Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/d0c16247-cad2-4748-8340-6fe2e6d8ce6f.roa
File: d0c16247-cad2-4748-8340-6fe2e6d8ce6f.roa (raw, json)
Hash identifier: XAkuMHwint0yEXAu1XImukcNhZTCAkJfX5zD/Or9sXs=
Subject key identifier: 62:DA:2D:5D:24:D3:D9:B5:4A:48:95:5D:AA:77:67:62:E0:10:26:26
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 4D17CBF73D6389FB82BD39D204AD8D43B815BA
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/d0c16247-cad2-4748-8340-6fe2e6d8ce6f.roa
Signing time: Mon 26 May 2025 15:20:06 +0000
ROA not before: Mon 26 May 2025 15:20:06 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:17:cb:f7:3d:63:89:fb:82:bd:39:d2:04:ad:8d:43:b8:15:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:20:06 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=46e42cbafa9171ecc6126fde2c773fa5dd316e4d81e17334395fa4ae27b7b5ae, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:27:9f:68:9e:f7:ec:23:36:57:8c:62:6e:
e5:2c:19:4e:8c:cd:1c:dc:48:01:a8:16:66:9d:57:
4a:06:ab:1c:73:6f:1c:7d:c7:c1:b8:f5:c8:41:16:
43:af:95:d1:c0:a6:9f:64:77:36:17:60:4c:8f:7d:
c9:00:c7:f7:5f:5d:7c:88:81:41:04:8a:87:6f:af:
67:72:fd:22:33:94:69:7e:eb:c2:3d:40:54:cc:4f:
38:31:de:f1:6b:72:2e:e1:cf:a6:0c:bc:10:99:c8:
23:31:31:38:21:d9:bf:31:a6:cb:45:c8:06:20:62:
d4:7e:80:da:b6:42:cb:fc:96:63:44:ad:a5:e1:30:
b0:fd:e0:49:78:90:ea:db:10:c6:a0:36:6c:98:9a:
61:7c:77:1e:af:8c:83:39:e2:0e:54:7a:ff:eb:a4:
bd:d1:70:2f:1a:e2:95:f3:fb:be:3d:b4:d5:6b:8e:
ff:73:de:45:93:fc:01:f2:0f:4a:14:a2:f1:e6:a2:
34:1a:33:9e:47:4e:27:bd:6a:63:bb:d6:5e:38:55:
21:58:c1:dc:43:7e:15:9b:17:bb:78:84:9c:de:22:
c5:c3:98:09:b6:73:b0:f7:a6:ad:47:5f:6a:fa:7d:
2e:d9:05:f6:bf:72:fe:d1:f6:2a:fd:47:2b:40:d3:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DA:2D:5D:24:D3:D9:B5:4A:48:95:5D:AA:77:67:62:E0:10:26:26
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/d0c16247-cad2-4748-8340-6fe2e6d8ce6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
81:4f:dd:8d:d9:05:7e:d3:f7:e3:be:a6:bb:7c:1f:06:3b:76:
1c:83:47:cc:68:8c:29:aa:1c:c2:57:6a:bb:37:e8:ab:6d:20:
05:d9:a2:16:2f:15:aa:c2:fd:93:75:33:70:9a:9b:c8:48:d8:
a5:ed:61:3b:ff:26:62:10:ee:12:50:69:10:64:b1:db:40:4e:
80:79:04:4c:35:60:5f:68:c0:7f:f0:a9:cf:db:98:29:52:40:
ef:29:1a:e8:07:d9:45:a0:34:12:1d:60:d0:f2:bf:9b:39:a0:
3d:6b:a1:7e:12:39:ce:ba:dd:9e:3b:13:78:3d:c3:42:4f:88:
6f:9c:75:82:71:04:8e:13:43:2c:18:6c:5f:29:a6:46:8e:9b:
85:70:08:9b:cb:1a:58:d5:53:33:66:8c:04:49:25:30:19:f4:
ec:97:b5:ab:3b:09:4a:c7:76:ac:ae:1b:8a:d2:6d:01:d8:18:
65:eb:50:eb:1f:8d:c6:bd:92:14:3d:14:69:d0:28:e1:79:97:
66:db:95:bb:74:4a:89:99:1b:65:6e:c4:dd:c3:fe:2a:eb:bb:
66:cf:8d:a1:b8:ac:83:03:db:aa:fe:25:41:e5:bb:ed:d4:61:
3b:ca:9d:d5:30:b2:b3:32:2a:21:68:f1:05:59:8e:c4:06:4e:
49:54:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:49:30 2025 by rpki-client