Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa
File: 7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa (raw, json)
Hash identifier: Zz3fj845vmvKM4Op0W1AyBuYGRGGDsZ8lkAU9jOx9w4=
Subject key identifier: 4E:42:0D:54:15:EB:70:72:A6:FC:19:C6:69:72:83:20:BB:B7:F5:7A
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 5748597C1FE6DCAA2685A7C6303A978C422C9E75
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa
Signing time: Sat 05 Apr 2025 00:10:41 +0000
ROA not before: Sat 05 Apr 2025 00:10:41 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:48:59:7c:1f:e6:dc:aa:26:85:a7:c6:30:3a:97:8c:42:2c:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:10:41 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:86:fd:5e:1f:4e:44:b0:9f:79:2d:2a:74:
e0:21:7c:5b:51:31:9a:86:74:09:28:31:0e:2e:0f:
3f:36:2f:42:95:82:1e:4d:79:73:eb:a5:a8:28:cc:
fd:85:27:da:e1:27:24:a6:7e:d2:72:29:fd:e2:b6:
ff:44:a1:57:7f:ad:ea:1a:29:c5:7f:dd:49:99:ee:
64:aa:5f:3c:bd:01:98:cb:31:7f:cd:e1:00:8f:f4:
95:14:45:c3:bf:dd:9c:d3:d3:11:5d:bc:07:53:5f:
74:39:34:8a:93:f0:eb:4d:ee:f9:ec:d6:ac:39:17:
e8:5a:ba:7a:f3:67:61:c4:05:f8:e2:5b:2a:d2:6a:
2d:bd:f6:3e:c5:4f:80:23:ee:5a:05:ee:63:ad:e7:
fe:e9:48:cb:05:39:b8:c8:f4:b0:e4:c4:25:4f:29:
d6:d6:28:f3:01:67:14:38:f7:9a:12:05:31:da:fa:
b6:96:57:9d:60:b1:65:c9:c7:3c:fa:2e:ea:6d:8c:
70:9e:f9:ae:98:56:a6:74:0b:6f:1f:4f:f7:ce:d0:
6e:31:9b:1a:82:8f:ba:f8:72:6a:5e:fb:ae:e9:f4:
42:02:3d:1b:8e:bc:c1:70:3d:e0:70:19:af:81:aa:
7c:56:52:bb:ed:85:3b:d5:4e:02:76:bf:cc:0c:b8:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:0D:54:15:EB:70:72:A6:FC:19:C6:69:72:83:20:BB:B7:F5:7A
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7a702f26-ffbc-4360-bbd5-3f1d03920b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b880::/46
Signature Algorithm: sha256WithRSAEncryption
02:dc:76:7e:b5:49:cc:fb:97:e2:ee:60:8e:dd:44:0d:d0:cc:
04:d7:e6:bd:06:b7:b2:f9:a5:9c:b6:16:08:fe:a9:47:53:f9:
a1:ca:a9:27:02:08:0a:8e:5b:4e:99:7e:98:c1:9d:83:a0:75:
d1:b8:37:4c:a6:60:3b:e8:c8:5a:e6:ef:d5:c0:d4:91:47:28:
34:7d:8d:ac:99:b7:73:d5:af:f5:27:36:2e:f5:16:a4:e5:d8:
bf:4c:f3:62:36:41:42:68:37:dc:22:8b:28:71:03:2b:43:7a:
78:43:58:fe:3e:e2:ba:a9:f3:f2:c8:ad:3b:d3:82:0a:b1:70:
99:83:fe:23:21:c3:07:66:96:c9:ce:b4:43:05:e2:a4:f6:8e:
ce:a5:62:f6:c2:4c:81:5b:c0:9b:96:49:80:b1:2d:11:c7:00:
16:d4:a5:86:1f:7b:45:24:de:09:4e:ec:b7:38:69:86:82:51:
de:8c:e1:72:50:23:a3:69:1c:4a:77:e0:2c:1a:01:f8:d6:a4:
fe:2a:33:52:a1:10:da:54:6f:14:b0:d4:5e:62:8e:9a:26:fb:
d8:81:08:b5:ab:8c:d9:33:94:9d:aa:eb:2f:75:c8:79:fc:74:
c8:1e:5f:fa:e4:36:b9:21:41:94:91:ec:4e:ca:de:ce:67:e9:
26:cd:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:13 2025 by rpki-client