Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
File: ab79adfe-f7aa-409f-9455-78c2f2264124.roa (raw, json)
Hash identifier: bmFEkEpuf+4SBgx+8TyLLBo8UthFCr2VL0gtWkavSIM=
Subject key identifier: 13:F8:79:BC:BA:8D:6B:5E:6E:96:F6:F3:4D:58:50:85:77:FE:AD:B4
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 03D3B9174D90170A9AD1FE6950889BEA5908976F
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
Signing time: Tue 15 Jul 2025 00:20:39 +0000
ROA not before: Tue 15 Jul 2025 00:20:39 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d3:b9:17:4d:90:17:0a:9a:d1:fe:69:50:88:9b:ea:59:08:97:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:20:39 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=67bd404737367bd01c3b60580b540f11e953366c22f2150226f6b66b7a9704d1, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:2f:48:00:c9:11:c2:92:43:7b:e1:f4:44:
5e:fa:36:7a:87:9c:b0:6b:35:20:3c:db:e8:d4:02:
50:60:b3:ea:df:f5:dc:d4:80:b8:4c:ee:d5:26:55:
4d:64:0a:94:13:a2:fb:93:22:ab:a9:4a:65:30:bc:
0a:91:22:20:3e:13:fd:ae:03:a2:a3:1d:70:77:28:
4e:42:36:9e:9e:ae:aa:6d:4d:22:9e:e5:a6:f7:49:
ae:50:d5:84:9d:98:4f:58:f3:ba:9b:4c:de:d3:6d:
49:50:9a:3c:70:9f:45:3b:28:c4:23:80:ac:71:da:
4e:9b:16:3b:17:8e:62:56:e4:c3:25:36:ce:69:a3:
87:d0:f1:a3:27:ab:cc:aa:15:66:5e:20:b5:24:b5:
b2:b9:f0:30:ba:e5:84:60:1e:f5:3c:ca:d0:85:ea:
94:f4:11:66:e8:9e:8f:91:c0:ac:27:0d:84:eb:c7:
ce:e2:8b:f0:1a:e3:ae:3b:89:6d:fb:06:68:91:db:
75:54:23:43:0c:b1:d0:c3:c2:9b:9d:e4:83:37:2a:
09:c9:77:3a:45:83:aa:33:6d:ac:16:7e:e5:5b:1a:
5e:20:92:2c:8d:c9:56:5a:02:de:78:e9:7f:8b:7e:
0d:12:41:ad:ec:b1:cc:37:d9:51:9c:92:d7:f7:83:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:79:BC:BA:8D:6B:5E:6E:96:F6:F3:4D:58:50:85:77:FE:AD:B4
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5880::/46
Signature Algorithm: sha256WithRSAEncryption
5c:c3:78:9a:f4:1f:60:47:1a:be:ee:df:af:15:9b:6b:cb:ff:
d9:9b:3c:a1:33:91:f3:2e:ab:3e:8b:d4:3f:cc:b0:96:55:e6:
c0:3e:a9:cf:23:8e:4e:81:b7:56:b5:fc:d7:08:b2:35:4f:a8:
7e:46:6c:fa:9a:70:5a:3d:6c:9f:78:41:ac:5f:59:42:4f:40:
6d:17:fc:33:aa:f1:0f:2d:fc:bc:fd:01:9b:c6:61:9a:e9:d9:
db:56:29:c3:f1:90:12:7c:e1:02:ea:90:cf:ee:a0:56:cc:8d:
10:d9:8e:1c:0c:4b:29:ce:c4:c2:89:01:15:90:78:96:91:49:
08:e4:0d:c8:29:9b:aa:a9:a4:07:2f:93:7d:4d:8a:d8:bc:a7:
6f:d3:f2:08:8a:95:47:86:37:e1:32:ed:88:ec:fb:11:2d:57:
56:5b:b0:31:16:2c:19:64:77:32:07:83:08:21:9a:4b:a8:26:
d7:2d:92:9f:43:a1:7b:6b:af:fc:9c:ec:f0:5b:99:86:a2:f7:
bf:15:30:52:67:65:9c:2f:03:b3:d8:eb:29:8b:71:cf:e8:5e:
37:2a:35:26:76:4c:d5:25:a4:9e:d8:de:8e:82:2c:14:56:4d:
ad:60:9d:d8:d6:b5:fb:92:a7:84:a8:54:81:4f:88:ca:e6:c9:
8c:f2:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:48:59 2025 by rpki-client