Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3b361956-44bc-47e7-9213-cd7854c555f8.roa
File: 3b361956-44bc-47e7-9213-cd7854c555f8.roa (raw, json)
Hash identifier: cPahN4XId/iOXvhlRlrj7RyRfRjyTS7VEPZXiTIbutM=
Subject key identifier: 4D:20:13:B5:DC:A3:1D:27:D3:99:19:25:B4:84:6D:D1:6E:7A:00:E1
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 595EBC036D2F1F2EB3FE62B82F4D1FF0D6112EAB
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3b361956-44bc-47e7-9213-cd7854c555f8.roa
Signing time: Sat 05 Apr 2025 00:21:08 +0000
ROA not before: Sat 05 Apr 2025 00:21:08 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5e:bc:03:6d:2f:1f:2e:b3:fe:62:b8:2f:4d:1f:f0:d6:11:2e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:08 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:8a:48:50:21:14:20:96:b2:71:10:36:b3:
da:6f:b2:37:18:03:62:80:a1:8b:d1:da:a5:05:a9:
cf:f0:cc:9e:d1:4a:49:07:ec:26:c8:70:db:86:53:
76:e8:21:cc:26:54:bf:36:8f:0c:de:25:3f:ee:ca:
ec:d7:e6:1e:c9:8a:c8:3b:e3:0a:76:5e:eb:29:a0:
95:c5:d7:22:d9:a7:44:5b:fd:1a:49:93:fd:7d:8e:
2f:40:9f:f9:1b:75:84:2d:95:73:c1:2d:59:ac:ad:
16:2b:0a:31:46:17:77:ae:97:7e:94:f0:96:ea:69:
3e:2a:bf:ca:2c:93:9f:cf:3a:1e:57:72:9d:b4:9e:
ad:a2:6d:57:c8:5c:ec:dd:a5:1e:de:c0:37:e4:e1:
9d:e4:f9:c2:71:05:7a:b5:5f:c3:3f:6e:3c:27:c3:
05:b0:b3:95:90:ad:28:fe:81:5c:9a:2e:77:0f:95:
55:57:3b:6f:6a:78:a2:2c:75:cb:97:f7:84:2a:02:
c9:fb:2f:1a:b3:04:30:ce:83:b1:a4:41:8c:c7:c0:
ad:69:d9:e4:7d:de:42:54:ea:b2:79:8b:eb:d5:ab:
39:41:8e:0c:d9:56:61:f8:41:f8:8d:37:dc:62:a1:
13:df:79:99:4f:0f:dd:96:bd:0e:3c:9b:6e:c4:56:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:13:B5:DC:A3:1D:27:D3:99:19:25:B4:84:6D:D1:6E:7A:00:E1
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/3b361956-44bc-47e7-9213-cd7854c555f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:2c:ad:32:1b:d1:37:c1:38:15:28:62:de:ff:0a:0a:63:bf:
99:d5:fe:39:54:cd:9b:84:da:9e:a5:47:68:3b:a0:aa:0c:14:
44:52:8f:12:e2:66:d8:06:c5:4e:88:f6:d3:ed:5f:94:df:3e:
20:7a:f0:62:4b:14:7c:af:e7:b2:dd:ed:eb:e5:e4:7b:80:22:
48:41:e6:2d:ba:f4:95:21:52:75:8e:82:38:16:eb:44:62:88:
0a:fa:26:4e:48:a6:39:9e:f6:61:47:ab:51:4a:30:a9:79:16:
85:f1:1f:3a:35:65:7e:5a:4a:97:70:82:86:70:41:1d:64:35:
5f:78:b3:6f:fc:61:a0:04:a6:2e:66:fe:00:28:a7:05:92:a7:
8c:14:97:9f:d9:05:cd:af:ad:6a:3b:27:70:6b:59:15:ff:f4:
cb:05:13:50:d1:d7:a6:30:9d:ab:0e:cc:0d:d1:93:be:9f:43:
6b:24:bb:91:7a:02:08:28:82:78:17:20:a8:0f:e9:0c:b5:51:
97:a9:9c:b2:30:99:29:be:ad:14:a4:0a:38:ae:a7:d6:ba:a4:
c1:eb:03:06:63:50:aa:46:58:6a:b5:c8:66:42:01:4a:61:92:
81:ab:14:aa:19:88:22:31:99:c8:e4:df:4e:c1:1b:b7:66:df:
e2:46:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:03 2025 by rpki-client