Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa
File: 5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa (raw, json)
Hash identifier: SvaIHY5eC5Tnr4vAs8qk7e0YETuIE2i7aWcCz++UI/8=
Subject key identifier: D6:7E:E6:93:52:B1:E9:A6:FF:60:BF:0C:18:E4:AB:04:C7:28:AF:56
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 5377A9B042CD1FF5033422D58B7966CDC067C3AE
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa
Signing time: Tue 15 Jul 2025 00:20:13 +0000
ROA not before: Tue 15 Jul 2025 00:20:13 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:77:a9:b0:42:cd:1f:f5:03:34:22:d5:8b:79:66:cd:c0:67:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:20:13 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=ae8e7b3667605a9ba7ddaec3186d45e5264bd7d17a35a9be21f2653da2c1d615, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:b8:63:eb:41:6f:12:bf:ea:d7:aa:6b:76:
97:c5:1c:ef:0a:40:bb:66:01:24:a4:1e:c2:86:81:
08:5c:ac:5e:88:3a:d4:8a:a2:ee:98:ee:47:70:6f:
47:c3:f8:d5:d5:ce:10:f2:ed:7c:e2:66:89:be:67:
b4:c0:9f:dc:59:ce:a6:e0:fa:a8:bb:df:5e:40:8d:
39:83:f6:e5:3f:29:08:a0:fb:78:00:90:51:8f:be:
be:52:cb:2b:b8:2b:f8:83:2a:46:fe:7a:fc:51:78:
6c:89:af:4f:6a:0b:06:0c:fa:7c:8b:6b:af:fd:97:
1b:62:04:5e:ce:c3:54:82:e2:3c:b6:1b:fc:b5:9a:
cc:58:a3:f2:c1:70:ad:bc:95:f7:19:56:f1:8b:71:
fb:26:89:2c:ca:df:69:c2:d0:a3:69:18:41:a4:ee:
49:e0:a4:d1:ae:0e:71:8a:73:9e:2d:7d:a4:82:1a:
88:f4:71:c7:ea:6a:b2:70:6f:3d:fb:5a:4a:fa:85:
69:c6:19:7b:f2:a9:d3:46:d4:29:3c:bd:e6:ff:b4:
3f:ce:e9:96:43:8b:3b:60:42:06:a0:0d:61:12:32:
9f:13:8e:dc:f4:05:1d:45:ef:8b:fe:fe:a4:1e:2a:
1d:61:33:83:1d:6d:ba:5c:7e:dd:a2:c9:c9:7e:61:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:E6:93:52:B1:E9:A6:FF:60:BF:0C:18:E4:AB:04:C7:28:AF:56
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8800::/40
Signature Algorithm: sha256WithRSAEncryption
06:de:29:c6:af:59:37:43:97:8f:d7:13:3d:b2:c7:61:32:66:
1b:4d:cd:96:0c:53:a2:12:04:ba:a6:4d:8f:a9:07:b1:91:73:
b6:5f:b6:fc:67:3d:10:bf:f2:74:6d:27:d8:7d:75:d3:d9:3a:
95:cc:c6:9e:84:a0:f7:00:68:8c:0c:fc:fc:ce:1e:6e:53:3d:
a3:09:19:a1:79:bc:2b:b7:78:e2:55:23:61:dd:dd:57:47:ea:
68:65:88:f9:b0:45:d0:7c:76:9e:56:e8:8d:00:84:1d:4f:72:
e3:1d:2b:74:c6:e3:da:16:82:10:47:f0:94:e9:6b:04:a7:52:
fc:9c:17:26:97:21:db:4c:25:43:1f:27:fa:b1:80:1d:79:5a:
f3:c8:e6:b9:bc:e6:74:ba:b3:63:81:32:25:98:61:4f:5c:11:
6c:ce:94:9f:c5:b8:9b:db:55:2e:91:bf:d3:03:1a:73:d1:cb:
5d:4a:ca:c9:34:b0:22:c5:40:ca:6b:22:ed:6e:87:b6:61:e7:
60:1c:2b:90:9e:ea:d1:1d:b3:d3:86:6a:58:52:f5:59:1d:b0:
9c:8f:ac:a3:e4:4e:31:7f:7d:e5:ba:70:7b:e9:dd:cb:b7:5b:
70:72:f0:b4:fb:83:6d:86:b2:dd:44:a5:ba:82:9f:b5:f1:6a:
6e:fa:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:24 2025 by rpki-client