Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa
File: 7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa (raw, json)
Hash identifier: 5CH+a7zpqOAOEbiz3uZCUudth6iQ3aRwyf3qtfH4eJ0=
Subject key identifier: 28:35:63:9E:3D:D1:E8:0A:54:DD:5B:D3:0E:2A:BF:D7:5E:05:85:C7
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 19E6E989B9033965EE45C106848F8D38CACCEE9A
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa
Signing time: Tue 15 Jul 2025 00:20:02 +0000
ROA not before: Tue 15 Jul 2025 00:20:02 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e6:e9:89:b9:03:39:65:ee:45:c1:06:84:8f:8d:38:ca:cc:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:20:02 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=14ba943d98fa55d2efd6dd1cf0f5f1683bd5d2ee0ee3cd16e3f783459e1087a0, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:39:7b:44:ae:62:13:e0:bc:c6:f7:90:dc:
ad:af:00:70:53:7e:b4:b6:86:ff:bc:6a:4f:22:e0:
81:9b:e9:50:21:20:2a:49:28:5f:d7:77:d1:67:d8:
23:64:14:69:fe:91:f6:fa:3e:9a:2b:9b:d2:d7:7e:
98:da:ab:af:90:6d:ec:57:a5:22:e9:ca:ac:53:d0:
7c:83:1b:59:2c:2c:07:bf:4b:bb:6c:bb:95:15:07:
d8:08:49:cc:a3:d5:1c:94:6b:df:63:64:e6:ef:67:
ab:4f:66:fe:7a:63:10:15:68:01:2d:8c:b7:55:50:
e4:28:fc:2c:5d:60:72:d9:14:60:76:00:34:da:8c:
d6:ee:ff:7b:9c:00:ce:4b:94:b8:54:f4:c1:0d:ec:
f9:c8:a1:08:07:fd:2f:1a:64:66:cf:70:e2:c6:67:
b5:e4:8b:1c:80:be:af:52:5a:0b:da:eb:85:31:79:
1a:2a:aa:13:e7:32:66:e5:56:05:7a:b9:b4:77:99:
6e:32:e3:7f:23:31:ae:6e:04:1a:c7:3c:f9:4b:31:
b8:dc:85:0e:46:cc:a1:c7:af:79:2c:52:1f:46:08:
19:85:b2:d0:be:ce:5c:f1:65:1e:f4:b4:23:0d:0b:
26:5a:94:ce:2d:30:c3:b2:5e:24:3e:8a:32:30:3d:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:63:9E:3D:D1:E8:0A:54:DD:5B:D3:0E:2A:BF:D7:5E:05:85:C7
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
5f:41:0f:16:d7:f0:66:97:4d:b5:2f:b3:f9:99:e0:23:75:ce:
ac:9a:68:46:3c:18:51:68:4a:da:f4:32:c9:43:55:93:17:84:
c3:0b:e9:cd:cc:ad:90:84:34:3d:8a:94:53:93:b5:9b:4c:35:
50:aa:f0:05:67:f0:fe:97:e9:0b:3c:09:10:f2:8f:cf:91:8d:
01:e2:4d:f4:85:37:3c:77:a9:4a:f1:f0:09:87:4e:5b:69:3e:
e5:17:1d:90:68:86:31:9c:f0:d7:6b:77:90:8b:09:ca:df:5c:
1d:49:bd:b2:77:87:00:06:81:e4:55:91:11:05:70:07:cd:a9:
fc:7d:bd:07:31:b4:cd:11:88:37:92:20:4a:0c:dd:1b:04:7d:
35:9d:2f:a2:79:7c:35:ea:93:61:0f:34:0f:01:23:15:b7:e9:
cd:e0:a5:89:39:9a:4b:c7:c1:12:a0:33:71:ce:99:68:bf:f0:
c8:13:9e:a5:95:43:c1:03:8b:ce:91:c1:19:90:e0:24:22:20:
10:d6:18:fb:c5:12:37:e2:d5:68:b2:f0:d3:1a:47:7d:bc:d0:
98:2f:d3:e1:14:48:7a:e7:5a:f3:2d:7d:00:32:70:51:fd:44:
95:a3:0c:19:5a:ff:3a:0e:55:ac:06:a4:1e:96:f2:8e:f0:84:
5d:50:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:00:42 2025 by rpki-client