Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
File: f98cf399-52e9-47a9-a65e-9953c8a44c49.roa (raw, json)
Hash identifier: rvIyuvoDqwurGWjiFUg1t1iqDjmgaW+TNf5ckkZTGIY=
Subject key identifier: 70:09:C6:29:B3:3E:27:71:A3:4B:D9:D3:E7:71:8E:5E:14:7B:D0:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4AFF668648BF2B5F85C4B8FFF65257A52E689016
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ff:66:86:48:bf:2b:5f:85:c4:b8:ff:f6:52:57:a5:2e:68:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=75d8e67522ac3b432f5918d9f20bf4969f39dd61863503ca0e1260a7015afbdc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:0d:16:0a:a1:4b:f6:51:31:92:43:c5:24:
7f:7c:5f:41:a7:ab:5b:7f:0a:77:5a:a9:a4:64:95:
16:38:96:14:21:93:4a:1b:91:62:01:6a:f1:cf:e2:
a5:5b:ae:22:f0:cb:24:e4:85:8c:e6:89:7a:17:46:
28:f6:bd:2c:dc:f9:21:33:cd:cb:47:ba:8b:9f:65:
4b:e1:c0:5a:1b:b3:da:eb:fa:90:45:67:1c:bc:db:
3f:b3:11:74:06:33:33:02:13:dd:56:37:00:71:d4:
a8:77:da:b0:60:c2:80:0a:f3:8c:e0:c9:1a:a6:d9:
64:79:0d:e4:81:ff:63:f7:54:68:ab:35:fd:3b:ee:
63:e0:da:77:df:d3:d1:b0:96:c0:2c:82:dc:51:4a:
b2:a0:1a:1f:b3:7a:ea:08:45:fe:e9:ef:b8:24:b2:
2a:30:ec:df:a9:9e:18:d1:63:60:8c:15:cd:5e:bb:
45:b8:15:1f:af:cc:e7:dc:fe:01:89:6c:27:77:bc:
a0:4e:bf:93:b3:fc:fd:83:91:df:c9:0a:82:5e:a3:
f1:24:36:65:42:a6:ee:9e:55:fe:e3:f9:b7:19:9d:
7d:c2:06:49:4c:f9:82:85:31:64:98:7d:c4:fe:0f:
9a:e0:a5:47:35:01:ee:00:84:d2:65:d4:7a:0a:14:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:C6:29:B3:3E:27:71:A3:4B:D9:D3:E7:71:8E:5E:14:7B:D0:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:89:eb:a0:d8:2c:d5:57:8f:11:ee:c7:8a:f0:d5:86:d2:3b:
86:29:df:ae:f5:db:ad:f3:c3:f5:4a:42:8a:61:bd:8a:36:ab:
57:b8:94:01:a8:30:80:2d:a2:4f:2c:4a:9d:df:1f:b6:73:5c:
65:8d:05:eb:60:7b:e0:43:e4:3b:a8:5c:1c:56:43:65:f8:bf:
63:c3:a5:14:2d:3a:aa:12:3f:2e:aa:a5:c1:de:8f:31:7e:8a:
2f:54:c1:c4:b5:c9:63:a9:70:2f:e6:d0:0a:6b:26:fb:d9:8a:
24:05:c7:c3:da:94:08:33:0c:a3:a4:93:95:97:04:00:b4:8f:
6a:9d:51:8e:cd:c2:d2:a2:38:29:40:9a:99:02:2f:eb:7c:97:
25:09:71:e8:ad:01:e7:e9:bd:91:58:24:1f:1d:e4:1e:32:d1:
12:b2:f9:0a:e8:26:eb:6f:f9:30:6f:6d:a9:bc:4f:9f:38:c3:
7a:67:e4:ad:1e:8d:e0:02:72:7f:e8:73:42:81:d0:1b:90:3c:
84:27:65:68:4d:e4:b7:41:e0:5e:2b:13:5f:ae:82:35:03:37:
b9:37:88:52:d4:f0:07:82:d4:0d:f6:58:0c:ca:0f:7d:8e:7a:
02:92:98:da:32:ae:81:fc:9a:e0:5f:62:b2:5d:28:b1:69:66:
91:9c:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:08 2024 by rpki-client on console-fra.rpki-client.org