Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa
File: 4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa (raw, json)
Hash identifier: Rv/X4rsCe/M+vrozeof2AVOOTnUKIRuoAhuUVYpk574=
Subject key identifier: BB:7B:87:EB:45:6C:12:9D:26:65:00:02:F7:87:55:2E:64:E3:C0:0B
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 425B4D8053221C4BEB83AA7A88828684E2389426
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa
Signing time: Sat 05 Apr 2025 00:20:40 +0000
ROA not before: Sat 05 Apr 2025 00:20:40 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5b:4d:80:53:22:1c:4b:eb:83:aa:7a:88:82:86:84:e2:38:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:20:40 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d1:8d:a5:29:6e:33:bd:33:fa:ea:97:68:39:
01:0c:d1:82:f2:1f:52:b5:40:62:55:aa:2c:aa:ef:
13:5f:ad:50:2a:27:1c:05:d4:61:3c:0b:3e:3c:7b:
52:b9:11:4e:3a:87:cd:13:d7:ae:48:35:0b:b6:4f:
86:12:2d:23:b1:40:a0:d8:58:9c:f0:88:3a:ff:a0:
21:8b:da:5b:4f:f7:01:7d:28:68:b5:1c:b2:f4:5e:
9c:50:d7:b7:00:47:c0:a2:98:93:ab:f5:07:5b:c1:
3f:0b:93:79:ed:f2:df:61:03:0a:40:f1:cf:3d:86:
57:0c:e7:8d:d7:1b:32:9e:62:3e:89:ff:86:59:a2:
4a:80:4f:41:c2:6d:4d:a4:7f:0c:e0:34:f1:83:88:
46:b5:13:e6:8d:e8:df:8a:f0:91:fe:46:67:7c:97:
aa:4c:8b:42:fd:3b:d9:3a:b3:bf:91:66:f6:14:3d:
f8:64:97:9c:42:3f:e2:ec:22:d8:19:05:01:3d:4c:
e3:0c:14:4e:e9:ad:4b:b2:10:d3:46:57:16:1c:bd:
e8:dc:a4:85:14:04:36:a6:79:8b:5e:30:6b:76:c0:
c6:f3:89:ca:d3:d0:0c:8a:3b:ce:d0:10:7f:6a:52:
35:fb:3e:b3:ec:5b:93:a7:b0:66:b1:32:85:59:b4:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7B:87:EB:45:6C:12:9D:26:65:00:02:F7:87:55:2E:64:E3:C0:0B
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/4318c3f0-c6a7-430c-bfad-645d9ad814d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
49:a3:83:41:1d:31:e7:f0:a2:d7:cb:9d:d1:9b:9f:f0:d3:9b:
d4:13:d8:d8:fa:00:e6:0b:e2:80:3f:3b:9f:9c:4d:51:24:43:
ba:fa:17:20:4c:aa:af:cb:b0:95:f8:8b:32:1e:8b:b9:8f:f8:
74:09:08:d9:9a:d0:c2:d3:b0:6e:a2:79:55:ba:94:68:59:9e:
81:5c:7d:81:85:f2:db:78:d1:40:7c:5a:c4:5e:b2:7b:0b:0f:
49:6b:d6:ad:44:f8:69:02:1c:b2:db:18:67:57:a8:f9:e0:50:
fe:8b:15:37:ef:8f:d1:b7:a1:cc:f5:2b:7e:f4:ac:25:ca:f8:
09:d2:bc:aa:74:1f:37:ea:16:a6:ff:a6:cf:a6:bd:08:1f:32:
de:7c:fc:af:27:58:b0:2e:7d:d2:3d:83:a7:1c:25:6e:43:7c:
3d:9e:3d:85:99:7a:9e:00:56:14:27:58:94:0b:5f:3a:cf:72:
e0:f3:e6:04:7a:47:54:d6:bf:df:b8:2c:52:2c:d4:57:c7:2c:
ff:8b:58:b8:c0:fb:66:74:60:e1:30:92:05:9f:c7:d0:18:b5:
55:79:87:74:21:55:4c:c8:73:1f:dd:38:88:7d:03:f0:5a:c8:
f0:03:e0:e5:8b:f6:b8:87:a6:7f:11:a2:e2:9f:82:10:be:b3:
99:43:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:48:51 2025 by rpki-client