Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1d757286-8eda-42c2-aecf-19a8c013dc64.roa
File: 1d757286-8eda-42c2-aecf-19a8c013dc64.roa (raw, json)
Hash identifier: lUCEvmBAWnk4e6ZE1kXg7TDtdxFQIS3XcGo0Nh27ybc=
Subject key identifier: 73:21:D3:7D:29:8E:78:5E:1C:33:FD:53:CB:8C:60:9A:A5:21:73:70
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 1A5E52595AD7E161BB903B1720B0EDE37783F671
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1d757286-8eda-42c2-aecf-19a8c013dc64.roa
Signing time: Mon 26 May 2025 15:20:30 +0000
ROA not before: Mon 26 May 2025 15:20:30 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5e:52:59:5a:d7:e1:61:bb:90:3b:17:20:b0:ed:e3:77:83:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:20:30 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=c3452791fcf44260577b9884c0a7ba3aaa345aab807b68b847fab19aeea80f93, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:e2:49:e8:58:cd:eb:e8:e9:00:00:4b:42:
c9:83:3a:72:f9:38:93:c3:97:02:15:8a:82:9e:2e:
f7:1a:10:5c:26:58:92:12:18:f0:a5:7e:ab:83:80:
0c:cc:e5:40:66:a4:66:57:40:02:77:08:cf:72:58:
d5:9e:a1:aa:48:eb:dc:fc:e0:bf:95:1a:37:87:c3:
f7:10:2b:06:a0:f0:30:dd:ac:54:45:e5:0e:7e:18:
b0:88:22:4e:7e:5e:d4:34:0e:3c:a5:d0:22:01:89:
47:4f:c6:57:44:38:d7:74:89:c6:bd:1c:38:5e:4e:
8a:1e:40:e4:1e:17:74:7d:b6:32:85:9b:91:fa:b3:
3c:c2:69:0e:d4:3f:2a:a0:76:71:39:b7:46:ae:93:
1f:d8:11:f2:96:f6:b6:9b:ce:3d:cb:f6:15:ba:7f:
c0:df:5d:9d:02:56:b0:b8:b1:72:26:8d:2f:09:3d:
b7:70:99:28:33:ad:fc:a5:3c:e9:52:7b:37:61:7c:
c5:46:e2:6a:4c:95:1f:c9:8c:79:4e:53:c1:37:25:
ee:1b:db:71:b5:1a:4a:26:db:a9:37:17:13:82:9b:
57:01:28:52:48:cf:e1:6c:e9:81:a1:a2:e3:1b:cc:
30:cf:2f:5c:89:d5:61:d9:5e:c0:15:76:d2:45:ae:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:21:D3:7D:29:8E:78:5E:1C:33:FD:53:CB:8C:60:9A:A5:21:73:70
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1d757286-8eda-42c2-aecf-19a8c013dc64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8400::/38
Signature Algorithm: sha256WithRSAEncryption
0d:c3:79:ea:a4:65:7c:12:98:76:b4:95:ee:85:54:32:c2:af:
eb:9b:97:c3:d1:70:fe:4d:b8:c9:87:97:90:81:17:aa:af:a3:
0f:b2:e6:3b:c3:2b:cb:8f:63:00:69:3b:f3:28:0f:b7:85:1d:
50:6e:ac:cb:ae:11:d2:82:9c:7f:5b:64:17:da:a5:dc:e5:52:
e0:af:e4:65:b4:77:5d:c9:48:2e:15:d1:c3:5a:3d:eb:41:e5:
c4:75:b3:11:4e:71:6a:4f:6c:00:0d:89:ae:54:b2:d5:0f:5a:
44:c7:05:0b:c3:f3:f7:e5:85:e6:36:01:26:64:18:8d:0b:11:
ce:33:fd:fb:45:f9:e9:ba:af:cb:ab:7e:a9:d6:0d:91:76:30:
aa:ec:45:7a:d0:bb:c7:92:d3:56:33:b4:b6:73:d3:22:f0:2a:
c3:6f:ed:5f:9b:74:bf:a9:50:8c:25:17:f4:b7:b6:f0:fa:9b:
df:27:65:84:b5:96:f1:5c:13:6f:83:65:4f:0f:94:a1:e0:d4:
1c:34:d8:31:d4:be:0a:9d:6f:95:7c:d5:bf:8f:63:20:cf:f4:
e3:d8:a5:5c:96:92:ba:68:51:12:e1:60:23:ac:2e:75:90:3b:
ca:43:e6:c0:43:30:e3:59:89:cf:27:27:e2:90:9d:e5:ee:7e:
19:bf:6d:07
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGl5SWVrX4WG7kDsXILDt43eD9nEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA1MjYxNTIwMzBaFw0yNTA2MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGMzNDUyNzkxZmNmNDQyNjA1NzdiOTg4NGMwYTdiYTNhYWEzNDVhYWI4MDdi
NjhiODQ3ZmFiMTlhZWVhODBmOTMxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJO04knoWM3r6OkAAEtCyYM6cvk4k8OXAhWKgp4u9xoQXCZYkhIY8KV+q4OA
DMzlQGakZldAAncIz3JY1Z6hqkjr3Pzgv5UaN4fD9xArBqDwMN2sVEXlDn4YsIgi
Tn5e1DQOPKXQIgGJR0/GV0Q413SJxr0cOF5Oih5A5B4XdH22MoWbkfqzPMJpDtQ/
KqB2cTm3Rq6TH9gR8pb2tpvOPcv2Fbp/wN9dnQJWsLixciaNLwk9t3CZKDOt/KU8
6VJ7N2F8xUbiakyVH8mMeU5TwTcl7hvbcbUaSibbqTcXE4KbVwEoUkjP4WzpgaGi
4xvMMM8vXInVYdlewBV20kWucykCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRzIdN9
KY54Xhwz/VPLjGCapSFzcDAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
MWQ3NTcyODYtOGVkYS00MmMyLWFlY2YtMTlhOGMwMTNkYzY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAiABP8GE
MA0GCSqGSIb3DQEBCwUAA4IBAQANw3nqpGV8Eph2tJXuhVQywq/rm5fD0XD+TbjJ
h5eQgReqr6MPsuY7wyvLj2MAaTvzKA+3hR1QbqzLrhHSgpx/W2QX2qXc5VLgr+Rl
tHddyUguFdHDWj3rQeXEdbMRTnFqT2wADYmuVLLVD1pExwULw/P35YXmNgEmZBiN
CxHOM/37Rfnpuq/Lq36p1g2RdjCq7EV60LvHktNWM7S2c9Mi8CrDb+1fm3S/qVCM
JRf0t7bw+pvfJ2WEtZbxXBNvg2VPD5Sh4NQcNNgx1L4KnW+VfNW/j2Mgz/Tj2KVc
lpK6aFES4WAjrC51kDvKQ+bAQzDjWYnPJyfikJ3l7n4Zv20H
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:49:37 2025 by rpki-client