Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7da13080-67e7-4ae7-b0bb-d85b087719b7.roa
File: 7da13080-67e7-4ae7-b0bb-d85b087719b7.roa (raw, json)
Hash identifier: bSHlA/a2Sam+2MZLOERtitNu5LREG1kImwA6leqfLo4=
Subject key identifier: 99:78:63:AA:CA:D2:B9:FB:B9:D1:7B:CB:7F:5C:92:BD:63:76:74:B2
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 6B1E5D8C3494CBA1C7FF393C6A6B2CCA3EBC1360
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7da13080-67e7-4ae7-b0bb-d85b087719b7.roa
Signing time: Mon 26 May 2025 15:11:09 +0000
ROA not before: Mon 26 May 2025 15:11:09 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1e:5d:8c:34:94:cb:a1:c7:ff:39:3c:6a:6b:2c:ca:3e:bc:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:11:09 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=4a114b4655e990c9ac817cd530f0f425e01348de7a56c4eeb67d04b60e2544f9, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:58:27:6e:fe:af:65:92:b4:95:63:5a:6e:
cf:b4:77:2d:90:a5:23:56:9f:d5:eb:1c:f1:9a:51:
49:f2:59:75:14:dd:f3:c0:f2:3a:03:05:6d:39:c8:
24:b6:6d:4e:c6:80:17:22:e7:01:10:af:d3:23:b4:
44:01:e0:36:5b:56:59:78:59:9a:cf:43:9c:81:36:
cb:84:5a:ff:d7:19:b8:9b:cd:b0:6c:a0:fc:eb:f2:
40:3e:84:1a:5b:4c:6f:60:bb:a0:b0:6b:b7:e0:2e:
e0:74:90:36:a0:1a:fc:09:2b:be:c1:0c:8b:d2:9e:
05:14:bc:a8:8e:55:f0:0f:92:68:a7:e0:ed:62:59:
a4:d7:20:03:d2:d6:1f:50:ca:2f:08:fa:80:c8:41:
9c:14:d5:1d:d3:9d:69:bc:37:33:de:f4:78:13:b4:
0c:7a:c2:ea:d0:3f:82:e8:a2:26:30:38:fa:ad:ea:
c3:2f:8b:8b:96:c5:30:0a:86:d7:24:be:de:60:95:
10:aa:bc:22:89:69:45:d3:67:a2:e0:94:fc:94:0c:
31:f4:f1:99:6d:9e:e9:e9:2b:b9:3a:90:fa:b3:cf:
e1:9e:32:c7:6b:4a:23:3c:60:c8:7a:49:32:1c:ca:
ac:7e:2f:e0:b7:9c:25:02:f5:f9:ea:5e:59:7a:0f:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:63:AA:CA:D2:B9:FB:B9:D1:7B:CB:7F:5C:92:BD:63:76:74:B2
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7da13080-67e7-4ae7-b0bb-d85b087719b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7000::/36
Signature Algorithm: sha256WithRSAEncryption
5e:6a:ce:64:6d:ff:68:29:b0:82:7d:8b:57:ec:ea:96:34:fd:
f9:6c:fd:f4:da:60:c3:e7:8b:20:56:4a:67:f4:27:60:fb:bd:
a2:1c:d3:f0:1e:79:af:60:98:69:60:8f:80:d4:20:02:2f:af:
fd:1c:55:b8:9d:1a:db:99:bd:d3:a2:24:79:d6:dc:c6:9b:82:
d5:09:90:a6:c5:c2:0a:4c:64:dc:2f:40:0e:1f:ba:ab:58:2e:
92:59:ab:ae:79:0f:67:73:6a:87:4f:9b:53:b8:97:5b:29:3c:
c6:9d:fa:97:14:74:bb:ba:4e:71:a7:81:44:5a:da:62:f5:e6:
83:be:94:3e:7c:24:96:24:43:4e:62:b8:2b:f7:df:48:10:44:
5f:08:4d:34:14:18:9e:f6:69:f7:aa:35:61:76:86:b2:17:01:
9c:30:5b:b9:04:89:b3:e7:0e:41:aa:b3:54:d8:30:71:fb:56:
ca:72:b9:55:f4:ba:bc:69:96:59:c7:8b:53:02:63:15:3a:07:
5c:1b:1a:82:43:08:df:f5:ec:ac:68:cf:32:3a:d1:b1:3a:ef:
be:bf:98:22:17:d4:c3:cb:f3:e9:d4:8f:38:94:c7:7d:fb:f2:
a3:ff:89:ec:ab:47:c2:6f:e9:d2:66:6f:86:0e:29:94:28:e1:
53:fa:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:54:58 2025 by rpki-client