Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
File: 1171c547-ddc2-479f-91b8-52cc9e170312.roa (raw, json)
Hash identifier: hSiddybZBGewXVyaBum630qNukvLRyiCRc8lhxQnrMU=
Subject key identifier: 7C:A6:D1:1D:E8:EB:82:14:50:F6:3B:CB:BC:B3:72:BC:CB:98:3A:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25ADDD4AF3AC0E459CFE2FE6C71B7BCB18071878
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
Signing time: Mon 13 Mar 2023 00:00:00 +0000
ROA not before: Mon 13 Mar 2023 00:00:00 +0000
ROA not after: Mon 17 Apr 2023 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Mar 2023 07:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ad:dd:4a:f3:ac:0e:45:9c:fe:2f:e6:c7:1b:7b:cb:18:07:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 13 00:00:00 2023 GMT
Not After : Apr 17 23:59:59 2023 GMT
Subject: serialNumber=3d5791b8694966f3a9a3db824cde20d1af862eec7100c2653e7c464cefe84c7a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:aa:f4:0e:be:4f:e9:4a:6d:78:41:de:2d:
40:49:c3:2f:6b:f0:e2:a0:6d:99:10:ac:bd:53:25:
9e:d4:8c:34:30:8f:d1:38:57:7f:5c:b9:fe:ce:47:
5f:a3:ce:53:a4:0f:32:45:9e:e9:ae:ed:cb:d2:52:
ee:26:d5:1d:96:90:74:44:48:2f:89:45:99:82:c5:
b3:ec:f4:a7:57:a5:0b:fd:ee:a4:74:36:b9:b9:5f:
5a:ae:9e:c0:08:2a:c3:91:91:2d:13:19:3e:ab:66:
20:f8:ea:af:8d:54:6e:49:ee:bc:68:f1:78:01:19:
f7:05:ad:0a:45:64:d7:f0:6d:f9:a0:d3:8a:fc:92:
f9:b0:10:a3:5a:97:4e:93:45:64:57:2b:dc:35:59:
29:f1:4c:d8:35:d4:ed:c5:6d:6b:f2:fd:dd:09:ff:
09:79:91:c1:d9:6e:e7:08:58:75:43:8c:11:b9:32:
86:9b:06:09:ec:26:d9:8a:07:4a:f2:1c:97:da:31:
66:b8:4b:16:69:85:78:69:7b:8c:f2:1a:60:40:b1:
24:47:dc:9b:af:6b:9e:cb:70:03:99:90:8e:18:ca:
ad:77:4c:43:ef:f8:d9:43:cc:ad:fc:05:1b:92:be:
2c:c5:be:fd:e2:b5:4a:de:be:4b:e0:68:61:51:c2:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:D1:1D:E8:EB:82:14:50:F6:3B:CB:BC:B3:72:BC:CB:98:3A:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
83:aa:9b:2e:4b:c2:0a:74:2e:59:b6:8d:89:67:5b:8f:e2:9d:
55:2e:29:bd:e6:b8:b9:3a:8f:63:2a:23:50:86:b7:a3:84:92:
26:39:f2:63:e4:be:e2:d9:fa:8a:a6:e8:05:7b:e2:a6:31:6f:
4c:e0:87:7a:bb:f1:f7:14:16:2f:60:bd:f2:0c:60:ca:ba:7f:
69:70:82:77:c7:8b:ab:d6:f3:a0:2d:ac:db:c7:f6:d0:19:7e:
00:0d:df:78:16:bd:c6:12:0b:3f:c1:6e:a3:06:e9:a4:ad:2f:
93:e2:1f:5b:6a:a0:ec:44:de:ae:4b:5d:7a:c0:da:1d:18:7e:
55:aa:dc:d5:9d:4d:91:d6:65:35:81:59:d6:e4:19:bd:42:aa:
3c:be:af:ae:3f:51:61:37:86:3d:90:07:78:eb:90:d4:1e:e5:
af:5e:01:b0:b1:5f:80:29:9a:a7:4d:dd:4c:2f:54:9a:3d:c0:
57:a3:70:ae:96:d5:44:02:b0:c1:a2:56:c5:ce:56:0f:bf:80:
69:e5:5e:db:3f:ad:0e:41:cd:0e:ed:4f:31:00:be:91:d2:cd:
ca:9c:0e:ef:dc:10:ba:7a:81:de:9b:85:77:f9:8b:25:d1:f0:
82:ed:c4:73:6a:63:67:ad:e0:31:78:4a:a7:b7:c7:77:a2:1a:
76:3d:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:45 2023 by rpki-client on console-fra.rpki-client.org