Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
File: 73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa (raw, json)
Hash identifier: itrUc1ixqWBXqnm6ThrNT+MeWVYsftBapbgtUGOouMQ=
Subject key identifier: 63:71:11:42:02:00:82:BF:0A:CB:4A:9A:66:C9:CB:50:4B:28:4F:61
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2F98A57AF204C3B03162D3F113003937D77619F1
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
Signing time: Tue 15 Jul 2025 00:21:19 +0000
ROA not before: Tue 15 Jul 2025 00:21:19 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:98:a5:7a:f2:04:c3:b0:31:62:d3:f1:13:00:39:37:d7:76:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:21:19 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=eb3f4470093093024efb2f03dbe1ab0e264c3ba209157978d4b4910dd56167e4, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:d8:32:af:4c:96:ff:fc:fe:1b:d1:ad:73:
93:30:34:44:c1:8b:88:9d:b5:2d:fa:05:b7:09:86:
c4:0f:a6:12:d5:b1:17:17:44:3e:28:b0:a7:94:2b:
66:91:1c:73:f2:d1:ad:65:e5:98:a4:72:c4:7c:94:
cd:61:0d:45:e5:41:8a:8a:fc:7a:39:7c:0f:0e:41:
ee:2d:84:5d:ad:0a:47:27:a6:3e:d9:7c:0d:0f:cb:
e6:06:d1:23:ec:e7:3b:12:07:00:7d:6c:f0:2b:8d:
61:35:b7:e4:91:d7:e1:c2:93:60:ef:4a:07:b8:89:
1e:9e:96:e5:8e:59:01:0a:1e:3b:fc:f4:52:8a:92:
af:33:cf:ca:c8:cf:29:0c:c5:c6:80:6f:ac:1c:eb:
ee:26:2b:56:b8:53:32:ce:df:8d:51:91:77:74:eb:
7d:dd:b7:93:ae:f0:20:7f:5a:c8:5d:fc:f2:55:f9:
f0:90:d8:8e:25:db:f5:84:52:ca:86:cd:57:46:43:
37:bf:84:47:20:fc:99:db:6b:83:cc:39:25:26:bf:
2b:04:57:30:60:89:98:60:e5:32:57:0a:e9:9b:51:
ef:4f:75:2f:af:d5:c0:a6:64:9f:2b:f6:f3:d0:44:
08:72:22:a5:dc:24:1a:b5:49:5f:21:77:f4:c6:ed:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:11:42:02:00:82:BF:0A:CB:4A:9A:66:C9:CB:50:4B:28:4F:61
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b000::/36
Signature Algorithm: sha256WithRSAEncryption
40:2e:bb:0c:e9:17:7b:ae:7c:b0:31:fd:cc:f8:79:cc:60:a7:
af:73:50:2f:fd:3d:69:2a:36:91:61:46:69:d9:55:19:6d:04:
a2:47:d6:70:e5:52:fb:7f:8f:4c:e7:7c:ef:1a:5c:56:b7:cc:
44:02:c7:f9:df:41:43:16:b4:f0:55:6e:69:22:6f:7f:10:49:
8d:6a:50:28:e6:45:86:f4:1d:2c:82:5a:50:69:30:a7:a1:b7:
03:b0:b8:0c:50:12:64:a1:bf:f9:4c:35:cc:d0:25:c5:28:ad:
1f:7b:87:7b:f1:ec:9d:93:e1:c5:df:0e:df:e6:c9:2a:2c:fd:
ec:20:b5:d7:69:ae:78:d6:c7:d8:23:4d:28:4f:e8:de:42:3a:
29:3c:3c:62:83:88:b2:27:aa:46:c4:80:c1:4c:0c:04:6e:ac:
43:ad:be:29:09:f0:5c:b6:83:2b:8e:ea:27:36:11:4b:ad:3f:
97:e8:32:70:75:84:71:cb:45:7f:52:67:57:3b:cb:4c:f1:ca:
a5:a2:67:c4:38:d8:73:01:4c:08:8b:37:ca:ff:22:93:2a:0c:
14:c6:0f:91:b6:04:82:49:58:47:5f:ec:41:43:db:61:94:bb:
76:61:6e:09:47:f6:e2:2a:05:9f:a5:c8:8d:d8:4d:58:73:b2:
06:ad:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:27 2025 by rpki-client