Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
File: 40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa (raw, json)
Hash identifier: MqqYWJKGSknmYbtHnkhL1Wk14LjVbVXsCoawGQ+rBuM=
Subject key identifier: 2D:A5:50:29:43:D4:B4:39:1B:5A:2F:04:A7:1D:F4:8B:B2:A1:4F:61
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 68EB3EEEF30309EED32BD917ED90140893BE5576
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
Signing time: Mon 26 May 2025 15:10:27 +0000
ROA not before: Mon 26 May 2025 15:10:27 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:eb:3e:ee:f3:03:09:ee:d3:2b:d9:17:ed:90:14:08:93:be:55:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:27 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=cf2632ea0368d876d7f3984a5db8d20f9496a0726107912d4248451d2c7f56f6, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:11:ca:12:99:c5:94:0d:08:79:4f:58:25:
b7:88:b9:06:b2:2e:a1:98:50:fd:81:5f:4e:de:97:
d1:73:b4:8d:8b:80:82:b4:24:51:4b:11:07:4c:fc:
6f:6c:ce:ec:aa:50:9e:0c:3d:ef:0a:40:0d:4b:f8:
db:11:e7:e3:db:91:4e:80:a5:49:21:b8:53:5e:00:
66:cf:e1:c3:6b:2d:7e:4a:8c:82:b1:da:3a:88:7b:
35:0b:c0:d4:79:e2:26:2f:be:4a:60:5a:e8:03:1a:
24:55:5c:79:03:76:e3:5a:95:e4:e3:69:78:ec:3e:
ef:d3:02:fb:32:7c:85:99:fd:dd:26:06:c7:02:7f:
2b:8d:2c:7d:f1:f3:30:20:2d:da:cc:6d:2a:83:14:
ad:f2:d9:f9:37:a6:d9:eb:fb:4c:31:19:02:37:c1:
d6:36:64:6b:73:df:6a:65:e7:4e:9e:92:d6:d0:73:
c0:2d:c5:b0:5d:33:81:ad:fc:d3:80:8f:f1:11:fd:
09:ef:0e:15:6c:4b:d2:9b:db:a9:2d:d2:7e:51:11:
a4:75:a7:35:d1:ec:9e:7a:48:d4:b8:ee:47:59:24:
fb:c6:2b:70:40:16:32:f3:14:58:51:16:30:b8:e0:
da:33:4c:e6:6a:33:41:51:16:e8:86:5c:3c:1f:9f:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:50:29:43:D4:B4:39:1B:5A:2F:04:A7:1D:F4:8B:B2:A1:4F:61
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
84:ef:5c:89:8c:97:c7:12:c0:6f:40:2d:38:cd:d5:01:f0:3a:
ee:11:fa:c5:e1:21:54:61:b1:2a:a3:48:91:96:20:cf:d0:4b:
1a:96:42:59:e9:45:90:fb:9c:4f:3c:81:b6:be:8e:b2:a7:12:
08:ea:8a:57:21:83:41:0c:dc:67:5a:54:33:39:c0:2d:e8:1c:
92:c5:40:14:a5:ea:27:72:16:dc:10:51:e4:6a:e8:df:89:0e:
1e:bc:4a:87:19:b1:01:6a:11:cc:ec:c2:4c:3b:a6:28:3e:ba:
4f:8e:79:07:c2:7c:20:11:b7:21:a6:24:96:d1:e2:e3:18:6c:
d5:8d:4b:56:d8:d3:ed:bf:8f:c3:d3:21:09:1e:a4:77:65:7d:
7e:3e:70:54:b1:29:8d:b6:57:07:63:a9:ca:b9:3b:f9:ca:ed:
56:ba:bc:cd:7f:d7:2d:a4:ab:e7:cc:86:9d:87:6f:79:b7:e1:
a6:58:be:e5:81:9f:55:b7:e0:ab:fb:d5:95:fe:b7:c4:41:cc:
24:c6:b2:13:b0:46:26:61:f6:a0:17:68:69:13:bf:08:e6:42:
9b:8d:77:f7:11:71:9b:be:2b:fd:c4:02:dc:94:26:16:85:c8:
cc:9f:7c:37:eb:4e:30:0d:a9:f4:01:3c:bc:54:d2:d3:3f:c2:
cf:af:18:7e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaOs+7vMDCe7TK9kX7ZAUCJO+VXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA1MjYxNTEwMjdaFw0yNTA2MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGNmMjYzMmVhMDM2OGQ4NzZkN2YzOTg0YTVkYjhkMjBmOTQ5NmEwNzI2MTA3
OTEyZDQyNDg0NTFkMmM3ZjU2ZjYxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOoWEcoSmcWUDQh5T1glt4i5BrIuoZhQ/YFfTt6X0XO0jYuAgrQkUUsRB0z8
b2zO7KpQngw97wpADUv42xHn49uRToClSSG4U14AZs/hw2stfkqMgrHaOoh7NQvA
1HniJi++SmBa6AMaJFVceQN241qV5ONpeOw+79MC+zJ8hZn93SYGxwJ/K40sffHz
MCAt2sxtKoMUrfLZ+Tem2ev7TDEZAjfB1jZka3PfamXnTp6S1tBzwC3FsF0zga38
04CP8RH9Ce8OFWxL0pvbqS3SflERpHWnNdHsnnpI1LjuR1kk+8YrcEAWMvMUWFEW
MLjg2jNM5mozQVEW6IZcPB+fsAUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQtpVAp
Q9S0ORtaLwSnHfSLsqFPYTAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
NDBmOWIxZjItNWFkNy00NDJlLWIwMmEtMTU2NzEyZDRmYTE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8dQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCE71yJjJfHEsBvQC04zdUB8DruEfrF4SFUYbEq
o0iRliDP0EsalkJZ6UWQ+5xPPIG2vo6ypxII6opXIYNBDNxnWlQzOcAt6BySxUAU
peonchbcEFHkaujfiQ4evEqHGbEBahHM7MJMO6YoPrpPjnkHwnwgEbchpiSW0eLj
GGzVjUtW2NPtv4/D0yEJHqR3ZX1+PnBUsSmNtlcHY6nKuTv5yu1WurzNf9ctpKvn
zIadh295t+GmWL7lgZ9Vt+Cr+9WV/rfEQcwkxrITsEYmYfagF2hpE78I5kKbjXf3
EXGbviv9xALclCYWhcjMn3w3604wDan0ATy8VNLTP8LPrxh+
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:46:31 2025 by rpki-client