Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
File: 00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa (raw, json)
Hash identifier: 8Rv29yuG4W8pG88fY3iedj+bi4Cxqb/55d1V2pu7QSU=
Subject key identifier: B6:36:B3:C4:D0:48:02:96:A6:7F:0F:C3:E9:6E:97:F6:3C:4E:AC:D3
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 1F42F482653BA9AB9DB0AD8AEBF2B673DCCFB42C
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
Signing time: Mon 26 May 2025 15:21:22 +0000
ROA not before: Mon 26 May 2025 15:21:22 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:42:f4:82:65:3b:a9:ab:9d:b0:ad:8a:eb:f2:b6:73:dc:cf:b4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:21:22 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=ea7965fa01573d459ceaa82865962b1a2eddb093c750f308a577af6dd3663a1a, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:30:74:70:e1:fa:ef:40:24:91:7c:a3:bd:
b2:54:96:f2:5c:bc:6d:ba:89:a9:13:c2:96:24:4e:
70:b8:65:07:ee:13:e8:6d:50:72:51:47:24:31:24:
5f:2a:1c:75:9a:52:02:02:a8:2b:37:33:a5:a5:b7:
05:72:b3:ab:60:2c:8a:a0:48:54:6f:b6:00:5b:dc:
81:77:d4:52:df:1e:a1:c7:70:2a:fc:50:59:c1:18:
cf:e5:eb:0f:1e:6a:34:97:a5:6f:a1:f8:d3:c8:6e:
0c:df:4f:5a:73:db:16:20:5e:4f:f8:4d:65:10:e9:
e2:36:68:98:1f:59:4c:6d:a3:12:4c:3f:b9:db:42:
75:a2:15:1c:bc:6e:0c:8f:9d:62:18:3a:9f:66:8b:
3a:aa:82:66:f6:fc:fc:3d:81:7a:93:04:59:16:a0:
c7:1f:36:6a:da:0b:10:91:90:8a:56:aa:3a:bd:57:
f0:6e:99:1e:33:bd:e0:b2:d2:5f:8f:7b:05:81:05:
6f:c3:4f:cf:c5:54:51:76:ae:4c:a5:0a:09:58:3f:
55:52:97:9a:34:ad:3f:c6:24:da:96:e9:9d:2f:72:
5a:b3:c5:32:4e:51:4f:fb:b3:1b:52:c5:e1:94:23:
92:89:28:cf:19:64:7e:ec:ae:d1:68:fc:61:3d:b2:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:B3:C4:D0:48:02:96:A6:7F:0F:C3:E9:6E:97:F6:3C:4E:AC:D3
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6000::/36
Signature Algorithm: sha256WithRSAEncryption
38:b3:73:a7:66:48:07:1b:50:3a:a9:79:f9:74:90:1d:c0:f6:
ec:7a:9a:16:e5:ba:b5:ae:c5:8e:e1:fa:67:50:d9:59:0d:61:
3a:06:1b:d4:d9:e1:0e:60:c9:c0:92:2e:e9:2b:c1:d1:e6:65:
a4:18:b4:7b:b7:47:1c:43:50:e9:06:d5:74:62:ae:80:11:ac:
d5:96:36:b6:31:62:d4:a3:76:a4:e2:29:cc:38:09:cb:b7:e9:
d2:f4:47:01:7b:04:50:96:10:d7:3e:fb:48:6c:b0:00:f5:d5:
33:91:b1:c7:53:af:be:a2:a8:d1:ba:08:fa:66:dc:a1:2d:69:
64:81:5e:74:fc:14:19:47:fd:12:49:8e:87:d1:5a:0e:3e:96:
6f:71:89:5b:59:f3:17:7f:b2:c2:bf:52:20:4f:08:b3:6e:c3:
e1:66:5d:9d:f3:49:b8:d2:4c:32:af:23:d7:e7:a6:aa:7f:38:
6b:7a:36:ea:ea:cc:18:81:97:bb:04:74:16:f2:e6:13:ac:a8:
62:d5:a6:18:33:49:4b:c5:36:e3:93:29:05:f1:4d:66:3d:ab:
0c:35:ce:46:be:e1:ac:e1:4f:b9:70:a1:74:63:25:37:88:c1:
45:b7:3b:bc:b1:75:16:d3:83:3e:f4:63:7e:cf:7b:5c:c6:9d:
dd:8c:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:52:52 2025 by rpki-client