Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75eda97-cc53-4a04-9991-af2bfeeed825.roa
File: a75eda97-cc53-4a04-9991-af2bfeeed825.roa (raw, json)
Hash identifier: iRWor+7lhmMrdYP+/tsMSWWuB0IKSA74gnlaHRHictw=
Subject key identifier: 67:90:FC:5D:22:1A:6A:DE:9E:60:D9:1B:5F:A8:47:13:E7:A0:46:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A7AD0CC4687E7AE2F5D4233D579C8478D39271C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75eda97-cc53-4a04-9991-af2bfeeed825.roa
Signing time: Sun 19 Mar 2023 00:00:00 +0000
ROA not before: Sun 19 Mar 2023 00:00:00 +0000
ROA not after: Sun 23 Apr 2023 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Mar 2023 08:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7a:d0:cc:46:87:e7:ae:2f:5d:42:33:d5:79:c8:47:8d:39:27:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 19 00:00:00 2023 GMT
Not After : Apr 23 23:59:59 2023 GMT
Subject: serialNumber=fd881c6b79bfc2b3f1766d06d02f74d891ab11549849928c039f63f6442badf6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:9b:7f:85:a6:37:f5:65:15:16:bc:50:da:
78:3b:c2:fb:ec:90:5d:ef:90:2a:3c:72:27:96:bf:
5b:09:0c:98:c2:21:4b:40:9b:ac:11:7e:42:e6:f9:
cf:93:7d:ba:72:ee:29:f2:7d:39:57:ac:ca:a0:67:
2a:e6:bf:35:a1:f6:36:86:d8:7c:18:84:92:7f:fe:
c5:ee:b3:d6:3f:ac:52:61:c2:f3:2c:4a:2b:8c:ef:
83:ab:f8:bb:07:01:69:6d:55:bf:b2:c7:26:96:79:
22:f3:49:83:e7:23:e3:17:1f:5a:2e:74:ea:af:73:
39:d2:18:45:d5:11:8f:a5:30:e5:04:77:a0:0e:12:
03:d1:d0:f6:f6:60:c4:f2:1c:ac:f4:08:9e:93:2c:
a2:79:96:4f:5a:e9:51:6a:db:91:2e:5c:43:ed:56:
68:09:a4:76:30:f4:2f:d0:a2:b9:cc:54:4d:3b:89:
a5:c4:c7:ce:d1:20:b9:c6:9e:a6:ec:6d:34:c5:ad:
ac:44:91:5f:4a:6a:fb:ec:21:41:9e:f8:70:01:e3:
cd:48:fa:a1:25:2c:ad:64:8d:be:00:3c:72:2b:cb:
ec:87:ad:6e:b6:b0:66:8e:51:22:84:de:c9:ab:75:
b4:03:31:3a:aa:c4:5f:94:61:7e:99:a7:8c:62:9e:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:FC:5D:22:1A:6A:DE:9E:60:D9:1B:5F:A8:47:13:E7:A0:46:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75eda97-cc53-4a04-9991-af2bfeeed825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:9000::/40
Signature Algorithm: sha256WithRSAEncryption
58:14:ee:31:dd:06:f1:91:b3:cc:b4:73:44:5e:f4:a5:ea:d8:
25:6a:b7:07:c2:37:e9:2a:0d:2a:c8:7c:08:8c:9c:6a:c4:26:
eb:ec:e8:ab:91:a3:0f:b6:0f:10:c8:e7:ea:40:35:73:e8:ae:
8f:51:03:e2:f0:64:f2:a7:6a:fc:ea:49:58:6f:89:93:d1:b4:
fa:e3:02:be:4e:a1:21:4f:37:34:ce:36:51:9c:cd:92:2a:04:
b3:0f:24:b4:0b:df:6f:9f:c6:ca:2e:f8:27:fb:96:ae:65:7a:
bc:35:2b:00:86:10:4c:fc:6c:ac:5c:2b:b5:67:97:95:e8:09:
36:fc:b3:c9:fd:e2:6e:6a:5e:ee:d6:54:cf:27:2b:9e:65:cb:
98:25:f4:ac:ed:fe:83:d0:ff:b7:07:f7:04:1e:8b:f4:70:4e:
35:8a:3d:e9:1f:e6:b2:50:1f:5f:f2:7c:4a:c8:61:2d:e7:97:
71:e3:e4:77:18:4f:a0:83:8c:57:0e:f2:98:0c:2c:d4:55:46:
f2:d5:52:00:41:17:ca:c4:70:99:83:ec:37:ae:cb:bf:ca:c1:
11:ba:f9:b1:a2:f7:07:dd:28:00:4a:a8:e1:9d:ee:d3:ce:b3:
a7:19:01:84:dd:96:8e:03:03:4d:9c:b8:8f:23:9e:bc:de:0c:
ba:d6:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 19 16:19:40 2023 by rpki-client on console-fra.rpki-client.org