Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/cd8f07c9-abc1-41dd-bad4-c7e5bf0bd4c5.roa
File: cd8f07c9-abc1-41dd-bad4-c7e5bf0bd4c5.roa (raw, json)
Hash identifier: XRpDEeR5x6k2FSTFPkwsSWj8RhqKWbdauFQCjOLlzLw=
Subject key identifier: 75:0C:2D:8E:FA:D9:A4:13:FE:7A:00:A9:68:44:EE:90:E0:9E:2C:BB
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 03CB0E2765277A32704556F09C74A047D2E2F1F3
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/cd8f07c9-abc1-41dd-bad4-c7e5bf0bd4c5.roa
Signing time: Mon 26 May 2025 15:21:17 +0000
ROA not before: Mon 26 May 2025 15:21:17 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:cb:0e:27:65:27:7a:32:70:45:56:f0:9c:74:a0:47:d2:e2:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:21:17 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=c9c0e54e8ba2c302cb9b03b4616285b093623bb3613509ed368a22896a91e85f, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:0e:52:89:28:c5:96:b6:30:1d:0a:ab:d4:
bc:9a:b1:33:0d:0a:e6:4d:8f:ae:48:de:91:a6:15:
97:a1:b1:ba:58:36:32:31:fa:cd:3c:1f:7b:66:59:
b1:47:3b:ae:d1:bb:12:12:01:12:40:2b:e8:a9:38:
55:0b:00:ee:96:c0:25:c8:ab:9f:2e:78:f0:a3:bb:
e0:c1:fc:d7:5d:f8:a3:35:33:d4:e2:91:9f:46:7d:
f2:3b:27:29:d0:be:19:5b:fe:61:f5:4c:33:ce:ec:
de:e5:71:a4:a0:f4:bd:26:ef:0b:98:b1:61:33:29:
fb:b5:c6:6f:50:49:bd:11:cc:f9:73:26:32:46:bd:
0c:89:a0:7e:30:e5:88:f2:5c:da:b4:b9:8d:fc:c6:
17:c8:0c:4d:30:e3:c7:93:ac:85:3a:4a:53:53:ab:
8e:86:66:e8:e3:35:dd:3b:b0:8b:14:f5:cb:21:8c:
6e:b4:34:95:66:84:0a:13:d1:f2:80:89:dd:85:b8:
73:52:2a:6d:d6:d3:da:cc:0b:fd:04:89:e7:00:e2:
25:ca:25:a5:74:4f:0a:ac:6c:c4:0b:c1:0f:11:a1:
eb:e4:34:0f:76:17:90:38:18:13:d1:8c:3a:20:88:
e7:f1:a5:9e:f6:4b:f6:ee:85:40:83:68:88:ba:44:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:2D:8E:FA:D9:A4:13:FE:7A:00:A9:68:44:EE:90:E0:9E:2C:BB
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/cd8f07c9-abc1-41dd-bad4-c7e5bf0bd4c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
1b:c6:a8:69:57:3e:6f:c0:fa:0f:8e:c4:61:a0:e6:7c:80:74:
1b:3a:d2:e9:b7:21:ca:e0:73:d7:f2:a0:60:cd:9f:11:81:1b:
55:bb:9d:f9:08:19:ef:5c:3b:54:f8:83:95:2d:a2:b7:24:f1:
34:98:5d:38:1b:56:0d:d2:33:b8:9f:ab:57:ff:80:d8:7f:14:
ca:00:e0:26:72:ce:74:a8:cc:1a:5e:c8:e0:6f:c5:31:b8:49:
eb:ac:c7:ea:6c:7a:f1:b6:96:39:c4:e6:b0:89:8d:e8:eb:74:
8f:aa:1b:2c:0c:29:22:4a:e3:1f:b5:f9:e5:d1:eb:d6:d6:89:
14:eb:6b:72:83:d4:53:b2:1d:cb:19:40:47:76:a0:a3:08:16:
ab:85:c8:f9:e7:5e:32:d6:7b:b0:1f:fd:53:f3:f4:2c:02:42:
34:4b:42:d9:3e:c7:d0:9f:90:27:b3:7d:02:46:88:bc:0e:78:
49:3b:97:52:ac:46:96:ee:36:66:5b:3a:f8:7d:ee:44:06:c1:
e9:40:75:e1:95:e9:02:fd:6e:ca:b4:ad:3c:1e:9c:39:8c:86:
af:53:a3:b2:31:9a:e0:62:bb:ce:0e:a6:76:a8:27:3a:59:3a:
94:82:73:0f:67:24:72:68:87:19:39:1a:6a:ba:62:1d:fa:9b:
6a:02:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:25:33 2025 by rpki-client