Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa
File: 2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa (raw, json)
Hash identifier: itZAeI4K7qfUk2LM/PpPr46HCfIl8FnpopzEMy0cE8c=
Subject key identifier: A3:E3:F9:73:B0:04:DF:E6:27:B7:E2:A9:1B:87:3F:C7:51:81:FB:9D
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 5C8C98921A5F4FFDCAB67F80390D3B23607F389A
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa
Signing time: Mon 26 May 2025 15:20:22 +0000
ROA not before: Mon 26 May 2025 15:20:22 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8c:98:92:1a:5f:4f:fd:ca:b6:7f:80:39:0d:3b:23:60:7f:38:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:20:22 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=02a23fc84d1914c6d7a62b3801267d92859b486a7307d8731191f67e5abe7191, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:26:f1:ac:9a:d4:f1:9b:5c:2e:c7:f1:21:
78:96:15:15:08:62:d2:8e:73:fd:98:77:b7:8b:fd:
88:0d:c0:09:b7:ea:42:39:6a:76:d6:e4:be:ff:43:
bc:88:29:3f:52:86:aa:2d:d7:04:98:44:df:a8:98:
85:a9:85:32:3f:6d:e3:e2:a8:82:0f:d6:b2:7b:36:
a3:1b:ff:06:bb:6e:b2:43:23:94:d1:a7:26:e4:a4:
23:65:79:38:ce:13:1c:d2:7b:57:42:7a:9a:cb:a9:
38:9a:ea:a1:42:e4:52:7e:65:26:22:af:9c:ee:e2:
ce:a4:13:e8:4e:8b:26:c3:af:c0:66:55:f1:0c:19:
b9:22:a5:b9:fe:cd:05:6e:3f:9a:42:80:9c:49:fa:
41:9a:d1:20:73:2d:d4:67:84:b1:2f:b4:75:30:9b:
79:39:4f:d4:38:47:28:f3:0d:a5:e7:94:1d:ff:27:
a0:1a:51:3e:19:17:7c:9a:78:4c:b1:21:d9:1f:23:
15:7c:6b:a0:52:9d:7d:e5:c4:6f:24:f1:f6:85:37:
b6:21:98:38:dc:16:87:65:9d:4f:91:d6:d0:d5:00:
41:7f:85:26:7f:c9:ba:90:39:29:55:ab:7d:ee:c5:
fc:c8:92:6e:12:34:2d:43:ce:eb:3e:07:94:ca:d0:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:F9:73:B0:04:DF:E6:27:B7:E2:A9:1B:87:3F:C7:51:81:FB:9D
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6800::/40
Signature Algorithm: sha256WithRSAEncryption
54:b6:8e:5b:24:0d:87:41:83:b4:af:2b:f6:f9:8b:7c:45:6d:
37:55:44:be:8e:7b:8a:cb:e7:3a:9f:d8:05:c0:73:a3:9f:71:
db:82:44:b3:ff:6c:a5:9b:19:f8:80:57:16:ad:2a:2a:33:e1:
94:93:7d:70:10:c4:fc:8b:40:b3:96:e9:f1:31:04:65:45:3f:
f4:aa:29:8f:70:f0:c4:9d:86:cb:21:b3:b7:e9:64:8d:4d:9c:
54:25:09:c3:2f:ea:f2:b4:3a:e3:63:80:a1:d2:5a:57:ce:0c:
4b:79:b0:6f:a0:10:3a:30:4b:f0:2d:9e:80:5f:9b:c6:04:57:
ff:02:29:f0:6c:13:de:79:de:b6:e9:1b:9a:32:0a:a7:61:e8:
85:a2:f6:7b:62:db:15:15:8a:ab:3d:86:2a:7e:c5:f1:ac:88:
4a:6b:f6:78:25:e2:b9:8e:b3:85:05:18:8a:13:76:53:0a:6b:
d0:fe:b5:fb:15:78:f6:89:10:75:63:76:5a:eb:3f:62:42:dd:
c0:5a:35:4e:e2:d5:bd:7c:ac:4f:2f:f0:a1:24:82:64:c6:55:
79:d5:6b:bf:67:19:27:59:d6:4c:3d:58:3e:8b:4f:1d:84:a7:
8a:a8:b8:a1:b1:a5:ce:c2:ae:25:d5:d0:64:fa:d6:8c:ec:bc:
ba:75:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:43:15 2025 by rpki-client