ea:94:05:dd:db:ac:64:72:e1:8e:
1a:1d:95:c0:ea:e9:14:c8:76:87:04:95:65:37:ac:d9:26:f2:
15:e0:17:dc:1c:11:ff:9c:3b:64:ac:f0:70:8e:6c:51:71:aa:
f1:f6:ac:4b:5c:59:19:0f:16:36:70:20:36:1a:a5:cc:46:6d:
3c:5d:e8:45:3a:07:bb:f2:9c:c5:a6:b7:cb:63:3c:7b:10:cf:
19:5c:c7:b2:9b:9d:63:56:68:c3:c4:a9:c7:5e:25:cb:ce:44:
e0:0b:b8:b8:62:d6:51:d6:c7:0d:3d:d3:ad:28:e9:e4:f9:dc:
54:be:c3:3d:2c:8f:c6:5c:61:22:1c:28:e4:77:d3:01:b7:e0:
99:0f:7d:c4:ca:25:46:ed:be:10:a4:28:a5:5e:62:0d:d5:43:
6a:e0:1d:57:07:f7:f9:7d:c5:e9:61:13:ba:2b:2e:59:de:35:
51:81:5a:0a:0e:b1:16:09:05:1a:26:84:6f:98:f6:f2:91:5b:
58:e3:0b:af:9b:fd:81:a7:51:af:df:d5:f6:92:b4:97:2b:f0:
10:e0:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:31 2024 by rpki-client on console-fra.rpki-client.org