Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c9fc58bf-3415-4839-940e-603e1b7d42f6.roa
File: c9fc58bf-3415-4839-940e-603e1b7d42f6.roa (raw, json)
Hash identifier: 5WI1CZ5YnaRcOit5aDHQF94G/JPEsarNGcd/5yzLlDU=
Subject key identifier: 7F:6D:BA:D2:BE:7F:A7:49:B0:F7:15:26:21:61:D9:97:55:44:2A:99
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 251BD1C0B8726A71A71E8CF128660B736D61F886
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c9fc58bf-3415-4839-940e-603e1b7d42f6.roa
Signing time: Mon 26 May 2025 15:20:54 +0000
ROA not before: Mon 26 May 2025 15:20:54 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1b:d1:c0:b8:72:6a:71:a7:1e:8c:f1:28:66:0b:73:6d:61:f8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:20:54 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=4affbb5fb9be5930448873215568bea5be08380046d9e61ea5c57dc7ee6bf63c, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:3b:cf:e8:51:4d:ae:b5:58:e5:7d:3d:4c:
9f:9e:5f:c3:cf:8b:e5:20:7c:8d:75:c9:80:34:df:
97:e9:41:89:db:96:f5:2b:91:5b:45:b6:9b:54:e5:
89:ed:82:5d:b0:2f:30:ba:9e:e5:53:1d:9e:9b:97:
1c:09:9d:05:eb:db:32:84:60:c2:45:6c:9d:c8:06:
f2:d3:b7:a7:65:57:93:ce:41:ff:19:b7:31:f8:5b:
e7:b5:2c:8d:45:43:a6:c6:0b:15:98:aa:b9:71:20:
a4:57:98:9c:26:03:b9:5e:7f:e1:b2:29:0a:7c:cd:
dc:7e:f5:20:45:d2:39:84:f0:74:29:70:0c:01:48:
3d:75:3c:2d:2b:49:78:91:f1:2a:66:1e:9a:58:06:
58:d6:67:dc:67:d2:13:6d:a2:09:78:3d:72:f4:0a:
b5:91:14:79:e4:dd:b0:27:67:55:8b:f4:ce:67:b3:
50:17:a2:b2:d6:0a:04:aa:e5:2b:89:d1:f2:62:4f:
c9:f5:d8:76:a9:b6:3f:b6:6c:4a:81:c6:56:0e:72:
7b:db:eb:29:53:c3:b4:9e:d2:cc:a2:5d:d3:67:88:
38:08:aa:53:c7:f4:9a:a6:d3:de:44:81:d8:3e:17:
df:ac:12:2f:31:7a:50:12:d1:88:b3:1e:fb:b5:dc:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:BA:D2:BE:7F:A7:49:B0:F7:15:26:21:61:D9:97:55:44:2A:99
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c9fc58bf-3415-4839-940e-603e1b7d42f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:e000::/36
Signature Algorithm: sha256WithRSAEncryption
94:8a:6e:93:f4:e7:f1:cd:17:59:2b:12:f8:20:87:ea:ae:c4:
56:91:19:19:90:24:b0:eb:40:e3:42:d2:d8:1b:90:47:3f:e4:
89:fa:ce:89:cc:a0:3a:57:60:bd:90:f5:fe:82:0b:80:11:33:
96:e0:4b:e7:c0:10:bf:e1:4d:bc:bc:15:e6:20:50:fb:ea:ec:
44:ce:74:8a:8b:0e:b6:78:64:40:7f:a2:40:1e:54:38:9c:9c:
a9:7d:c6:ac:a7:71:4d:a3:8b:6a:79:16:07:d6:80:10:fd:ca:
bb:46:4a:b5:ef:a6:46:9d:f5:66:96:ff:01:9c:71:71:fd:5c:
a3:e8:c5:6b:53:83:f5:9c:b1:13:5f:b7:bc:a5:5e:a3:31:ba:
c1:ec:c0:47:c0:74:84:16:04:d4:33:9f:5e:26:2b:17:49:e0:
23:fe:02:6c:3e:32:00:81:0a:19:41:93:b5:e5:d2:d3:d7:b8:
c0:f0:31:09:03:8a:4a:c2:c2:eb:90:17:f0:fc:de:27:ec:8e:
97:a2:7c:96:3b:27:9e:1c:2d:a7:8f:0f:4f:4e:f6:98:82:d5:
ac:4b:ee:2a:80:42:37:b4:d3:9d:be:33:be:20:15:5b:2a:9b:
75:c2:8f:1f:1e:fb:fd:3a:09:a3:e2:65:82:2d:92:d6:56:78:
74:ab:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:45 2025 by rpki-client