Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3710654a-38ee-4fc2-8f68-9612ab45bbc3.roa
File: 3710654a-38ee-4fc2-8f68-9612ab45bbc3.roa (raw, json)
Hash identifier: MjtQ5ogFGGABWXwKENc5JXsdaJ4bk+xYT8RbEeIURJ8=
Subject key identifier: E9:3B:5F:63:07:23:68:AA:6B:2A:BC:82:AF:02:5C:4E:EC:B4:69:52
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 6A2BC03248107E27AE54522E1E58945B5AD5DF52
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3710654a-38ee-4fc2-8f68-9612ab45bbc3.roa
Signing time: Mon 26 May 2025 15:10:18 +0000
ROA not before: Mon 26 May 2025 15:10:18 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5840::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:2b:c0:32:48:10:7e:27:ae:54:52:2e:1e:58:94:5b:5a:d5:df:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:18 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=29c397018370f2acb183e3ee3c4603c760518a587e927934b4533d3895d28f58, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:8d:47:bd:01:a1:b5:82:80:82:70:06:5d:
e4:0b:6e:45:2b:f9:4c:0f:de:8d:e3:80:52:0c:65:
7f:2f:ce:34:23:58:3f:1b:1c:12:77:5a:dc:c8:b6:
72:a0:e7:23:41:0f:8e:91:fc:54:35:4f:18:6d:ee:
c1:81:39:00:e0:48:4c:c4:8d:f5:99:4b:b5:9f:1b:
6a:df:0b:bb:22:cc:95:f9:dc:b4:6c:2e:2c:d6:12:
26:d9:d2:1b:43:9a:b6:37:62:50:d3:30:af:c7:05:
48:c9:d6:24:3b:17:0d:0b:76:96:52:b9:92:08:0d:
1f:e5:1b:eb:b6:92:20:24:7f:e9:79:44:92:56:f8:
32:23:f5:ca:f2:b6:76:27:f7:01:47:55:09:40:59:
02:21:c2:89:23:1d:d8:90:e0:89:45:d4:ef:7c:26:
86:69:9b:4f:74:5b:97:bb:01:4a:97:2c:89:2a:d7:
99:82:cb:2b:6b:2e:01:12:24:75:aa:b4:92:a1:63:
c6:9f:0a:47:20:a2:d1:ee:27:a7:85:f4:32:84:6d:
1e:41:e9:e4:0b:b2:49:98:f0:a6:fd:94:38:8f:04:
83:2a:35:2d:40:88:d7:7c:79:12:7f:25:00:24:53:
cf:61:18:09:92:99:dd:c5:ad:3b:d8:57:71:e3:ea:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:5F:63:07:23:68:AA:6B:2A:BC:82:AF:02:5C:4E:EC:B4:69:52
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3710654a-38ee-4fc2-8f68-9612ab45bbc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5840::/46
Signature Algorithm: sha256WithRSAEncryption
08:77:78:bd:de:3c:1c:5d:e1:bd:c4:6e:0e:48:41:a8:70:29:
14:84:af:04:bc:ff:97:2e:ea:1f:5a:6e:31:7c:25:8b:cc:87:
cd:94:00:2b:5a:08:93:78:8c:53:1a:5d:c5:e8:c1:8f:2d:77:
d9:c7:21:ca:fb:96:24:22:9f:70:9e:45:17:18:9f:6f:e5:28:
3d:15:a1:89:c6:82:7e:59:65:d1:ac:e7:81:3d:e9:ce:b0:d1:
f4:d6:5d:4a:74:78:57:d1:32:57:ee:dd:11:7b:bb:ea:51:9d:
55:fa:e5:4e:28:3d:da:15:db:3a:8e:64:00:79:2a:3a:4c:dc:
f0:ba:f8:48:ff:aa:20:38:a8:06:01:ee:e7:ac:da:73:1d:aa:
9f:80:1b:da:54:ea:e1:76:01:3f:75:ab:19:c5:85:0a:d6:75:
db:f1:87:eb:30:46:8a:75:a9:e4:76:b4:00:90:18:8d:88:20:
a2:77:d4:c0:5e:c9:f0:63:46:49:6b:14:15:c5:a7:37:dc:a6:
dc:29:fa:3b:f1:4d:49:25:4d:a4:b2:03:c0:65:61:62:07:97:
e0:44:cb:79:ff:08:a9:44:c5:d8:e7:a9:a7:d2:57:fb:c0:ba:
c9:ae:7d:25:9f:a2:df:57:a9:32:b6:9e:75:eb:a5:8b:54:68:
f2:71:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:10 2025 by rpki-client