Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa
File: f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa (raw, json)
Hash identifier: xYjFooSdrmRns55mxweay8/9U1zUHXFuX9mfLAOD0b4=
Subject key identifier: 90:85:10:EF:33:1A:9F:1F:87:4A:05:07:C0:10:9C:57:B2:49:58:EB
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2AF0F8E2A297A9EBBF61AFF778B2BB56F83799CC
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa
Signing time: Wed 30 Jul 2025 17:36:59 +0000
ROA not before: Wed 30 Jul 2025 17:36:59 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f0:f8:e2:a2:97:a9:eb:bf:61:af:f7:78:b2:bb:56:f8:37:99:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 30 17:36:59 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=7fa245dc6edab8fe39f0cfa3374f69c510da4dd846dc4236769738a2be08b213, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:a9:f6:5b:66:a1:33:63:81:d6:8c:32:b4:
fc:f3:06:aa:c2:f0:58:06:d3:2e:d4:a4:ad:27:75:
13:25:da:52:4d:e5:21:ac:99:3f:1d:6c:08:fc:b9:
94:71:15:39:cb:49:10:cd:0b:c9:3a:8f:82:5e:f4:
51:8d:3f:60:b0:dd:2b:42:5a:1c:4a:ba:6b:9a:21:
7b:7c:66:8e:be:61:68:c0:25:2e:c3:71:72:d8:a2:
0e:31:d3:71:b0:c8:92:f6:89:7a:8c:e0:27:db:81:
1e:c5:bf:34:5e:f1:9b:19:d3:e4:d9:8e:87:21:09:
ff:7d:4f:21:91:b4:34:f0:fb:6c:7f:bc:87:b1:bd:
4f:62:e8:a2:14:22:17:f3:5f:a8:ba:30:af:f3:55:
77:45:68:07:18:74:4e:ab:c6:42:45:78:23:80:ac:
fe:f2:15:85:ec:5d:d6:28:1a:4e:b5:82:f1:53:83:
5b:23:32:18:b5:2a:1d:9c:72:64:0f:47:63:b4:0a:
7c:cf:64:97:c0:91:2a:fb:d2:65:75:94:25:38:07:
ea:ac:ad:e9:79:ac:1a:3c:b1:cd:7c:87:bf:09:90:
e6:79:6d:02:56:9b:33:36:68:ef:54:f8:44:dc:df:
a1:b6:55:a5:bb:10:37:af:ce:32:11:49:70:ad:7c:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:10:EF:33:1A:9F:1F:87:4A:05:07:C0:10:9C:57:B2:49:58:EB
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5000::/36
Signature Algorithm: sha256WithRSAEncryption
23:5f:e8:44:12:5c:1b:fe:f7:66:ef:5c:3d:be:16:97:e9:a0:
a6:07:33:8d:c3:22:79:c3:7e:c2:2f:52:78:bf:b8:6b:be:b0:
28:a3:ba:55:13:02:7d:71:5d:94:f5:f9:0c:d8:a2:b9:1b:53:
f0:d7:dc:9f:85:3b:23:0a:5d:26:1a:97:96:d0:99:0e:d0:bb:
9a:cf:4e:b1:7a:82:07:c0:8d:55:04:88:60:4b:91:36:f0:2b:
17:f3:17:7b:bb:20:cd:7b:5c:b7:5d:d8:6d:a9:d9:62:7f:98:
d0:a1:37:5e:4a:23:a8:2b:03:c8:fe:b6:c6:dc:05:92:bc:26:
ef:2d:85:6a:6f:37:a3:a7:ac:70:ac:df:6e:09:f1:e4:3a:54:
7d:52:04:ac:2e:6d:cd:1a:93:58:f1:d2:6b:68:cb:8f:fe:a9:
20:23:e8:c5:a4:8d:0a:54:d4:85:a7:37:89:54:0a:9b:db:0c:
61:cf:9a:0c:56:ac:2f:7e:d5:3d:6c:c3:7b:0f:d5:7a:82:0e:
26:31:77:7c:0a:2a:25:df:c6:2e:39:c4:0a:76:52:52:f0:13:
7e:5b:4b:d7:27:79:90:a4:76:d9:4a:90:da:b3:d9:20:c9:35:
44:33:33:e9:c1:5e:2a:fb:86:39:ed:cb:6a:85:7f:c9:be:d4:
8a:8c:ff:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:33:47 2025 by rpki-client