Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c956296d-d626-42b2-a9ef-bb988f4c3cc9.roa
File: c956296d-d626-42b2-a9ef-bb988f4c3cc9.roa (raw, json)
Hash identifier: wpgrfruIxOGjEYYsjElqnlz5gnvveEwuDPuAYA8kR/4=
Subject key identifier: 8C:65:99:BF:22:A5:58:71:A5:72:60:E2:66:4A:22:21:CF:59:47:72
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: A0B1D74F1C002DF81CC2721577FC838859B0F4
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c956296d-d626-42b2-a9ef-bb988f4c3cc9.roa
Signing time: Mon 26 May 2025 15:10:25 +0000
ROA not before: Mon 26 May 2025 15:10:25 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:58c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a0:b1:d7:4f:1c:00:2d:f8:1c:c2:72:15:77:fc:83:88:59:b0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:25 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=fa416410250967fdeba43257ac9b33932e7dd966738627693eb03106288e32ce, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:86:b1:8f:29:f3:9c:32:d3:9c:1f:3a:2a:
74:02:3a:55:0f:6b:13:af:2a:ad:80:69:52:09:fd:
ab:a7:73:34:ad:e5:2f:e0:05:8e:0e:73:e0:75:57:
24:f5:0b:0b:86:f3:3d:56:37:5e:90:04:af:30:78:
8a:26:11:f5:e7:87:ee:5d:d8:b7:3c:03:60:ac:0e:
f0:65:ba:3b:03:67:b5:d9:44:b8:ff:55:9d:30:49:
d8:5c:dd:5e:8c:f6:d5:30:9c:3b:24:07:31:8b:75:
ac:e0:68:a0:16:2b:15:33:b6:13:99:e7:16:ee:2d:
18:80:d4:9d:39:58:f1:5d:8a:ee:55:d7:05:e2:f9:
7e:2c:d4:f0:d2:a2:9b:65:58:75:a2:12:2e:43:e4:
00:39:24:9a:af:ae:f9:62:cd:00:c8:99:c6:26:0f:
ad:10:19:74:cd:86:b3:f4:ec:7c:40:69:ea:6b:27:
14:b3:0b:83:7c:0c:45:03:d8:e7:ff:b8:7b:70:03:
28:6a:1b:a7:c9:62:72:31:a0:65:28:f0:4b:57:a3:
01:dd:a3:ac:f1:ef:f3:ca:8e:85:da:68:f6:6e:87:
54:88:77:b9:c8:86:34:0c:54:f6:34:11:ed:2d:95:
99:53:ea:0d:5c:84:b8:b7:77:f1:ed:09:38:de:4d:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:99:BF:22:A5:58:71:A5:72:60:E2:66:4A:22:21:CF:59:47:72
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c956296d-d626-42b2-a9ef-bb988f4c3cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:58c0::/46
Signature Algorithm: sha256WithRSAEncryption
18:57:9d:49:af:e6:7d:75:62:89:8f:ff:5c:2c:25:f6:d1:3c:
ef:bc:26:96:95:20:c3:8d:7f:ef:7d:09:bc:93:1f:0e:c1:80:
e7:ce:ea:49:65:03:12:87:33:0d:4e:9d:c0:60:55:f1:5c:b6:
51:6c:d6:de:1f:45:16:05:a7:4a:b6:c7:17:fc:53:9b:17:be:
14:e9:cf:48:b1:ea:80:02:8e:78:9a:cd:d8:50:39:f6:88:3c:
21:21:a0:fd:27:00:6d:0a:65:07:4e:78:95:0a:04:ba:85:dc:
0f:df:75:63:8f:7c:74:3b:3c:aa:2c:b0:ed:c8:00:63:ee:9a:
05:bb:6d:b3:d7:dc:a5:60:4e:00:82:63:28:8b:60:ea:0d:87:
1b:ed:20:80:19:72:bd:f6:ca:f4:db:15:fc:1b:f6:13:5e:be:
df:39:eb:1b:4c:c7:ab:5c:3f:9d:4d:3f:33:bc:b0:ba:b3:52:
fa:18:de:45:17:25:94:90:1f:55:51:4a:e4:68:79:02:2e:a3:
ae:55:97:7b:53:97:84:b5:72:c8:e4:2d:fa:f4:5c:48:80:cd:
87:a4:53:63:b0:53:a6:bc:7f:3f:16:8f:0f:58:52:0c:86:d7:
80:2e:1d:10:e3:f1:f8:b5:d9:5e:54:d3:6b:4d:fd:ab:22:f1:
7a:22:57:bc
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUAKCx108cAC34HMJyFXf8g4hZsPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA1MjYxNTEwMjVaFw0yNTA2MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGZhNDE2NDEwMjUwOTY3ZmRlYmE0MzI1N2FjOWIzMzkzMmU3ZGQ5NjY3Mzg2
Mjc2OTNlYjAzMTA2Mjg4ZTMyY2UxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN0KhrGPKfOcMtOcHzoqdAI6VQ9rE68qrYBpUgn9q6dzNK3lL+AFjg5z4HVX
JPULC4bzPVY3XpAErzB4iiYR9eeH7l3YtzwDYKwO8GW6OwNntdlEuP9VnTBJ2Fzd
Xoz21TCcOyQHMYt1rOBooBYrFTO2E5nnFu4tGIDUnTlY8V2K7lXXBeL5fizU8NKi
m2VYdaISLkPkADkkmq+u+WLNAMiZxiYPrRAZdM2Gs/TsfEBp6msnFLMLg3wMRQPY
5/+4e3ADKGobp8licjGgZSjwS1ejAd2jrPHv88qOhdpo9m6HVIh3uciGNAxU9jQR
7S2VmVPqDVyEuLd38e0JON5NuDkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSMZZm/
IqVYcaVyYOJmSiIhz1lHcjAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
Yzk1NjI5NmQtZDYyNi00MmIyLWE5ZWYtYmI5ODhmNGMzY2M5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAiABP8NY
wDANBgkqhkiG9w0BAQsFAAOCAQEAGFedSa/mfXViiY//XCwl9tE877wmlpUgw41/
730JvJMfDsGA587qSWUDEoczDU6dwGBV8Vy2UWzW3h9FFgWnSrbHF/xTmxe+FOnP
SLHqgAKOeJrN2FA59og8ISGg/ScAbQplB054lQoEuoXcD991Y498dDs8qiyw7cgA
Y+6aBbtts9fcpWBOAIJjKItg6g2HG+0ggBlyvfbK9NsV/Bv2E16+3znrG0zHq1w/
nU0/M7ywurNS+hjeRRcllJAfVVFK5Gh5Ai6jrlWXe1OXhLVyyOQt+vRcSIDNh6RT
Y7BTprx/PxaPD1hSDIbXgC4dEOPx+LXZXlTTa039qyLxeiJXvA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:47:30 2025 by rpki-client