Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/07aa2549-9eea-428d-a23d-c0e66b59cdb0.roa
File: 07aa2549-9eea-428d-a23d-c0e66b59cdb0.roa (raw, json)
Hash identifier: Qh8DQDdzBUcyXN20TFsCZMJNO8n34e7TRmV98tqJFTQ=
Subject key identifier: AB:69:FD:A9:AD:B8:14:C9:A6:9B:E7:1A:FA:AE:A8:6D:BD:E2:41:9B
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 39EF883C02587405B5E650D6C2D14FA97591E86E
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/07aa2549-9eea-428d-a23d-c0e66b59cdb0.roa
Signing time: Mon 26 May 2025 15:21:11 +0000
ROA not before: Mon 26 May 2025 15:21:11 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ef:88:3c:02:58:74:05:b5:e6:50:d6:c2:d1:4f:a9:75:91:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:21:11 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=d326d363d9d93053234fa4487a887cd7715db2b9fb487e54e0b73e8fa410404a, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:d2:ab:77:2c:be:ad:8e:4d:24:f8:01:f3:
ba:5f:06:df:25:80:c2:eb:1d:72:33:9d:39:6b:be:
41:08:9b:df:2c:d6:43:f6:60:d0:5e:58:e9:b4:08:
9e:68:b9:3b:de:4f:29:49:61:b8:20:a0:a1:1d:f5:
9b:fc:28:14:2d:1e:89:cf:b5:e5:6a:a4:03:e1:97:
b8:c4:95:d3:22:44:f0:f4:3a:9e:c0:64:8a:9c:04:
62:1c:42:7e:05:a6:c3:05:33:78:5a:74:5b:e6:03:
12:93:bb:76:d6:de:43:a0:01:c0:f8:e1:b5:7c:27:
1f:59:a5:fc:d4:90:61:37:f2:b9:fe:ed:e0:07:f2:
1c:0e:0f:39:e0:dc:4a:2d:09:37:85:f3:e2:d5:a9:
b8:06:f3:54:9b:4b:ac:95:fe:43:a6:0d:cd:c2:ec:
da:49:a5:f0:81:67:e6:be:25:96:6d:bd:7d:29:4d:
39:56:1e:34:61:ae:27:d8:c4:9d:31:c4:e1:bf:19:
21:28:97:ce:ea:26:4e:79:41:6d:cf:62:df:60:5d:
e1:34:d9:16:a5:30:b0:7c:4f:a7:f5:dd:71:ef:28:
2f:21:42:2d:b1:3f:08:2f:0b:4b:72:2d:45:db:44:
27:01:28:55:ca:78:f0:cf:57:19:4a:15:85:08:dc:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:FD:A9:AD:B8:14:C9:A6:9B:E7:1A:FA:AE:A8:6D:BD:E2:41:9B
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/07aa2549-9eea-428d-a23d-c0e66b59cdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8000::/38
Signature Algorithm: sha256WithRSAEncryption
a7:4e:eb:89:91:bc:76:a9:da:5b:df:70:9d:07:7d:72:2d:03:
01:9a:db:47:6f:ee:bb:84:11:c5:bc:47:19:9a:3e:c4:40:26:
c1:2f:26:b4:f4:1a:9b:38:29:35:24:1f:de:2a:ef:cd:04:94:
e0:c3:0e:ee:ab:a0:8f:3a:bf:b1:82:3d:04:eb:6a:47:73:40:
d3:60:5e:9f:ca:4f:4f:da:87:c7:32:18:ca:58:60:e9:cc:dc:
59:44:a9:f0:bd:f7:b4:1d:89:04:77:b9:d7:b3:84:c3:f4:3e:
df:7b:5e:90:e6:99:20:a6:84:ba:9d:57:db:c8:4b:1e:d7:e4:
47:e8:b4:22:36:c4:f1:0c:71:3c:ed:fe:c2:87:5c:17:b6:26:
17:aa:9e:cb:9c:8c:69:54:ea:3d:04:bb:f3:d4:a7:3d:5f:eb:
35:be:3b:ed:da:08:84:59:78:b4:c4:71:ef:07:1b:95:92:9a:
1f:63:6e:10:b3:a5:5e:51:5f:21:69:e6:a1:73:7d:a0:f7:6f:
36:55:c7:55:2e:d6:58:57:4c:7b:ea:46:e3:60:b4:4f:ae:ee:
1f:c3:6e:ae:1c:17:47:59:80:b1:2d:b2:d4:46:8f:51:17:2a:
b9:c1:89:18:78:61:48:20:52:91:55:d2:51:35:07:79:77:aa:
3d:d6:0b:df
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOe+IPAJYdAW15lDWwtFPqXWR6G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA1MjYxNTIxMTFaFw0yNTA2MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGQzMjZkMzYzZDlkOTMwNTMyMzRmYTQ0ODdhODg3Y2Q3NzE1ZGIyYjlmYjQ4
N2U1NGUwYjczZThmYTQxMDQwNGExLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpR0qt3LL6tjk0k+AHzul8G3yWAwusdcjOdOWu+QQib3yzWQ/Zg0F5Y6bQI
nmi5O95PKUlhuCCgoR31m/woFC0eic+15WqkA+GXuMSV0yJE8PQ6nsBkipwEYhxC
fgWmwwUzeFp0W+YDEpO7dtbeQ6ABwPjhtXwnH1ml/NSQYTfyuf7t4AfyHA4POeDc
Si0JN4Xz4tWpuAbzVJtLrJX+Q6YNzcLs2kml8IFn5r4llm29fSlNOVYeNGGuJ9jE
nTHE4b8ZISiXzuomTnlBbc9i32Bd4TTZFqUwsHxPp/Xdce8oLyFCLbE/CC8LS3It
RdtEJwEoVcp48M9XGUoVhQjc0f0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSraf2p
rbgUyaab5xr6rqhtveJBmzAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
MDdhYTI1NDktOWVlYS00MjhkLWEyM2QtYzBlNjZiNTljZGIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAiABP8GA
MA0GCSqGSIb3DQEBCwUAA4IBAQCnTuuJkbx2qdpb33CdB31yLQMBmttHb+67hBHF
vEcZmj7EQCbBLya09BqbOCk1JB/eKu/NBJTgww7uq6CPOr+xgj0E62pHc0DTYF6f
yk9P2ofHMhjKWGDpzNxZRKnwvfe0HYkEd7nXs4TD9D7fe16Q5pkgpoS6nVfbyEse
1+RH6LQiNsTxDHE87f7Ch1wXtiYXqp7LnIxpVOo9BLvz1Kc9X+s1vjvt2giEWXi0
xHHvBxuVkpofY24Qs6VeUV8haeahc32g9282VcdVLtZYV0x76kbjYLRPru4fw26u
HBdHWYCxLbLURo9RFyq5wYkYeGFIIFKRVdJRNQd5d6o91gvf
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:24 2025 by rpki-client