Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa
File: 5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa (raw, json)
Hash identifier: jlXq0dBNt9A0btU1alTAyIXP51K/6I3pKUJkT4Wi6ug=
Subject key identifier: E9:50:E1:B1:59:29:9B:03:42:AE:45:25:39:22:CB:74:D5:5F:D2:63
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 49E93F36DFBFBF944F366C546533162EEE2ACB9E
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa
Signing time: Sat 05 Apr 2025 00:21:09 +0000
ROA not before: Sat 05 Apr 2025 00:21:09 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e9:3f:36:df:bf:bf:94:4f:36:6c:54:65:33:16:2e:ee:2a:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:09 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:69:1c:9c:b9:dc:40:19:69:de:4b:69:9d:
97:7e:35:a3:ff:fd:96:c5:47:30:df:f9:0b:05:37:
d0:e7:5b:b6:c3:bc:26:50:dc:8f:86:22:43:d3:91:
a9:92:42:54:ad:75:bf:11:74:f1:db:8d:85:55:4d:
df:42:15:cc:58:26:ce:3d:96:75:68:aa:45:14:36:
55:0b:45:89:6f:2a:ef:47:f8:a3:18:d9:0a:9d:49:
c6:50:11:3d:a2:6d:0f:10:56:11:fe:2f:1b:fd:77:
43:13:f7:3b:4f:0e:20:fb:47:b2:fa:ef:81:01:f4:
b1:ad:56:09:a4:a6:4c:ff:43:74:33:a1:ba:30:30:
1f:5e:05:af:d1:9c:09:3e:44:5d:85:6c:30:a2:83:
54:e2:ba:2d:42:04:64:2e:dd:b9:aa:cf:45:e6:aa:
77:a7:ad:7a:5b:b2:20:df:95:48:15:37:af:cd:86:
3b:fe:6c:ee:22:23:ed:61:3c:98:23:ea:aa:d9:7e:
52:0c:3b:94:8e:c5:bb:a1:22:81:71:b9:49:7b:6e:
2a:0c:4d:24:69:eb:fb:63:f6:b8:31:0e:82:94:72:
e6:11:ee:3e:d1:28:ba:ea:3c:9f:ec:9f:f7:22:4f:
40:21:0a:27:05:86:4f:9b:3c:bb:e0:35:4e:0e:80:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:50:E1:B1:59:29:9B:03:42:AE:45:25:39:22:CB:74:D5:5F:D2:63
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5a3e112d-c8b5-4a42-9b7a-a5c567b6db32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8800::/40
Signature Algorithm: sha256WithRSAEncryption
1f:a5:3a:32:d4:2f:a5:67:f9:eb:41:ff:af:2f:71:78:58:51:
62:e1:0f:e4:8e:3c:0d:e2:ac:ca:2c:53:77:f4:11:a8:0e:34:
64:d9:a9:96:a0:81:69:47:45:79:6b:75:d4:73:98:5e:1d:b2:
2c:c2:40:6a:b1:f6:18:ac:f2:3c:ed:a0:86:29:0b:e3:42:d8:
c3:e7:22:f8:0e:60:2c:1b:60:72:5f:28:43:c8:78:41:77:f3:
eb:4b:12:ee:2b:d1:f3:4c:2b:66:e0:47:4f:33:04:e5:bb:54:
bd:a2:ef:fe:69:4e:88:c8:37:fb:f7:00:e9:0d:fb:46:c1:61:
50:65:84:a6:cc:aa:ec:32:38:a3:29:bb:60:56:3a:50:c5:26:
f5:e6:df:51:41:af:20:ab:d1:64:86:b9:a2:00:55:06:be:63:
f7:40:07:6d:d5:0a:df:3c:b5:0c:b3:a9:e9:20:15:f3:47:09:
e7:9b:dd:ab:77:31:46:c9:56:7a:c3:c4:1d:7a:be:42:a7:a5:
b6:f4:fb:c9:5b:83:a2:d3:d7:cb:fc:63:bc:0a:30:91:bb:60:
12:ad:03:ee:1e:74:5f:e7:7e:89:d3:37:7d:45:15:37:92:37:
2f:c7:49:25:b4:8b:3d:f5:a3:b4:02:24:46:5f:28:47:44:bb:
73:59:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:19 2025 by rpki-client