Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3e9ca5f6-88cd-4fa7-8ab6-a2d678013349.roa
File: 3e9ca5f6-88cd-4fa7-8ab6-a2d678013349.roa (raw, json)
Hash identifier: qROnY7rIIyTfKeq9V9wBzkPPKVFSHyvxFjDsNkXfPVY=
Subject key identifier: 0B:6F:C7:6F:5C:60:51:EF:89:96:8A:90:2E:52:17:76:8A:E6:0D:B1
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 09257E1421E206AB17361CE11100C454C3328F57
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3e9ca5f6-88cd-4fa7-8ab6-a2d678013349.roa
Signing time: Mon 26 May 2025 15:10:53 +0000
ROA not before: Mon 26 May 2025 15:10:53 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:25:7e:14:21:e2:06:ab:17:36:1c:e1:11:00:c4:54:c3:32:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:53 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=edd1978719ff1ec47d7f87ce463309d25de49d9f430ab0bc83cce44eb4f210ee, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:d1:84:00:19:9f:53:68:35:5a:be:e4:5c:
fb:3b:63:7a:95:5f:67:10:63:e8:aa:b3:da:15:95:
09:61:16:d8:e5:4a:8e:d5:d9:4a:93:03:77:d6:24:
59:d2:28:1b:e9:00:ba:92:08:82:53:66:45:67:9e:
7b:23:85:45:c7:f7:b5:b0:8c:a3:8e:02:71:8d:1a:
a2:75:b1:8a:58:31:ab:56:d7:40:84:39:c9:fe:22:
6a:04:79:be:d3:a2:a4:4c:8c:ce:09:2d:fd:2d:d0:
f0:d1:fa:73:7b:94:6f:3c:bc:65:c5:4d:b9:ed:4b:
7b:90:21:5a:5a:0c:27:9b:80:63:14:03:bb:13:e7:
21:fe:e6:af:eb:15:b0:b9:0a:ea:50:38:03:ad:21:
59:da:1a:34:77:73:7e:09:c1:84:00:04:ea:de:4c:
ba:47:e9:ef:cc:44:6a:1f:13:cc:d0:7a:9d:2b:97:
88:bf:76:1f:11:31:f5:cc:69:2f:f7:1a:a3:f6:cd:
2d:d5:c1:04:fb:02:52:ab:c3:27:9c:f7:7a:a4:16:
24:30:1b:45:f4:cd:0f:4f:6f:3b:fb:79:84:3b:5c:
a8:fd:25:ea:1a:7f:61:5f:51:e1:87:68:2a:b5:49:
f5:d8:db:7b:87:09:16:38:cf:7a:3d:22:2d:1b:b1:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:C7:6F:5C:60:51:EF:89:96:8A:90:2E:52:17:76:8A:E6:0D:B1
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3e9ca5f6-88cd-4fa7-8ab6-a2d678013349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2800::/40
Signature Algorithm: sha256WithRSAEncryption
50:30:02:1f:72:b1:42:d0:81:eb:d0:c2:54:8a:42:4b:23:2e:
98:6f:7d:69:48:6f:9e:00:ba:a1:fc:68:48:c7:61:f8:96:2a:
69:51:5b:ff:26:c9:6b:42:b1:3c:9c:6c:a7:2f:86:98:3c:28:
77:f1:2a:3d:48:76:cd:6c:7c:75:0d:07:d5:ae:77:2e:1d:e4:
c9:e3:8c:8f:f0:2b:d2:c2:9d:2d:09:ef:82:63:c9:b3:12:3e:
77:50:2f:e0:b4:f2:b1:69:79:4a:a4:9a:bb:6b:95:7f:b1:9f:
85:5a:cc:31:79:ec:a3:21:cb:4c:ad:aa:ab:24:77:11:66:ee:
71:91:33:a6:c6:f4:98:24:7a:e1:3f:96:e4:03:e1:43:22:2f:
d6:63:2e:c1:08:8c:51:8b:d2:ee:34:6c:2b:ed:f0:e6:9f:4c:
48:cf:78:9a:5a:7b:15:6a:8e:1d:6c:6e:0e:f6:3a:73:24:e0:
aa:23:9c:f8:91:b2:f2:6f:18:5b:02:f1:cf:06:7f:93:1c:59:
75:66:22:84:53:cf:24:50:80:29:a0:9a:81:b4:cf:8b:bd:63:
48:3b:a0:1c:a3:13:b0:95:8e:ba:0a:71:8b:df:7e:11:5c:1d:
07:c6:9d:9d:e9:6e:63:9c:59:a4:2b:d6:be:36:00:d6:d9:2d:
cb:71:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:43:17 2025 by rpki-client