Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4c3a78bf-d9cf-418f-8a3a-8c3e72470c1c.roa
File: 4c3a78bf-d9cf-418f-8a3a-8c3e72470c1c.roa (raw, json)
Hash identifier: Sqh7Q7KT7pU05Nqr3146OZw206cbJ+xDFbhce5JIEEw=
Subject key identifier: 8E:85:37:EC:34:C5:D8:E4:36:25:9E:2C:20:77:7B:D9:9C:FB:4E:D6
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 30DD82B16F668446C7FB4928B38FA09A16BA9AF6
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4c3a78bf-d9cf-418f-8a3a-8c3e72470c1c.roa
Signing time: Mon 26 May 2025 15:10:58 +0000
ROA not before: Mon 26 May 2025 15:10:58 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:dd:82:b1:6f:66:84:46:c7:fb:49:28:b3:8f:a0:9a:16:ba:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:58 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=9353012ef824570802c7abbaf4af73a98bf3e58d2188313045169f0ecc858fb9, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:88:73:a4:c1:54:8a:cf:d8:fa:b6:1e:40:
6a:6c:0c:71:73:90:63:48:ae:b2:9a:c9:d0:f0:84:
d8:b5:16:2d:91:c4:b9:df:12:67:e7:2c:0c:bd:a6:
09:e2:78:4a:93:27:21:88:bc:49:95:8e:f8:64:75:
bb:1b:84:c4:e9:76:76:c8:31:d3:e6:33:9a:0e:1e:
26:e9:a6:b2:d0:81:59:3f:8a:4f:22:59:59:23:b8:
2b:b2:2a:81:a6:1d:cf:d9:85:fc:62:9e:c8:78:9f:
99:1e:2e:6f:24:82:c7:3e:47:da:c0:fb:b9:f7:f1:
c6:08:2d:e7:b8:67:af:c4:7d:de:82:b9:6d:ad:f4:
12:5a:7d:3f:7e:c3:cb:7a:bb:e1:e3:aa:5b:9d:d9:
f7:4f:ad:73:1b:21:cd:56:7a:fa:61:b8:32:5a:05:
75:3e:17:d6:c4:c1:89:c9:f8:9c:23:28:27:85:c7:
f7:8b:b3:bd:7b:cc:d5:c1:3f:a8:ae:0a:2c:16:5a:
02:55:c8:7b:ea:55:34:07:49:b7:b5:9e:1e:22:fb:
44:dc:33:44:e3:83:34:a4:de:d1:13:8b:d4:52:84:
7f:9d:e5:5a:54:39:a3:60:95:ef:b1:7e:1d:87:dd:
07:9c:8c:4f:08:18:5f:b1:6a:c2:bc:9e:b4:a0:3c:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:37:EC:34:C5:D8:E4:36:25:9E:2C:20:77:7B:D9:9C:FB:4E:D6
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4c3a78bf-d9cf-418f-8a3a-8c3e72470c1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:840::/48
Signature Algorithm: sha256WithRSAEncryption
89:51:e4:10:b6:53:5e:50:2c:ea:75:01:ab:d6:4a:67:9a:ad:
46:a3:22:e4:ab:7c:c7:94:24:ad:c3:d0:4f:ac:c1:5b:a8:c0:
99:9c:91:8f:b7:cd:9e:68:b9:cf:e0:6b:77:ad:34:64:05:07:
6d:28:f0:3b:38:61:2b:10:b1:3a:21:ee:67:75:5c:7c:2c:0b:
ad:dc:cf:79:6e:5b:bf:26:5f:55:86:54:b9:01:29:f0:a0:d3:
37:1f:51:43:d0:76:ae:23:0a:97:3d:19:64:ef:da:1e:af:79:
b8:c7:5f:2d:bf:3f:6b:26:6d:e9:ab:5b:5b:d1:37:03:54:b8:
b3:ab:ee:05:3e:21:67:a6:5b:9f:3d:5a:9c:a4:01:37:63:b8:
23:59:a3:06:5a:4c:81:49:6b:4e:df:1d:dc:2d:1a:c4:c9:a4:
8d:87:f8:c3:4c:62:5c:f4:2e:60:f2:ff:b6:fb:53:38:c8:e4:
92:78:16:ed:22:03:21:15:b3:c5:4c:83:c5:d5:a8:ec:ba:25:
1f:98:f8:10:23:dc:3d:96:b0:2b:39:d4:93:bd:85:74:1a:1e:
e4:19:ba:cf:37:ea:26:a9:bd:6c:2e:6c:49:9b:61:03:97:be:
d3:29:7b:16:f8:30:97:04:8a:da:20:d0:3c:62:d0:b2:56:3d:
0c:bc:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:47:32 2025 by rpki-client