Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5f7a981a-824d-48e6-969a-7779a7b7a199.roa
File: 5f7a981a-824d-48e6-969a-7779a7b7a199.roa (raw, json)
Hash identifier: y49oODNhfHSakyN13le6lMhkyz3woDbaXdCc5Jzpelw=
Subject key identifier: B9:05:56:F4:26:0E:2E:A2:8B:D7:98:93:8E:19:15:C3:34:84:14:F5
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 799E12C2B210F04C43665284DA5EFAA0ABA8DE0E
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5f7a981a-824d-48e6-969a-7779a7b7a199.roa
Signing time: Mon 26 May 2025 15:21:12 +0000
ROA not before: Mon 26 May 2025 15:21:12 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9e:12:c2:b2:10:f0:4c:43:66:52:84:da:5e:fa:a0:ab:a8:de:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:21:12 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=c00f1d75fa415fd3345230cd66e06c3721088f2728d948ddc47a9003eab96837, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:e8:c6:10:33:e7:12:c4:c9:e4:cc:58:91:
c9:12:5a:40:82:e3:de:18:1c:e1:2f:5d:f7:d1:76:
6f:31:3d:da:43:9b:40:24:dc:fe:07:ac:bd:85:11:
ec:48:7c:25:1c:8c:7d:4c:35:93:79:01:5e:0b:f0:
d8:2c:3f:17:be:be:10:f1:c9:c5:02:f3:a2:fa:47:
cc:91:14:dd:b4:36:1d:4d:78:58:70:e5:62:ec:d0:
c1:c7:23:11:f7:3b:75:3e:7c:fe:1b:ff:cf:4a:49:
04:04:94:cc:28:76:47:07:ba:34:8d:95:36:e4:f7:
81:de:17:6c:0f:9e:1f:51:22:e5:33:a7:ed:6b:dc:
32:49:0d:c8:96:ae:6a:38:2f:12:07:1c:a3:c4:9d:
20:e0:f6:37:5f:3e:1c:5b:d2:2e:82:59:83:df:93:
b6:60:77:a6:f4:05:26:8a:27:bf:eb:90:68:b8:5e:
d8:7a:3c:fd:ae:64:1c:d9:24:29:af:80:b4:39:0a:
a4:44:b6:8f:1a:cb:c6:62:2c:e5:6b:b7:01:95:19:
6c:a7:30:dd:5f:30:cc:69:27:17:34:8a:4a:ab:ba:
0f:a5:c9:37:4c:0d:46:4d:e7:ca:03:53:27:51:36:
f3:52:90:8d:d5:1b:73:61:2e:8d:9e:73:dc:ae:37:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:56:F4:26:0E:2E:A2:8B:D7:98:93:8E:19:15:C3:34:84:14:F5
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5f7a981a-824d-48e6-969a-7779a7b7a199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:8000::/36
Signature Algorithm: sha256WithRSAEncryption
39:e1:33:1d:f6:0a:55:46:ce:a5:97:70:ae:9b:9e:fd:9b:f5:
01:a4:bc:f5:fa:06:32:2a:42:f7:aa:e4:17:44:34:83:de:77:
05:0a:0c:7d:56:f7:0d:2a:22:19:71:6d:6c:75:b1:94:e2:e3:
30:7d:d6:fe:73:cf:4d:cf:fe:9c:34:5e:04:e8:dd:ea:63:12:
4f:71:8a:6e:bf:d4:58:8e:84:7f:e6:5c:b5:f1:11:c7:da:75:
82:84:19:1d:8b:4d:56:24:02:32:03:44:51:15:7c:e2:b4:63:
63:61:17:29:51:29:cd:fe:f7:e0:52:7c:b5:a7:75:91:3e:e8:
3a:85:18:fb:5e:4f:a6:f8:e8:55:b6:43:51:5f:19:b5:43:29:
eb:c1:7e:ea:62:0b:83:b9:f2:5b:ae:78:1a:dd:a6:64:66:14:
94:8a:83:11:1a:a7:60:25:77:d9:7e:f0:91:a6:11:f2:44:05:
df:16:78:9c:5f:eb:45:e4:42:0e:ab:68:d0:06:49:1e:b5:81:
4c:ca:1a:f2:03:34:6f:00:43:af:1c:19:8d:6e:e8:89:db:a4:
3e:48:48:bd:66:fd:99:ce:c8:4c:8b:88:a3:ab:04:f8:d9:de:
a8:c9:f5:c0:e0:6d:9c:bd:36:25:43:5c:ed:17:68:76:d8:1a:
2a:24:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:54:54 2025 by rpki-client