Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/015f4a0b-cf81-407c-9b60-8f76998937f0.roa
File: 015f4a0b-cf81-407c-9b60-8f76998937f0.roa (raw, json)
Hash identifier: yJJka2agnAUOdkrzQ6peqHh1LbAy/NE56JHfXyScXpA=
Subject key identifier: EB:D0:47:2C:97:9C:63:32:5F:69:A5:50:C5:3C:98:95:D8:8F:9C:3D
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2C9B26BA38402BB83A0923FC93A0D70384FA0423
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/015f4a0b-cf81-407c-9b60-8f76998937f0.roa
Signing time: Mon 26 May 2025 15:11:07 +0000
ROA not before: Mon 26 May 2025 15:11:07 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9b:26:ba:38:40:2b:b8:3a:09:23:fc:93:a0:d7:03:84:fa:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:11:07 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=92a493212be73468a668bfc36a6af37ad8c1cf8c2b70a08857859d289c4074c1, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:e0:24:15:7d:e8:e4:50:2c:eb:49:d2:34:
d3:4a:17:81:61:4a:51:78:70:9a:99:46:dc:14:10:
60:a3:97:b5:8a:d4:30:df:83:4e:24:03:73:12:6d:
fd:a5:fa:22:73:8f:f3:25:2f:bc:f7:22:68:79:7f:
39:e3:1d:b3:db:89:b2:4b:fa:f5:df:26:5e:cb:9e:
f5:c9:f9:ec:28:85:5c:9d:45:9b:be:56:bf:14:6b:
23:6f:4b:e0:b3:ff:0a:21:67:15:ab:c9:61:cc:30:
d4:a4:fb:3c:b0:ba:b6:1f:5a:3a:0f:8f:64:d0:04:
3e:8c:8c:4f:79:c1:d6:1b:25:3c:0b:60:bd:cd:b8:
9e:4e:53:4a:79:eb:b6:7d:18:53:d9:6e:64:81:d5:
a0:ff:a6:5e:8a:b9:d8:30:d3:d1:24:b8:19:16:d7:
42:01:98:01:ee:ba:4c:f7:4f:4a:6a:ae:f2:30:50:
7c:9f:26:67:61:89:4e:dd:47:f6:67:d2:b8:c7:35:
3d:1b:ec:74:c6:14:71:ab:5d:06:df:c4:eb:68:aa:
45:ed:a2:1a:3f:e3:7d:aa:69:80:36:20:9f:8d:70:
a5:d3:07:71:0f:a3:21:f9:57:f7:98:fd:09:d9:89:
85:8d:6b:2f:52:b5:54:21:09:ae:38:0d:c8:ee:94:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:47:2C:97:9C:63:32:5F:69:A5:50:C5:3C:98:95:D8:8F:9C:3D
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/015f4a0b-cf81-407c-9b60-8f76998937f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b800::/40
Signature Algorithm: sha256WithRSAEncryption
5f:b5:20:d3:a8:b1:88:2c:6d:bb:e8:7a:33:70:f4:68:48:62:
f5:14:f6:ed:ab:1b:70:2c:e6:f3:3e:cb:fb:4e:7f:57:3e:1c:
af:98:1b:d9:d7:47:77:01:09:fa:54:1e:04:fc:de:dd:f9:2b:
42:8f:bf:bf:08:c3:07:ba:c6:0f:c7:9c:7c:5d:a6:ad:c3:6a:
b2:5e:0d:9e:89:80:78:28:f7:83:4f:54:fb:61:e3:20:2c:05:
df:a0:0b:ae:39:68:c2:75:1a:3b:4f:e8:5f:6e:4e:7d:af:e9:
c9:d1:0a:e0:57:6a:81:1c:02:2a:8d:2b:40:4c:29:07:66:47:
f5:83:55:c1:91:49:41:94:83:ad:82:31:4b:90:f2:2d:59:b7:
ac:7f:a7:ed:79:dc:67:79:86:f8:a0:2e:f5:b0:ff:7d:d7:12:
fd:21:49:d8:8d:b4:8f:3d:8b:c6:7a:1d:c0:e7:ad:eb:77:af:
12:3f:f4:df:8c:14:61:a6:3e:ed:54:26:81:82:27:a3:5b:dd:
ce:d2:7c:82:77:99:68:d0:3a:06:0d:25:87:0b:cc:a6:74:2e:
86:4d:26:2a:96:56:3f:26:2d:02:70:f4:8c:8f:3a:67:76:98:
e1:ee:b6:79:0c:dd:31:db:85:08:1d:9e:ea:d3:2f:09:ec:17:
35:f6:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:45:36 2025 by rpki-client