Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
File: 73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa (raw, json)
Hash identifier: QsOIwuP50X3gkU+0XNlHvNqm+J7av93BvpL+0J/Bvos=
Subject key identifier: 78:DC:C3:E2:2F:A4:B0:44:14:42:31:53:58:BC:77:26:17:92:A5:25
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 645F7B1081A15440BE0C5C559A3E1CCE6951F925
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
Signing time: Mon 26 May 2025 15:11:06 +0000
ROA not before: Mon 26 May 2025 15:11:06 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5f:7b:10:81:a1:54:40:be:0c:5c:55:9a:3e:1c:ce:69:51:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:11:06 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=9bef131bc9621198c0b377d6c4f9d45fab8a76502317440151c97888bdee3630, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:51:74:f7:d0:1c:ab:59:cf:bd:68:68:d3:
3d:58:c8:5f:40:f5:d2:e3:5f:db:44:02:48:2c:e8:
7a:47:22:fd:a2:e0:a6:8d:fa:68:c9:be:a7:ac:26:
05:44:16:36:2a:24:73:12:46:9f:48:98:11:0a:27:
1c:8a:c6:a4:b8:3a:54:00:31:56:d2:7b:82:1c:b9:
79:63:59:48:bc:5e:08:4d:76:e9:c2:13:c7:a7:19:
92:21:fc:a8:e7:07:6e:a7:7c:ce:1f:6b:1a:31:b7:
0b:48:ac:01:fa:b4:01:50:3e:d9:80:05:87:5e:38:
45:29:1c:aa:79:75:4e:ac:01:38:9e:e6:6f:42:83:
0e:75:e4:a7:04:01:8b:7c:c5:df:ac:4d:fd:2a:72:
d3:a1:cd:f2:39:50:ac:07:64:d1:c2:e1:42:0e:18:
d5:4e:8b:72:e3:aa:ce:b7:a4:a5:c4:9b:2c:d2:1d:
98:68:17:2b:f7:25:31:cc:d2:1b:91:e9:1d:92:78:
fc:28:ca:37:c8:7a:87:16:e6:33:0c:c7:07:4a:7b:
ec:49:5b:09:a3:6b:32:39:ac:ba:4b:f2:77:b9:b0:
eb:ef:4d:68:9c:54:bb:07:7c:04:28:a0:b1:55:a6:
24:44:9e:9c:93:ac:96:a7:5f:f5:37:e1:d7:9a:b4:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:C3:E2:2F:A4:B0:44:14:42:31:53:58:BC:77:26:17:92:A5:25
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b000::/36
Signature Algorithm: sha256WithRSAEncryption
a4:22:f4:a0:d5:56:0d:c3:0e:8d:89:00:89:37:26:10:b9:ac:
74:9a:46:af:d8:d0:26:67:1d:c4:95:ec:0b:77:3c:df:cb:9e:
41:79:47:bf:89:5d:d5:17:ea:d9:33:7c:f9:1d:cd:16:e0:5f:
22:70:70:71:78:24:89:b8:87:d1:0c:b4:61:f5:14:dc:91:f1:
91:dc:47:fa:9a:05:5b:0f:2e:68:93:d6:c4:24:5a:77:2f:d7:
3d:f9:ef:ff:01:80:ac:3b:8f:a1:c2:c9:44:6e:6a:a1:8e:07:
f3:b5:80:61:0e:98:40:9a:96:49:ad:e1:e5:e8:26:a7:4e:4c:
27:68:36:da:fc:25:26:d2:ae:d2:05:37:23:61:e5:f5:22:31:
b2:25:d8:63:1c:6a:f8:57:13:a9:08:1c:92:86:b4:22:f9:0d:
a3:95:1a:3a:08:26:96:ac:b4:33:fd:cf:76:02:83:de:72:52:
a2:9b:33:f8:d8:b4:a8:f1:1f:a6:3b:fc:a0:cd:d9:16:a7:f8:
d7:e2:ba:5e:b5:a6:20:04:87:91:13:43:c7:96:b8:6b:d9:e2:
24:39:e8:f5:05:35:c0:cd:78:18:f5:26:c3:78:6a:1d:f7:8a:
1f:a7:77:94:99:50:94:8c:49:4a:73:4c:3b:a5:5b:4a:65:a7:
2b:d0:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:43:22 2025 by rpki-client