Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
File: 40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa (raw, json)
Hash identifier: PkVfjOv+8Z+r5pQ9koXeC48FAEBCWQhRhuD56UyDnMY=
Subject key identifier: 6D:54:D7:54:80:51:76:67:CB:6C:42:88:20:9D:82:F4:DB:9D:DD:DC
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 20EF0134759918DC09E7257EBC3AFE36E88819A8
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
Signing time: Tue 15 Jul 2025 00:20:44 +0000
ROA not before: Tue 15 Jul 2025 00:20:44 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ef:01:34:75:99:18:dc:09:e7:25:7e:bc:3a:fe:36:e8:88:19:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:20:44 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=20c1e4422652b64781669715f9e4e599113c396685664430cf3c2ae6f0e46b4e, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:02:8f:9c:f3:c7:a5:9d:f5:17:50:80:d3:
34:4d:b4:8c:c6:d8:95:f8:6d:fc:6f:a4:22:ee:51:
96:f7:70:60:f1:7c:37:ca:52:37:7d:ea:35:dc:ca:
84:b6:32:df:cb:cb:97:da:28:ae:6f:a7:2c:fe:72:
9a:09:0d:1c:6b:a0:4e:df:99:a8:11:f0:aa:f2:c9:
5b:a2:01:6d:4c:8d:4a:1c:8a:a7:0c:f4:bf:48:f6:
fe:a8:ee:28:6c:29:b8:c2:55:37:27:b8:c3:62:c6:
f2:78:f8:c4:40:83:e5:90:13:ba:5c:2f:a3:22:bd:
70:84:79:5c:08:af:e2:59:24:5a:c2:b2:5d:80:b8:
70:0c:23:1a:6e:07:5f:cd:86:e9:e7:13:80:f3:3f:
72:1f:21:35:18:be:3a:02:88:cd:a3:b1:56:33:b0:
0c:e5:5b:fe:b4:14:88:5f:cd:51:e3:1a:20:be:23:
93:07:a7:7c:ca:c2:ad:ef:17:c9:13:3a:98:46:05:
8f:b5:a0:ac:df:a5:ba:3c:6f:d2:d0:71:e5:63:4c:
59:65:7d:91:6c:5b:c1:4d:eb:31:1e:84:98:6f:09:
eb:8f:3f:6c:91:95:59:11:b8:4c:cb:73:fa:f0:e6:
e6:4e:77:49:43:08:13:e8:d2:69:96:22:14:24:2d:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:D7:54:80:51:76:67:CB:6C:42:88:20:9D:82:F4:DB:9D:DD:DC
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
28:d6:eb:66:b7:d0:9b:d6:05:a4:4c:71:a6:39:81:ad:86:08:
fb:27:6b:8b:6e:42:39:5e:0e:18:fe:be:23:20:e6:be:e6:b0:
bc:31:6f:de:a2:29:1c:3b:55:a3:e8:50:cd:27:e9:33:7b:db:
7e:f4:3e:9e:8c:58:d7:a2:38:79:39:24:02:15:c8:af:ff:81:
40:1a:27:a1:03:a6:58:6c:1d:31:9f:f7:40:5c:e8:c7:f8:b8:
ee:a3:bc:f9:c6:9d:56:d7:cb:7f:3c:b1:2b:6d:72:d6:d1:af:
68:ee:59:d9:df:7e:4d:1e:04:3c:c6:f1:ac:0f:38:51:f5:c1:
77:36:0f:4d:1b:8b:4a:cd:f4:dc:29:d3:0c:cc:e2:71:a3:8b:
a1:a7:db:bb:17:35:1c:c6:d6:19:75:4d:9a:9a:7c:a7:e0:8c:
68:74:90:82:e3:e6:99:82:c2:97:47:ff:8b:49:41:1f:a2:2d:
5b:79:2f:79:74:ee:10:a5:2a:eb:d7:c0:c8:83:18:d5:3f:d0:
d5:97:9e:9f:3e:81:94:61:2c:3b:16:ac:be:ec:3f:d8:47:4f:
65:ab:9e:5e:ba:a4:3f:88:dc:21:14:45:c0:10:e4:ae:59:bd:
99:8a:5b:83:f4:a4:42:f7:29:21:f7:fd:f3:9c:73:a3:94:38:
23:d0:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:24 2025 by rpki-client