Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa
File: 7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa (raw, json)
Hash identifier: m3uLXIFlphc21K3PwUhzpALgZkea3k2X27kXxyjD61w=
Subject key identifier: 9D:E7:62:62:1D:C8:90:F4:0A:EE:17:F4:0C:56:06:D4:27:3F:35:07
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 6ED368F2416E6BB136B13C951132F47E2ED6F5D1
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa
Signing time: Tue 15 Jul 2025 00:20:41 +0000
ROA not before: Tue 15 Jul 2025 00:20:41 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d3:68:f2:41:6e:6b:b1:36:b1:3c:95:11:32:f4:7e:2e:d6:f5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:20:41 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=b042cc3fe09bc6c56e0d0ec8f2b8bfaaae6dcd835ced53e097de1b43b23f0eea, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:96:12:ca:18:4e:9b:3d:4d:81:9d:23:6d:
27:6f:f6:10:c2:3a:c7:17:97:e7:3e:33:6a:8d:d5:
60:6e:c5:8a:0d:15:85:a0:28:30:5b:bc:36:4c:09:
8c:b6:97:6c:36:bb:49:30:88:cb:d0:e7:77:3d:52:
8a:d6:0a:c6:38:2e:12:d0:62:96:b2:ae:ca:35:0e:
0d:3a:1a:9a:0d:c3:77:05:78:75:e6:da:30:25:a3:
03:25:36:63:73:76:e3:b1:71:82:73:ae:19:0a:9b:
28:07:db:00:4f:26:97:9e:68:a1:a9:8d:1a:fd:55:
7e:b2:4e:fd:69:33:30:fb:19:85:d2:6e:2c:10:9d:
07:a7:30:9b:28:64:ed:ef:4f:a0:b5:23:f1:8a:db:
49:60:93:43:65:4f:93:36:8c:cc:98:59:71:c5:24:
0d:a6:2f:5f:40:e9:76:64:25:8c:20:dd:35:1a:16:
23:f5:a0:87:a8:b7:cb:d3:28:df:23:14:96:e0:51:
0d:fb:a7:a1:db:ec:f0:d1:7a:35:cd:c7:bd:ae:7d:
97:14:3a:c7:88:91:14:1c:7e:d0:98:7f:bc:71:f2:
b6:51:8b:c3:3d:06:5f:fe:fa:9c:ac:98:ee:31:fe:
81:80:f0:58:24:ec:71:5b:25:a4:16:08:a6:df:74:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:62:62:1D:C8:90:F4:0A:EE:17:F4:0C:56:06:D4:27:3F:35:07
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b880::/46
Signature Algorithm: sha256WithRSAEncryption
96:8f:17:56:91:c4:66:7b:d3:b3:8e:fd:d3:ed:ce:59:78:c6:
0b:ae:9d:3c:d5:a0:83:7d:b9:98:99:f5:d2:b6:d5:b3:72:4e:
48:1e:f6:c6:27:ed:f9:5f:05:85:31:5f:03:97:24:ce:df:84:
48:7f:56:46:20:6a:a4:1b:6d:5d:80:ce:bd:6f:2d:b2:52:d6:
5d:2e:3e:81:36:a7:6a:7a:9a:c4:21:44:b4:f0:e5:bb:fb:34:
98:09:17:81:88:21:97:a5:b8:49:a9:18:0d:29:fb:1e:59:f4:
55:cc:04:fb:d2:34:24:64:35:db:96:d3:dc:c8:4a:f4:05:29:
83:b3:ab:a7:f2:fc:e0:5c:11:4e:35:32:10:ba:94:b2:95:cc:
be:8e:c1:15:3b:4a:35:58:bb:12:14:6a:7b:ca:2e:c8:e5:d2:
67:b1:29:64:91:75:a0:da:21:bc:1e:6a:8f:38:01:ef:09:44:
10:96:52:d5:4c:17:6f:09:a2:44:a6:92:bd:79:b2:99:e1:0e:
72:d7:ee:55:f4:c6:20:ed:35:cf:19:94:27:1c:25:e8:d2:9b:
d5:94:e6:30:92:2f:09:34:b9:00:3a:30:6d:0a:be:63:0f:e3:
30:59:43:98:d6:75:d1:0c:34:b1:c2:4e:c4:3c:4a:7f:0c:4d:
dd:bd:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:48 2025 by rpki-client