Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/44eab036-1e27-432b-88e4-7853ea21e1a6.roa
File: 44eab036-1e27-432b-88e4-7853ea21e1a6.roa (raw, json)
Hash identifier: PDXXnCxVuMzGCFDF080puQ5B2yyKAJxk2yr4Pd4pNcE=
Subject key identifier: 99:1E:63:C2:1F:75:09:29:E9:1C:D6:F6:80:29:31:78:EF:AB:D6:5F
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 6BE0B9457BBA91D8FB733673EE2506B888827235
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/44eab036-1e27-432b-88e4-7853ea21e1a6.roa
Signing time: Mon 26 May 2025 15:11:09 +0000
ROA not before: Mon 26 May 2025 15:11:09 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:7800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e0:b9:45:7b:ba:91:d8:fb:73:36:73:ee:25:06:b8:88:82:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:11:09 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=1f00d3c74752c98852e49908da6a5ada00041ff3650fd72ab46dff2346b82662, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:2b:3b:22:16:7a:42:2f:89:30:22:f4:b0:
61:92:35:d7:79:2f:c0:54:fb:bc:7f:2b:11:bc:31:
c7:55:0a:a7:7e:97:61:fc:9c:0d:49:dc:5c:e0:21:
5d:b9:d2:54:90:77:a8:c0:cd:eb:d0:b9:7d:f4:cc:
46:23:0f:39:65:0c:0d:7f:bf:1b:d0:09:5b:29:e7:
46:48:b8:ff:2c:9b:e5:08:50:0b:4c:81:2c:b3:22:
21:16:f3:fc:0d:a0:4b:b7:66:71:55:6d:c8:2b:83:
2e:c2:ec:cb:9c:ff:1f:46:c9:d0:3e:26:c4:5c:d9:
ae:e2:56:19:48:e0:eb:f6:07:41:79:a7:96:c1:aa:
f7:fd:54:99:39:eb:83:2e:1d:a7:60:b1:af:e8:74:
34:cf:26:36:1f:80:72:7b:e5:9b:3b:c1:a9:d8:38:
ae:93:73:ef:3e:22:13:16:c2:a1:1f:af:53:83:33:
f5:fc:17:57:ac:b5:bd:99:36:c6:7c:ab:92:2d:c5:
ab:52:33:2f:ee:21:db:fa:b5:db:a3:3d:e0:93:5b:
a1:bd:16:52:9d:6a:da:28:ad:1d:2e:8d:e6:84:2b:
5c:7c:8c:2d:a0:a0:7f:20:26:8e:66:f0:b3:36:1d:
47:77:18:72:28:50:2a:cc:cb:51:e6:74:ea:a5:21:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1E:63:C2:1F:75:09:29:E9:1C:D6:F6:80:29:31:78:EF:AB:D6:5F
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/44eab036-1e27-432b-88e4-7853ea21e1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7800::/40
Signature Algorithm: sha256WithRSAEncryption
5f:35:91:bd:88:70:81:4e:62:c2:60:bf:69:fd:f6:05:b9:20:
98:86:37:99:19:cc:b6:bd:1a:7a:29:0c:e6:15:6f:d2:bb:77:
2b:87:5f:e7:1c:7b:7a:68:f1:41:4f:68:d4:08:74:69:80:c6:
2f:1d:65:5a:61:67:1a:8e:70:03:e7:b6:52:82:86:46:84:91:
58:74:c1:94:fb:e3:bc:8d:a6:39:39:a4:dc:f5:16:74:55:91:
b3:31:d1:91:f4:cb:89:fb:21:d4:75:0d:34:ce:5b:ab:70:27:
a2:d4:3a:ec:32:5d:05:09:b6:cf:ee:83:ce:89:1a:96:77:8e:
5a:c1:96:2a:90:96:46:2e:9a:d4:84:4b:ca:1b:cb:ea:1f:4f:
ff:4b:e0:d5:36:18:ba:76:ae:43:bc:a9:af:f8:bb:a3:04:5a:
91:28:72:f8:75:31:55:d3:f4:34:78:87:3e:61:52:eb:ee:76:
a7:30:53:ed:c8:e8:1f:bc:80:33:10:26:1a:a3:67:e4:44:2b:
ca:7f:5e:70:59:33:c2:2e:87:c1:99:c3:62:a6:49:11:89:40:
d2:67:a0:f2:17:0b:15:bc:84:7f:a7:1a:19:21:82:6b:c6:0b:
cb:30:c8:29:2f:d9:81:73:49:60:5e:d4:20:62:97:a1:f8:7d:
69:60:e6:4b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUa+C5RXu6kdj7czZz7iUGuIiCcjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA1MjYxNTExMDlaFw0yNTA2MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDFmMDBkM2M3NDc1MmM5ODg1MmU0OTkwOGRhNmE1YWRhMDAwNDFmZjM2NTBm
ZDcyYWI0NmRmZjIzNDZiODI2NjIxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJGbKzsiFnpCL4kwIvSwYZI113kvwFT7vH8rEbwxx1UKp36XYfycDUncXOAh
XbnSVJB3qMDN69C5ffTMRiMPOWUMDX+/G9AJWynnRki4/yyb5QhQC0yBLLMiIRbz
/A2gS7dmcVVtyCuDLsLsy5z/H0bJ0D4mxFzZruJWGUjg6/YHQXmnlsGq9/1UmTnr
gy4dp2Cxr+h0NM8mNh+AcnvlmzvBqdg4rpNz7z4iExbCoR+vU4Mz9fwXV6y1vZk2
xnyrki3Fq1IzL+4h2/q126M94JNbob0WUp1q2iitHS6N5oQrXHyMLaCgfyAmjmbw
szYdR3cYcihQKszLUeZ06qUh8wkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSZHmPC
H3UJKekc1vaAKTF476vWXzAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
NDRlYWIwMzYtMWUyNy00MzJiLTg4ZTQtNzg1M2VhMjFlMWE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8d4
MA0GCSqGSIb3DQEBCwUAA4IBAQBfNZG9iHCBTmLCYL9p/fYFuSCYhjeZGcy2vRp6
KQzmFW/Su3crh1/nHHt6aPFBT2jUCHRpgMYvHWVaYWcajnAD57ZSgoZGhJFYdMGU
++O8jaY5OaTc9RZ0VZGzMdGR9MuJ+yHUdQ00zlurcCei1DrsMl0FCbbP7oPOiRqW
d45awZYqkJZGLprUhEvKG8vqH0//S+DVNhi6dq5DvKmv+LujBFqRKHL4dTFV0/Q0
eIc+YVLr7nanMFPtyOgfvIAzECYao2fkRCvKf15wWTPCLofBmcNipkkRiUDSZ6Dy
FwsVvIR/pxoZIYJrxgvLMMgpL9mBc0lgXtQgYpeh+H1pYOZL
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:19 2025 by rpki-client