Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9623dcba-6a97-4717-ac77-dd16d3c33f78.roa
File: 9623dcba-6a97-4717-ac77-dd16d3c33f78.roa (raw, json)
Hash identifier: G+YifxJhOx07xumlji/GDV1x9dAjlZtjj2nNraX7cI0=
Subject key identifier: 26:8D:84:F7:85:6A:94:87:D5:F7:89:07:A8:6D:B0:FC:7A:C4:07:26
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 7EA7693E9A68E7A35D76A3A423E7531EE53480E8
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9623dcba-6a97-4717-ac77-dd16d3c33f78.roa
Signing time: Mon 26 May 2025 15:21:24 +0000
ROA not before: Mon 26 May 2025 15:21:24 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a7:69:3e:9a:68:e7:a3:5d:76:a3:a4:23:e7:53:1e:e5:34:80:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:21:24 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=7d3f2b4491ef5333232be464438b48c81715314325c54b33188010594bde9b7a, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:15:92:db:b0:61:31:92:64:aa:62:20:08:6c:
19:68:25:59:cd:0b:a7:db:3d:47:66:80:77:67:76:
54:d5:22:94:91:25:74:09:aa:46:0b:af:4e:9c:76:
c7:ae:cf:e4:78:d0:a8:1d:48:be:3d:2d:88:62:dd:
c0:23:28:64:98:ae:ae:42:08:85:e3:36:55:e3:6a:
a0:51:e7:29:7d:72:bf:2a:76:8d:73:d6:9f:68:e0:
8b:9b:9f:c6:71:fe:55:d4:9e:7e:9a:7b:5c:0e:ea:
4c:5d:69:0a:fb:bf:5c:75:f6:0c:32:23:26:39:1a:
2f:66:b7:78:66:48:2e:c0:ed:1c:7e:26:c5:4b:09:
c1:f5:34:19:37:29:2d:53:43:14:b2:69:61:e1:91:
22:27:1f:0e:ae:05:eb:73:df:80:05:22:37:0a:53:
ef:6e:b2:4f:a9:49:cd:fe:20:51:c7:65:ad:e0:8d:
84:ae:16:1d:84:b2:61:8c:d1:7a:dd:86:6f:57:b2:
ea:a1:08:c6:3a:5f:56:1a:59:ab:20:27:27:67:f2:
1e:f6:2a:0b:98:d0:09:fb:6b:c2:ef:ea:93:d5:6e:
93:37:fa:d2:e0:96:5b:3d:ec:4d:a8:a7:df:1a:de:
f8:c3:ce:ef:9c:b0:9c:c9:77:13:76:c1:57:69:66:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:84:F7:85:6A:94:87:D5:F7:89:07:A8:6D:B0:FC:7A:C4:07:26
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9623dcba-6a97-4717-ac77-dd16d3c33f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5::/36
Signature Algorithm: sha256WithRSAEncryption
aa:42:de:2e:90:7f:cf:20:b4:eb:bc:a1:2e:07:7f:ce:38:b4:
3c:96:79:16:5d:01:88:c4:ff:e9:c1:4c:42:fe:c0:3c:0f:c9:
4a:44:5a:72:2e:4e:8c:6d:60:b5:1f:5b:b2:f3:db:a2:c4:ac:
d8:ec:de:02:b3:b1:ea:67:f6:a0:c0:69:41:2c:2b:62:e1:6b:
0c:78:ae:76:71:53:77:97:00:4f:bf:88:50:77:3d:f9:fe:77:
22:a7:91:dc:61:dd:a3:9f:ab:17:8c:df:d8:76:34:e1:32:24:
63:35:5a:71:40:82:53:9b:9a:be:91:ae:d0:aa:b0:34:27:12:
22:05:00:33:49:80:c1:18:02:a6:4e:0b:b9:ed:27:78:b0:44:
72:e8:a2:09:32:9a:2c:05:be:6d:c1:e2:13:a3:78:45:25:c2:
05:10:f5:db:76:ea:5b:58:ac:91:6d:67:23:b9:38:9c:1d:3f:
7c:25:e3:7e:d5:1e:72:1b:9b:34:88:0c:4f:9e:b2:66:3c:e7:
55:7f:70:c7:c4:9c:89:5f:1d:f6:0f:c0:78:8d:7b:cf:fa:c9:
fd:4d:e2:f3:fe:7b:4d:e2:96:aa:8a:f3:99:91:f7:4f:b7:ac:
06:75:ab:d6:98:e1:24:cf:7c:0d:82:c7:dc:e7:d8:12:0b:04:
f6:bc:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:05 2025 by rpki-client