Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00d32677-2dbe-47e3-a4b3-be1e601729bd.roa
File: 00d32677-2dbe-47e3-a4b3-be1e601729bd.roa (raw, json)
Hash identifier: oqtcKiyc4+V6uxikd9KCLamhRetl6lEo7ztxP1ld4GI=
Subject key identifier: 14:26:7A:1D:3F:93:63:7A:B1:21:22:23:FA:4F:3D:1F:77:76:F9:84
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 07486F4999E7B20F8E35FD266E8DE9221AD90657
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00d32677-2dbe-47e3-a4b3-be1e601729bd.roa
Signing time: Mon 26 May 2025 15:21:13 +0000
ROA not before: Mon 26 May 2025 15:21:13 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:48:6f:49:99:e7:b2:0f:8e:35:fd:26:6e:8d:e9:22:1a:d9:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:21:13 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=3a26491bc5fe0a96ec6b9be9930f8f1226aa3a44668e1097402fdbf355f8b78c, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:0b:15:d8:40:a1:80:76:8e:7d:d8:ee:41:
91:4a:1d:5f:7c:71:10:f4:5b:a0:24:81:49:49:6a:
e9:c1:60:3e:d2:b1:aa:af:95:47:91:46:4b:6c:65:
c9:19:3c:f4:6c:fd:d3:6f:cb:68:fd:a1:e2:d8:95:
f0:24:c0:1e:be:ba:63:5d:82:91:4a:70:2f:19:74:
de:32:9d:6a:1e:51:bc:a6:cd:b3:6f:24:6a:44:68:
b9:10:1f:7f:c0:62:03:c6:fd:be:2e:18:66:0f:bc:
d1:51:3c:03:1a:b0:0d:8c:7c:52:60:80:bc:f6:e9:
20:12:79:ec:06:81:ce:cb:86:34:41:24:23:62:09:
28:5d:96:32:c4:00:82:ef:0c:82:0a:c7:7e:ed:9f:
7f:ec:fb:dc:cd:8a:1b:50:b8:ef:03:a8:49:a4:cc:
cd:d4:64:62:93:ae:7c:19:0e:e0:47:e2:01:69:40:
4c:6e:d8:64:ff:43:0f:84:e4:3d:6b:c6:fc:8e:01:
2d:ea:ee:d2:38:a9:00:3c:e5:f2:60:6d:45:42:8d:
36:b3:50:8d:a3:e2:9e:e8:91:7a:f1:f8:bb:09:5c:
e0:b9:83:3f:b5:fd:62:ee:4a:f6:3b:95:0a:ab:28:
65:37:a8:84:a4:d1:b1:fa:69:ec:98:71:00:39:3d:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:7A:1D:3F:93:63:7A:B1:21:22:23:FA:4F:3D:1F:77:76:F9:84
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00d32677-2dbe-47e3-a4b3-be1e601729bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9000::/36
Signature Algorithm: sha256WithRSAEncryption
a5:e1:39:99:91:9b:34:a5:72:86:e1:86:5e:67:5f:9d:62:e0:
c8:7a:57:06:ef:7e:b7:99:a9:2f:fa:10:26:38:4e:f3:31:6f:
43:6d:47:fc:11:d2:9f:65:a2:e3:c7:56:7b:42:57:c1:78:0f:
52:4d:d4:05:be:34:d0:36:4e:82:67:a0:62:1e:25:66:e8:f2:
64:40:76:3e:9f:45:f9:ce:73:11:7a:3a:8f:3a:37:cf:0a:31:
76:c9:c0:2a:64:87:e7:45:c4:63:e8:7d:fd:07:6f:61:0f:a2:
cb:a4:67:b5:24:7c:16:a8:9a:9c:22:53:2f:54:4b:10:4b:4f:
8a:5b:10:55:56:7f:44:bc:53:91:e3:03:e2:97:d2:99:a2:1c:
48:80:c4:78:69:a5:2c:1c:f9:8a:16:74:31:4a:8b:6b:00:f9:
08:93:b1:6d:d5:83:c8:0f:34:45:93:b9:d0:a0:d7:9b:0d:b8:
40:23:c5:f3:1e:6a:55:c0:20:f5:7d:d3:37:1c:8e:cd:1b:44:
ae:dc:d2:71:59:db:1b:2d:90:d9:8e:9b:9b:e9:80:fa:3d:e2:
98:42:5c:b9:33:25:be:2b:23:b8:63:30:ac:29:f2:cc:73:fc:
0d:39:e8:2e:ec:2e:1b:ab:45:22:2c:88:bf:c5:6d:8e:ea:fc:
eb:b8:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:44:35 2025 by rpki-client