Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
File: 8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa (raw, json)
Hash identifier: sBUZpm8USmgxF/vYXJNN+lOaLWiRdNv45WK70mYX7To=
Subject key identifier: 6A:83:13:FF:B6:29:3C:2B:BF:34:FD:FF:94:38:9A:BC:9E:81:FA:4B
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 046D9D382A0E2C4A4BC26BA855043B474DA44DF4
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
Signing time: Tue 15 Jul 2025 00:21:15 +0000
ROA not before: Tue 15 Jul 2025 00:21:15 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6d:9d:38:2a:0e:2c:4a:4b:c2:6b:a8:55:04:3b:47:4d:a4:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:21:15 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=a3988b29fdc18188490b6285ab73036e77ba1b3316e200aee5452673ff2ef3bb, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:d9:4a:bd:f5:66:4a:df:e9:c5:a9:30:5b:
ab:9d:00:9c:8d:35:69:28:fe:d3:c8:aa:cb:7e:2f:
bb:8e:f4:68:79:53:8a:34:d4:e4:42:af:a3:5f:bf:
b9:c4:96:0c:5b:c2:19:67:10:e6:57:4d:39:f3:b4:
a6:c9:ce:53:1f:c1:a1:87:3b:1c:d7:7b:f9:70:73:
91:79:a5:13:3d:9b:b5:06:fe:74:be:eb:36:e6:03:
ac:ec:ea:c1:5c:b7:07:4a:5b:73:bd:36:cc:c4:9b:
6a:16:41:1d:26:a4:05:c8:f3:49:bc:93:74:42:7a:
45:a1:ea:2f:46:13:24:de:f8:4b:3b:34:48:05:b6:
99:66:ac:9c:c6:f2:57:1f:eb:27:df:19:9f:89:25:
0b:62:40:6d:62:67:19:e8:a3:d7:45:28:bc:ea:40:
7f:18:f4:cc:8e:2d:14:e0:0a:94:a5:78:2c:ee:a1:
ab:dd:91:4b:35:ad:2c:94:40:ef:d9:b0:0a:2e:46:
41:1b:59:48:ad:1f:00:ce:5a:ff:f6:c9:c6:4e:77:
46:aa:93:14:e5:31:00:0d:14:87:bd:fe:e0:60:d6:
f1:ca:21:b9:73:ef:61:7b:f5:3d:ac:22:2c:a9:fb:
09:b7:4c:d3:85:b9:e3:93:12:e2:22:4b:4a:b2:18:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:83:13:FF:B6:29:3C:2B:BF:34:FD:FF:94:38:9A:BC:9E:81:FA:4B
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2840::/48
Signature Algorithm: sha256WithRSAEncryption
47:e2:10:05:b1:c1:67:2b:fe:24:53:d3:67:6f:3c:19:a6:9e:
dc:c3:1c:85:36:1c:47:26:6f:5b:fd:91:05:f1:83:78:5e:13:
48:30:6b:de:66:39:3d:a2:fd:ef:38:94:7c:35:8a:d7:23:b4:
e8:7b:46:f8:1f:dd:21:25:65:c3:c4:31:cb:de:22:7c:a5:c9:
b4:3c:29:ec:13:db:85:f4:0f:4e:02:f0:cc:0f:dd:4e:64:90:
1b:49:47:a0:3d:5f:03:f3:68:23:a1:d6:07:31:ae:7b:07:70:
2f:98:66:87:40:53:41:10:88:dc:48:cf:91:1a:d8:e6:db:99:
5e:ff:71:2d:c2:7e:82:5b:b4:46:7b:92:10:e1:a5:28:ac:76:
55:a1:28:09:22:36:45:65:f2:db:04:fb:0b:dc:4f:84:30:02:
71:21:ee:4d:87:6d:0f:78:cc:51:c3:58:46:d7:c6:49:0c:cf:
95:8f:d5:81:9b:c8:37:a2:66:bd:d3:b8:38:b5:3b:ac:10:30:
fb:5a:18:46:c2:9a:97:aa:30:c3:40:1a:6f:e9:a2:3c:a9:67:
e4:70:ad:25:07:55:07:41:6c:4a:94:d9:74:1d:99:06:3d:6b:
14:21:ec:d4:22:04:ef:5b:4b:67:e5:12:11:a2:b0:2d:ba:85:
b2:69:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:07 2025 by rpki-client