Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/640762f4-b911-441a-995b-675a2c1eb24d.roa
File: 640762f4-b911-441a-995b-675a2c1eb24d.roa (raw, json)
Hash identifier: Xin0E1MWH4LptUreyeEwsBKJjHn+NviNf7giRMJ2DNA=
Subject key identifier: FE:17:97:11:6E:1A:D6:DF:A7:24:B9:8F:44:99:4D:BF:1B:91:57:7A
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 538D18DDDEF67F1B659868EEFB7A8247C044CC41
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/640762f4-b911-441a-995b-675a2c1eb24d.roa
Signing time: Tue 15 Jul 2025 00:21:05 +0000
ROA not before: Tue 15 Jul 2025 00:21:05 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8d:18:dd:de:f6:7f:1b:65:98:68:ee:fb:7a:82:47:c0:44:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:21:05 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=c0cf118e58235496de5f84b310d364255d5dca1f3ac7ffcc2f82c7efb98eabb0, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:98:bb:71:2d:dd:dd:3d:86:e0:c0:81:bd:
f1:2c:b3:6c:d2:8d:1a:af:bf:c5:24:36:55:dd:37:
e9:16:ee:d8:bb:3e:9f:56:52:00:e1:f7:97:3a:1f:
09:8e:56:39:e1:a2:df:87:dd:59:ec:38:91:92:c6:
b5:e7:50:6a:74:0c:d4:76:0b:14:58:c7:66:be:0e:
17:fb:37:35:8f:54:ab:bc:4b:31:76:25:e7:30:b6:
3a:ed:04:b1:e0:9d:0a:72:16:e1:63:d0:00:b6:82:
fa:ee:9f:34:f4:d8:64:92:13:c3:ac:54:2a:1c:c8:
d1:6f:90:f5:af:52:dd:6b:fc:47:9e:d3:ce:c2:4e:
9f:b9:2f:4b:82:18:dd:90:4b:6e:4b:52:e6:ca:7b:
28:47:3f:5f:b5:a3:d0:47:98:18:17:25:a9:06:d5:
d3:eb:6d:0d:fb:6d:da:f1:b3:42:be:85:32:48:94:
f5:25:8f:d3:47:35:fd:d9:aa:e2:9c:de:62:37:08:
60:1a:67:9b:2f:d3:2f:c5:f4:48:3c:25:63:c7:e0:
51:5a:76:dc:d1:3f:bd:77:d9:7d:2c:c4:81:a4:63:
2c:66:f4:c7:95:b4:59:72:bf:f4:be:8d:7b:69:b7:
c0:a7:58:46:c1:1b:9f:d7:8e:92:5d:f1:9f:af:6f:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:97:11:6E:1A:D6:DF:A7:24:B9:8F:44:99:4D:BF:1B:91:57:7A
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/640762f4-b911-441a-995b-675a2c1eb24d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
10:27:21:d4:f8:0d:43:ef:cd:ea:43:8a:e6:8d:98:21:c8:6e:
e8:f4:74:eb:1b:8b:64:47:e3:80:05:82:35:37:22:66:55:8e:
e5:86:51:08:9d:55:fc:08:24:a4:c1:8a:41:a9:97:ce:1e:69:
c5:47:23:d6:db:c3:7a:10:bd:a0:ee:eb:1f:d9:3f:22:d3:e3:
75:e8:2b:cc:5e:2c:f1:e1:9b:cd:00:7c:fa:10:83:0b:4d:95:
13:21:87:9d:1c:e1:68:1b:3d:20:86:fb:77:b9:67:b6:5e:20:
81:27:82:cf:3e:50:c5:93:36:db:f2:98:3b:5c:ac:85:54:74:
0c:f3:37:f1:de:2f:9d:f7:2a:4b:7d:73:f0:4d:1e:63:d0:dc:
7b:78:6b:9d:3b:be:8b:de:7d:76:e4:a8:d0:68:db:e6:22:ea:
7e:71:90:c2:88:de:c3:ab:6c:fd:6b:ac:ba:79:cd:69:b9:a1:
1c:de:1d:67:41:19:2c:b2:77:8f:e1:44:15:e7:fd:96:06:00:
40:9b:50:1f:ea:f0:07:d5:08:3c:e6:f2:07:5f:ec:6c:7c:7e:
15:01:5b:3f:95:17:5d:9d:3c:a8:36:64:45:cf:96:12:a0:ed:
5a:93:df:03:32:2b:55:58:2e:d0:8e:6b:eb:f0:43:d6:96:11:
85:1f:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:44 2025 by rpki-client