Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/e75e46c0-2d4d-42fd-a050-85f835672397.roa
File: e75e46c0-2d4d-42fd-a050-85f835672397.roa (raw, json)
Hash identifier: w3UF5AlIaZ/xphq5RyloJFoxZtTJTUll/60aFFVmEpU=
Subject key identifier: 5E:4C:EB:E9:89:B2:08:99:FB:78:B7:A6:C5:6B:B1:D7:5A:11:F0:E8
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 05AC54E3B492D935A9A98EEA12D3642B709A3550
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/e75e46c0-2d4d-42fd-a050-85f835672397.roa
Signing time: Mon 26 May 2025 15:20:45 +0000
ROA not before: Mon 26 May 2025 15:20:45 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ac:54:e3:b4:92:d9:35:a9:a9:8e:ea:12:d3:64:2b:70:9a:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:20:45 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=8913b593012a83e3147313f71b825bd7047b43cd9219ba60812ce51bffeb15f2, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:cb:3c:54:de:da:ae:f2:77:bd:fb:30:01:
f7:d9:55:0a:0f:16:03:c0:45:c2:c1:e7:08:bb:33:
dc:f8:79:9a:cc:0d:b3:c7:4a:25:db:75:3a:84:cf:
53:cc:a5:e8:b1:87:bc:9a:79:f5:5d:c3:27:6a:d8:
af:bf:cf:b8:ad:ba:5b:09:d5:3b:6d:30:f0:0a:c7:
18:9c:12:2d:92:7b:b9:d2:7e:d1:3f:98:29:e8:5f:
15:f8:f4:10:b7:65:23:b9:95:b9:32:18:61:74:96:
47:54:f2:a6:3c:69:01:c6:6f:f6:73:71:ee:06:45:
61:6d:5b:bb:d6:56:fc:1d:f8:34:d6:f4:37:49:6e:
af:6f:97:d2:ce:7b:e6:71:d5:5b:09:51:ad:79:c6:
a6:9f:df:36:ec:b7:bb:a4:72:60:4e:69:28:d5:f2:
f2:85:09:c1:2d:79:61:0f:b0:b6:fc:d0:4e:10:b5:
7c:02:a6:a3:ec:f3:24:c3:bf:c4:7d:b2:5e:35:e6:
25:e8:d9:a3:0d:e2:0a:98:19:65:9b:15:e0:1b:55:
d6:ee:8a:29:b1:90:28:c7:58:d5:c0:49:27:f2:e6:
cf:95:f0:09:7b:b5:01:1a:1c:04:56:70:38:07:21:
86:24:e3:4e:be:40:6d:61:c7:7a:3f:38:5c:1a:57:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:EB:E9:89:B2:08:99:FB:78:B7:A6:C5:6B:B1:D7:5A:11:F0:E8
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/e75e46c0-2d4d-42fd-a050-85f835672397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:9000::/36
Signature Algorithm: sha256WithRSAEncryption
61:b8:52:ae:79:cd:28:a5:30:6e:4d:94:b0:3b:5f:99:01:b8:
e0:b6:06:7e:a3:f7:9b:a4:78:63:17:06:31:ac:05:1f:f5:a0:
c0:26:fc:3a:8e:10:11:39:cf:d2:1d:9e:9a:4a:e0:71:2b:ae:
8a:94:a8:7f:4c:53:1e:77:65:2e:1f:02:36:7a:4e:08:17:9e:
66:b8:95:aa:59:b8:2e:6c:da:69:1c:65:51:3b:f2:1b:e7:6f:
d8:64:d8:43:14:f3:ac:88:08:5e:e2:c8:e1:e3:d3:a5:56:fd:
cd:fc:d7:26:1c:b5:ae:b9:24:a5:92:40:cb:18:31:f8:c6:92:
9f:e4:60:7a:0d:4a:80:61:9e:6a:71:25:f2:14:49:b0:3e:4c:
b0:a2:be:ce:24:69:90:d0:a2:55:e3:fd:b8:5c:a0:b8:c5:11:
2f:36:4c:b4:1b:4a:7c:b0:1f:a2:69:e2:1f:4d:71:aa:7d:b6:
4c:a4:4b:92:61:13:3a:2a:ae:56:c8:2d:a9:7c:c2:1e:59:01:
e3:a9:b1:21:c5:6f:f1:46:99:8d:75:2b:7a:f7:a3:89:cb:34:
83:66:63:fa:35:c7:3c:54:0f:d7:8a:ab:ea:f1:4a:7a:a3:08:
61:75:44:48:2e:54:cd:64:a8:99:d3:2d:7b:17:80:b7:09:6b:
82:bb:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:52:48 2025 by rpki-client