Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1ae9d8b2-218c-4376-936d-185032ce890b.roa
File: 1ae9d8b2-218c-4376-936d-185032ce890b.roa (raw, json)
Hash identifier: 9+6Bd5HgfSkfk17u7CkIFQR8HIiyi5Mm9V9Yh6He/yY=
Subject key identifier: F7:2B:0E:37:4A:EE:8E:51:8D:90:50:3B:31:6F:93:3B:4E:3F:7B:8D
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 1D13229D167D7F7654CE4ECD30A23130F4859D36
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1ae9d8b2-218c-4376-936d-185032ce890b.roa
Signing time: Mon 26 May 2025 15:11:05 +0000
ROA not before: Mon 26 May 2025 15:11:05 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:13:22:9d:16:7d:7f:76:54:ce:4e:cd:30:a2:31:30:f4:85:9d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:11:05 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=6a459b54db43aec47416dd7310e1c7e92c98c38dd1d680f31925e0817fa2a21b, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:f0:b1:3f:b6:7b:2a:34:71:12:38:da:98:
b2:fb:03:d3:9a:1e:52:65:49:78:63:7f:f3:d1:3d:
d7:c9:45:92:82:1a:41:82:60:0e:fb:b5:b6:b1:11:
a4:0f:4b:6c:61:b2:c6:b0:2a:fd:0a:93:7c:24:9c:
02:59:c3:fa:52:9a:47:20:e0:a3:2d:8a:a2:06:e2:
ed:7e:85:f7:11:58:5e:05:77:5b:9f:1a:c8:ec:ee:
30:f6:bb:ea:2d:68:97:b1:e9:52:61:9b:16:96:0f:
88:3a:27:05:7e:78:2f:5c:43:54:2a:40:33:e3:cd:
51:de:29:e0:0c:f9:42:c7:24:a0:98:81:c9:d3:b7:
5a:b9:66:4e:d2:d2:f3:54:1e:f0:15:04:26:36:84:
07:95:f8:04:12:8a:a8:7b:89:d6:b8:02:32:6f:2f:
17:22:b0:1e:95:ed:0c:a5:b9:57:45:4c:70:fe:1c:
70:8d:a2:a7:90:6f:d4:24:62:24:e1:1e:df:be:57:
6b:67:1c:c0:9d:7c:3d:69:b0:54:c7:e4:f0:74:37:
35:20:2e:0c:a5:9d:3b:b0:98:2f:1a:c9:cd:05:63:
f2:4b:25:d4:7f:7a:15:d5:19:52:df:f8:06:f6:71:
0b:78:ae:11:c3:18:d1:cb:8c:07:0a:c8:11:42:31:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:0E:37:4A:EE:8E:51:8D:90:50:3B:31:6F:93:3B:4E:3F:7B:8D
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1ae9d8b2-218c-4376-936d-185032ce890b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f840::/48
Signature Algorithm: sha256WithRSAEncryption
8b:e6:8b:d8:05:7b:99:c4:8a:30:58:00:09:a0:f8:e6:75:93:
b3:a9:e9:5c:01:b4:93:a0:49:f7:0a:7e:06:15:28:c8:9f:65:
5a:1a:2a:ad:28:97:b9:2a:2f:50:4a:e0:9c:a2:1a:f8:55:41:
65:e6:ea:ad:54:e3:8f:b8:cc:7e:39:90:6a:45:67:08:d4:4a:
68:ff:c3:fd:38:cc:71:d3:75:ae:54:79:5f:fe:ba:e3:54:21:
8b:f6:38:e4:0a:0f:f5:a7:1f:d6:d2:62:cb:ca:cd:6d:82:99:
9d:ba:59:fd:8f:52:c0:94:f8:a2:23:39:f3:8d:1c:bb:50:bd:
ec:ef:d8:53:2d:cf:8c:f5:cc:2d:ad:fa:a2:3d:b8:dc:d0:01:
1c:99:f2:4f:f8:66:18:94:08:d8:59:a0:a4:16:8b:d5:cd:0d:
01:b2:b5:9e:1a:01:e1:9a:02:26:42:75:2c:34:b1:d6:44:3a:
37:61:f1:9e:97:4c:45:84:ce:b5:32:65:f0:39:23:5a:5d:10:
6e:cc:cc:33:72:f9:10:54:a7:5f:3b:83:3e:45:08:fb:af:b3:
4e:70:f1:50:bb:17:2f:b8:72:d6:32:4e:29:db:da:d7:f9:c4:
e8:24:91:10:89:17:a0:6b:8c:a6:22:79:b3:fd:29:fd:9c:bb:
ce:1f:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:47:25 2025 by rpki-client