Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa
File: 4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa (raw, json)
Hash identifier: VcA5nbZxc9oQnuXzCVdWOu5kK6EM51+TsCCU9LHDzvU=
Subject key identifier: A5:79:58:7D:3A:7B:8F:48:AB:64:BC:B5:B9:BD:3D:79:BF:83:F0:4A
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 66D7335DEB23A7F5FC69A5CF47A482DBE483BE8B
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa
Signing time: Tue 15 Jul 2025 00:30:22 +0000
ROA not before: Tue 15 Jul 2025 00:30:22 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d7:33:5d:eb:23:a7:f5:fc:69:a5:cf:47:a4:82:db:e4:83:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:30:22 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=80ac1f812f6ccdcaeb2523cf708e262b8cd9116c14949d1c73a50c707fa5fc81, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:fd:e0:b1:73:82:b2:a2:0d:23:22:ca:ff:
a0:9d:1d:d7:e5:83:e9:37:2d:01:07:bd:bf:dc:94:
ee:eb:e6:ad:ea:82:e0:b2:e4:09:af:7a:58:66:3c:
19:d6:c6:8c:fd:f8:bb:67:be:2f:b1:f1:b8:4a:62:
bd:a4:77:11:26:f0:d2:ac:29:bf:7e:65:37:50:6f:
45:6b:ae:7b:79:15:6e:50:0c:f8:51:cd:78:33:e5:
58:01:95:35:26:c2:85:32:df:b3:2c:6a:e7:78:19:
b4:bd:76:d0:90:c5:5e:d1:a7:be:47:67:5f:86:45:
34:b1:6d:c1:3b:b0:2c:87:f5:b0:a6:d3:3c:00:b8:
5a:64:7f:d6:b2:23:fe:16:a3:38:69:9d:27:6c:23:
98:48:f3:d0:0f:20:34:17:dc:a7:75:4e:9d:e9:3c:
04:9d:60:f6:08:52:8f:b4:d2:ac:3b:0a:3c:8e:56:
21:10:f5:b2:49:1a:fd:5d:29:ec:ae:07:01:68:b7:
d2:06:26:a1:a5:a9:c6:bf:f0:b0:ea:19:d5:b9:a4:
16:21:22:e5:76:78:2f:e7:58:b6:dd:0d:6d:90:54:
79:e3:ab:d2:fd:65:d8:2d:e4:91:b0:fb:36:48:68:
43:1a:b0:0a:66:97:5e:76:4d:3b:fb:a3:2f:49:13:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:79:58:7D:3A:7B:8F:48:AB:64:BC:B5:B9:BD:3D:79:BF:83:F0:4A
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
aa:c9:bc:14:7d:74:a3:8f:61:2a:7d:d6:7a:fd:1c:22:71:b6:
a9:61:0d:e9:0c:69:a4:77:e5:d7:a6:4b:da:78:e5:15:d7:51:
e8:b1:6e:4f:20:4e:14:cd:7a:c3:47:c2:4b:c1:61:c6:59:b5:
56:98:a1:b7:08:2d:b8:6c:f8:e3:07:aa:2d:42:02:18:6e:92:
42:af:95:fe:34:5e:12:d3:7a:5a:af:d4:06:a2:4d:5e:23:21:
91:ce:35:98:a2:05:4c:00:c8:87:cb:8b:65:c1:c6:46:26:8d:
8a:94:6b:eb:f9:c4:eb:06:88:20:fd:00:50:56:d9:8a:c9:2d:
c1:74:d3:ad:ef:82:dc:87:28:dd:7d:53:1c:01:15:7a:7e:fd:
33:1b:76:75:9f:97:76:9b:32:69:41:06:26:34:4b:b1:11:b7:
9b:af:ad:1b:f3:91:ca:e7:fa:5d:b9:59:2d:9b:23:b0:84:71:
ea:9e:8f:bf:95:2e:54:e7:1a:eb:b4:b4:94:d7:52:db:6a:8d:
74:84:bb:bc:51:bb:9b:23:3b:e7:96:56:41:2a:07:6d:39:65:
27:02:60:8e:93:f3:86:91:03:80:a2:7c:c2:77:77:d0:d6:02:
dc:26:2d:1b:a7:45:fa:77:2e:05:5e:68:0e:d1:1f:54:a1:5e:
b6:92:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:30 2025 by rpki-client