Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
File: 2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa (raw, json)
Hash identifier: UCUMV82ESRjqx7goWVZ5m8rzsRU0B/VjpPQUPyxR18Q=
Subject key identifier: CD:DE:FC:53:67:98:0E:4F:BA:A8:E8:3A:F9:04:B7:87:88:9F:D1:59
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 586E528C1A8A2AC2D1491A1D4249B9C6BC10E0B1
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
Signing time: Tue 15 Jul 2025 00:30:17 +0000
ROA not before: Tue 15 Jul 2025 00:30:17 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6e:52:8c:1a:8a:2a:c2:d1:49:1a:1d:42:49:b9:c6:bc:10:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:30:17 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=1f4723089f001838324068e360daf7b8793b80434b26a09b0c40183699a51ba8, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:75:8b:c1:e1:d2:58:3d:7e:bd:50:54:59:
85:18:a7:b5:6a:3c:c0:f9:4f:e3:47:67:fa:53:d8:
09:fd:8d:69:7f:55:2d:4d:84:2d:de:01:ab:49:d0:
04:ca:2b:b4:15:43:35:6e:5a:96:3c:e7:da:11:8a:
93:53:5f:f0:13:d8:c1:ba:27:e3:8a:c2:85:44:84:
22:d2:bf:2c:84:1d:17:ad:d5:ff:27:6d:3e:0d:e4:
14:47:7c:a0:d5:18:c1:bd:67:c9:6f:0a:0c:55:f1:
5a:ac:a2:e7:65:c7:69:1e:cd:2d:11:a4:11:04:ac:
17:ed:bc:26:c0:76:ce:77:44:83:05:d8:9f:db:44:
95:71:69:e8:6d:31:e9:84:4a:73:3a:f3:2f:f7:af:
02:47:ea:2f:dc:22:f0:02:38:dd:c9:bb:31:b8:b2:
c6:d7:26:72:bc:fb:b2:5e:39:4f:d6:68:51:3b:8b:
f4:b5:b7:ca:41:9e:fc:9f:19:93:f1:8c:50:8a:1d:
27:13:04:98:24:fb:73:60:0e:dd:d8:f5:41:51:4f:
e2:60:12:23:19:6f:84:19:eb:04:58:3f:a6:9b:4e:
04:49:83:d0:37:83:eb:ed:9d:a2:16:c1:9a:7c:f5:
42:9a:3b:14:63:0a:20:58:50:77:97:03:46:d6:07:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:FC:53:67:98:0E:4F:BA:A8:E8:3A:F9:04:B7:87:88:9F:D1:59
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
40:91:25:3c:bd:72:36:be:a5:5d:a1:8d:22:9c:72:8b:9c:27:
1c:ae:4f:5a:97:6e:39:72:03:f2:60:21:de:70:0c:88:76:e2:
52:3d:88:68:4d:35:e3:b4:d5:d5:6f:3f:5a:ec:5f:49:71:f9:
6e:20:03:d0:cc:09:72:f2:09:72:c9:25:da:d3:1d:fc:b8:48:
94:3f:f0:fd:d0:2e:c3:e8:9e:e9:67:ea:d2:3c:86:ea:85:cd:
17:1c:c0:7a:e1:69:91:3a:76:4c:79:5e:70:26:3d:6f:68:44:
88:e5:bc:5a:2d:00:ed:25:06:a0:26:cf:b6:83:9e:52:81:e2:
22:c7:f5:a7:59:77:6c:23:8d:58:fd:10:b0:0d:78:e8:de:e7:
8c:1b:9e:6e:b5:74:49:db:ec:d5:09:d7:76:97:38:1c:86:8e:
98:97:df:7b:ec:24:1f:58:0b:d0:69:03:e9:e2:40:3a:e5:1a:
f4:a5:d3:e8:9b:bb:f6:e8:05:cc:a1:2a:53:eb:c9:91:d2:31:
c2:1a:47:36:b8:bd:38:8f:5c:de:d2:63:46:69:56:1c:5f:75:
fd:33:eb:6b:cf:9d:33:96:03:ae:dc:4e:1b:3b:2a:3b:34:ed:
2b:4e:75:2d:ee:c6:05:6c:a8:f4:41:1a:fd:5b:b3:c2:8e:9f:
1e:f2:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:27 2025 by rpki-client