Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/640762f4-b911-441a-995b-675a2c1eb24d.roa
File: 640762f4-b911-441a-995b-675a2c1eb24d.roa (raw, json)
Hash identifier: jMr0okQ+s+82eIQas0/yRfMru8vULU6Psh+XY1LSAEU=
Subject key identifier: 79:52:6B:90:5A:D2:20:EA:2E:44:36:91:62:5A:B4:C7:D3:34:F2:24
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2582632CE7232436C72C9CE022425B66FEAD8F3C
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/640762f4-b911-441a-995b-675a2c1eb24d.roa
Signing time: Sat 05 Apr 2025 00:11:03 +0000
ROA not before: Sat 05 Apr 2025 00:11:03 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:82:63:2c:e7:23:24:36:c7:2c:9c:e0:22:42:5b:66:fe:ad:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:11:03 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:da:59:36:00:55:70:81:d2:6f:44:a4:af:
75:d6:83:4f:0a:5f:0f:b7:a4:c3:68:7e:58:f5:de:
7b:bd:04:f7:4b:91:4a:cf:ff:d3:30:35:e5:a3:b8:
cd:d4:ec:31:f7:45:4b:1c:61:fd:3d:49:03:4f:db:
40:f7:fc:01:06:91:41:d9:8e:b2:56:ae:97:65:6f:
e6:2b:de:a9:65:80:8c:1a:2c:bb:cd:f2:32:32:88:
57:54:f3:13:19:cf:6a:42:76:10:45:29:c8:20:b2:
55:cc:3c:60:b5:f5:28:c6:7f:71:cd:33:e3:64:df:
2d:5e:50:55:aa:6a:ec:80:4a:c6:4e:01:b2:e4:6d:
d6:b8:11:3a:38:ed:b9:62:08:b2:7a:85:62:2c:ee:
a0:bf:bb:cc:7a:bb:4e:96:43:7b:5b:fa:95:ad:7c:
69:30:70:3e:3a:b7:ff:3c:5c:ca:11:7b:fb:6b:0c:
1b:4d:7a:ab:a8:d2:e1:e4:33:ab:03:93:37:c5:aa:
8e:df:ae:04:b6:f2:87:4b:bc:a5:1c:dd:d3:f0:bb:
b1:2e:f2:e7:75:c6:36:cb:15:53:71:10:d1:61:1f:
12:03:25:9f:b2:a9:5a:f8:49:e8:33:b4:99:77:7f:
81:8f:15:06:ad:45:9a:e5:ad:0c:2a:71:33:7e:2d:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:6B:90:5A:D2:20:EA:2E:44:36:91:62:5A:B4:C7:D3:34:F2:24
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/640762f4-b911-441a-995b-675a2c1eb24d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
94:cd:ab:ba:1b:b9:56:6c:2b:3b:65:c0:f8:37:71:52:9c:e4:
13:7b:b6:2e:44:47:f3:53:4b:3f:3c:11:e8:91:6d:8c:32:43:
e0:80:5a:7c:72:98:7d:97:ba:f7:e7:4b:5f:fe:7d:0b:b1:6b:
09:f2:1b:3b:44:d8:fd:9c:6f:38:a8:3a:05:76:da:f6:e6:c6:
67:42:f9:b1:6a:f9:6f:84:ab:89:6a:16:cf:47:58:c3:66:73:
c5:36:31:66:e8:81:0d:23:02:2e:fa:d7:ec:bc:4a:da:59:7d:
7f:25:c2:22:5c:a3:40:36:1e:78:d5:2d:63:0a:02:dc:95:ff:
40:ba:90:a4:02:c5:d8:fb:a1:0c:e9:5e:1d:48:b1:f0:de:e2:
f9:92:01:80:c1:f9:ee:f9:2c:34:43:7a:53:fd:c8:67:f6:f0:
fb:e7:53:51:e7:ab:a7:db:52:bd:6c:d9:e7:0e:32:ce:35:83:
9b:00:af:04:f0:9e:31:93:55:d7:7c:f6:fb:7c:3c:22:9b:85:
4e:76:07:17:e0:cb:dc:ca:c1:b7:79:fb:26:21:c4:93:08:32:
5d:8c:20:65:02:a5:11:94:70:56:9f:fd:15:f3:a3:b1:47:b0:
5a:34:03:9e:0d:b2:e2:68:92:ba:61:9d:4a:3c:64:d4:fd:a8:
f8:71:d7:25
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJYJjLOcjJDbHLJzgIkJbZv6tjzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA0MDUwMDExMDNaFw0yNTA1MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDY1ZDNkNzc4NGJlNTlkN2FhYzdhNjlhNjk3MzYxYzQwNTUwODhiNDA4NWM1
ODc3MGJmN2RiM2IxMDQ0MjAwZTExLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALK02lk2AFVwgdJvRKSvddaDTwpfD7ekw2h+WPXee70E90uRSs//0zA15aO4
zdTsMfdFSxxh/T1JA0/bQPf8AQaRQdmOslaul2Vv5iveqWWAjBosu83yMjKIV1Tz
ExnPakJ2EEUpyCCyVcw8YLX1KMZ/cc0z42TfLV5QVapq7IBKxk4BsuRt1rgROjjt
uWIIsnqFYizuoL+7zHq7TpZDe1v6la18aTBwPjq3/zxcyhF7+2sMG016q6jS4eQz
qwOTN8Wqjt+uBLbyh0u8pRzd0/C7sS7y53XGNssVU3EQ0WEfEgMln7KpWvhJ6DO0
mXd/gY8VBq1FmuWtDCpxM34trQ0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR5UmuQ
WtIg6i5ENpFiWrTH0zTyJDAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
NjQwNzYyZjQtYjkxMS00NDFhLTk5NWItNjc1YTJjMWViMjRkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8cg
MA0GCSqGSIb3DQEBCwUAA4IBAQCUzau6G7lWbCs7ZcD4N3FSnOQTe7YuREfzU0s/
PBHokW2MMkPggFp8cph9l7r350tf/n0LsWsJ8hs7RNj9nG84qDoFdtr25sZnQvmx
avlvhKuJahbPR1jDZnPFNjFm6IENIwIu+tfsvEraWX1/JcIiXKNANh541S1jCgLc
lf9AupCkAsXY+6EM6V4dSLHw3uL5kgGAwfnu+Sw0Q3pT/chn9vD751NR56un21K9
bNnnDjLONYObAK8E8J4xk1XXfPb7fDwim4VOdgcX4MvcysG3efsmIcSTCDJdjCBl
AqURlHBWn/0V86OxR7BaNAOeDbLiaJK6YZ1KPGTU/aj4cdcl
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:47 2025 by rpki-client