Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa
File: bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa (raw, json)
Hash identifier: 0l4smaNDDctq/cZzx+DEZyfTk7ZTKAxcqJTDp5QxQKk=
Subject key identifier: 87:79:58:C8:0C:9D:25:C7:58:9D:A6:D2:39:85:C8:FE:FD:B7:FF:EA
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2F248D0A95A230DD4C3DF001FEF198A4772A5B2A
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa
Signing time: Sat 05 Apr 2025 00:21:06 +0000
ROA not before: Sat 05 Apr 2025 00:21:06 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:24:8d:0a:95:a2:30:dd:4c:3d:f0:01:fe:f1:98:a4:77:2a:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:06 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:38:29:0d:64:2b:e6:2c:ab:c1:d0:85:bb:
61:13:73:f5:92:86:01:c1:95:ed:c5:dc:b2:9b:1d:
f7:56:50:d9:c5:73:3e:1b:72:80:e3:de:5e:5f:2c:
2a:1b:99:8e:29:bb:40:e7:59:8b:0c:2e:df:68:fc:
ec:66:9b:19:17:b6:d1:75:a6:4f:5e:fe:64:29:a2:
2e:2a:08:a3:51:b7:64:f7:21:2d:7c:51:17:44:67:
44:37:3a:2f:fd:c5:6a:a3:9e:fb:24:ab:29:da:07:
b9:cc:20:a7:28:41:01:05:01:d4:f0:b7:75:44:2a:
0b:aa:16:60:f7:f5:43:ef:31:d6:67:64:f9:0a:c8:
2b:63:62:27:a0:ae:45:c8:b2:ce:c8:bf:f3:02:19:
60:df:90:2a:b6:d2:50:eb:a5:a3:44:72:7d:85:fe:
19:d7:f8:98:31:da:96:74:97:50:d6:3a:b5:96:e1:
41:20:5b:21:83:e9:90:3e:3a:ef:80:74:05:91:71:
ae:13:34:f8:93:48:3a:f5:2b:e6:03:b2:01:de:e3:
09:e1:34:a0:17:36:47:c7:c2:51:40:2a:9e:2a:4a:
a9:22:e9:69:ee:9c:59:de:56:1f:52:3b:1f:06:0b:
6e:51:ce:d3:e7:98:31:1c:9f:3d:95:80:7c:1e:e1:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:58:C8:0C:9D:25:C7:58:9D:A6:D2:39:85:C8:FE:FD:B7:FF:EA
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
3f:ee:22:6e:83:ad:bc:aa:ee:36:78:81:54:ef:54:42:1a:f0:
8f:bd:0d:30:b9:6e:eb:8c:c8:14:76:66:9c:02:65:93:22:71:
ad:97:61:e3:7f:46:dc:e6:d5:ea:a7:0b:fe:12:81:b7:76:f6:
0f:72:ec:d9:bb:1b:b4:64:bf:c7:ca:d0:e6:ba:b1:32:df:0d:
29:4b:ee:06:7f:d6:c5:95:23:94:6f:73:62:50:a7:30:2e:1b:
13:cb:32:d1:2d:c5:b7:e9:da:81:16:c0:4e:c9:bd:c9:0c:38:
ae:71:2e:b9:d4:7b:63:92:e6:c8:0e:bf:9a:74:8f:0c:30:cb:
9f:d8:05:87:f6:52:88:6c:bf:b4:f6:2f:f9:5b:39:06:5e:3b:
8f:ee:d8:40:98:67:86:bd:e1:b1:d1:17:5b:12:b9:47:cb:90:
17:69:77:c3:63:75:be:0d:c4:d7:35:41:f7:41:02:ea:b9:4f:
10:10:69:4d:2f:d6:80:74:28:16:c2:5f:71:f7:49:d9:85:09:
a7:08:34:4a:90:45:74:c2:a4:c7:99:76:79:05:97:ea:96:3f:
24:02:76:68:24:72:c8:df:a4:be:37:f1:34:80:0a:b4:69:ff:
2b:2d:ac:3c:af:91:0c:82:0d:5d:c9:77:f9:b7:4d:0c:65:6f:
45:67:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:02 2025 by rpki-client