Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
File: 00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa (raw, json)
Hash identifier: jaUlPwx8FYWrPERg59j4D8JwK9UbCnRYBzGTQfiW0lE=
Subject key identifier: 6C:6A:E5:F9:19:01:B6:8F:56:3E:97:62:14:78:49:35:11:7A:5E:DC
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 779AEE24481B0879E646D872880045BA21C8C1CF
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
Signing time: Tue 15 Jul 2025 00:30:35 +0000
ROA not before: Tue 15 Jul 2025 00:30:35 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9a:ee:24:48:1b:08:79:e6:46:d8:72:88:00:45:ba:21:c8:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:30:35 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=d5d5c1dc81d5f01afd87b8675dd9e4125d976bcd2bfeba6cc780c0f1b8c77f0b, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:03:46:0c:39:f0:23:9d:43:ac:ce:7f:63:
6d:a1:60:4c:ed:73:60:ce:b8:f0:72:33:55:1c:5d:
57:79:74:26:c2:86:9f:74:94:0e:f1:b8:de:ba:b9:
7b:86:00:6f:a0:ae:57:d9:0d:f1:e8:02:35:a3:26:
b6:66:c6:62:d1:53:df:94:88:c0:d4:31:7b:cf:c0:
12:94:65:4a:10:ed:38:fe:d4:0c:40:ea:d9:f1:19:
e3:e1:a8:f8:bb:14:a0:3e:30:c6:5b:ee:71:2b:8f:
6f:29:6b:d4:f0:a7:ce:08:79:f6:a0:51:50:2a:6f:
af:a3:14:1c:cb:26:cd:14:34:f7:13:9e:97:2e:bb:
fb:75:e1:82:6f:46:b4:5a:9b:ee:e4:c6:56:68:6c:
81:bf:3e:07:d6:50:6d:7b:c2:a0:f1:0f:04:25:2c:
3f:7c:d8:20:1e:72:0c:95:1d:90:4f:c1:5c:82:fe:
b3:53:6d:43:dc:19:1d:e3:da:36:f1:9e:57:2e:0d:
9c:44:05:19:84:e2:61:15:c0:7d:a9:eb:4f:f1:04:
c8:47:59:6f:da:11:c1:03:a7:b2:cc:49:23:fb:37:
a2:e9:ad:34:ca:7b:a3:6b:c2:d9:fc:59:16:5c:2a:
cb:6f:bf:10:68:e2:6e:6d:99:57:57:30:b9:b0:e8:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6A:E5:F9:19:01:B6:8F:56:3E:97:62:14:78:49:35:11:7A:5E:DC
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6000::/36
Signature Algorithm: sha256WithRSAEncryption
10:2a:18:2d:70:22:1e:5c:c4:89:82:4a:c7:9e:4b:c0:3c:82:
c3:37:78:ed:bd:d7:cd:3d:c3:d9:6f:d9:4f:a9:42:6c:81:8f:
f6:9a:3b:f2:9d:44:6e:c3:d1:43:52:98:31:30:28:4c:a5:38:
91:09:f3:1c:08:30:ec:6d:e9:4b:4b:23:ba:85:ea:22:69:a1:
22:38:2a:55:29:a0:21:97:fb:6c:f9:17:94:31:ee:4d:61:3d:
40:df:b6:b8:55:fb:bc:2c:34:70:c0:c0:af:aa:81:69:bc:01:
42:8d:7c:90:72:1a:2a:a8:6e:01:f3:b9:b8:27:df:15:65:f0:
fa:d2:01:6e:5b:85:fe:ff:ab:46:dd:99:8d:fa:ce:76:56:0d:
1d:6e:d6:13:12:20:cb:8e:2a:04:1c:06:6d:ea:c9:77:f0:48:
ae:73:2e:d8:e7:fd:cb:76:34:f0:30:4a:04:d1:a2:ef:6b:8b:
51:d4:3f:78:c9:d5:62:d2:de:a0:ce:27:b0:e9:93:d2:f4:6f:
93:59:6c:9c:2f:7e:47:d9:27:19:bd:cd:ca:ea:56:7f:35:e3:
cb:6e:98:26:7e:93:7f:64:fc:ef:46:aa:75:2d:a7:2e:ad:b9:
f9:00:bb:8e:9c:75:dc:70:38:d7:03:ee:29:d2:9f:8c:e1:08:
87:2f:67:66
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUd5ruJEgbCHnmRthyiABFuiHIwc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA3MTUwMDMwMzVaFw0yNTA4MTkyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1ZDVjMWRjODFkNWYwMWFmZDg3Yjg2NzVkZDllNDEyNWQ5NzZiY2QyYmZl
YmE2Y2M3ODBjMGYxYjhjNzdmMGIxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+CA0YMOfAjnUOszn9jbaFgTO1zYM648HIzVRxdV3l0JsKGn3SUDvG43rq5
e4YAb6CuV9kN8egCNaMmtmbGYtFT35SIwNQxe8/AEpRlShDtOP7UDEDq2fEZ4+Go
+LsUoD4wxlvucSuPbylr1PCnzgh59qBRUCpvr6MUHMsmzRQ09xOely67+3Xhgm9G
tFqb7uTGVmhsgb8+B9ZQbXvCoPEPBCUsP3zYIB5yDJUdkE/BXIL+s1NtQ9wZHePa
NvGeVy4NnEQFGYTiYRXAfanrT/EEyEdZb9oRwQOnssxJI/s3oumtNMp7o2vC2fxZ
Flwqy2+/EGjibm2ZV1cwubDoiGMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRsauX5
GQG2j1Y+l2IUeEk1EXpe3DAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
MDA3OTM2MjMtOWVkNy00NGE0LTljMmQtYjNmZjA2NjhhZWIyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8Ng
MA0GCSqGSIb3DQEBCwUAA4IBAQAQKhgtcCIeXMSJgkrHnkvAPILDN3jtvdfNPcPZ
b9lPqUJsgY/2mjvynURuw9FDUpgxMChMpTiRCfMcCDDsbelLSyO6heoiaaEiOCpV
KaAhl/ts+ReUMe5NYT1A37a4Vfu8LDRwwMCvqoFpvAFCjXyQchoqqG4B87m4J98V
ZfD60gFuW4X+/6tG3ZmN+s52Vg0dbtYTEiDLjioEHAZt6sl38Eiucy7Y5/3LdjTw
MEoE0aLva4tR1D94ydVi0t6gziew6ZPS9G+TWWycL35H2ScZvc3K6lZ/NePLbpgm
fpN/ZPzvRqp1Lacurbn5ALuOnHXccDjXA+4p0p+M4QiHL2dm
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:32 2025 by rpki-client