Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa
File: bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa (raw, json)
Hash identifier: UZe89ffv6GUiKgpDQAyBQqr0GRMwmDwtjtbilUdhM8g=
Subject key identifier: D2:80:B6:6A:EF:DB:FC:39:35:23:94:C1:9B:77:F7:71:31:D5:AE:A4
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 70237371F03A891A2AFE0048CDA7B05D75DA19C9
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa
Signing time: Tue 15 Jul 2025 00:20:08 +0000
ROA not before: Tue 15 Jul 2025 00:20:08 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:23:73:71:f0:3a:89:1a:2a:fe:00:48:cd:a7:b0:5d:75:da:19:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:20:08 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=59d17468417d73896af26ff390b0ed2507017c33f3aab03cc5e0e7848bf85ef7, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:e2:32:34:83:7a:a5:a7:50:66:51:ad:d5:
c3:38:2f:8b:2b:af:b4:f5:8c:38:e1:0c:83:8b:1f:
51:aa:40:6c:ec:f0:3f:fd:00:d8:72:5d:d1:69:51:
51:3d:9c:6a:d7:ac:3e:a0:cb:9a:a2:5f:f4:bb:fc:
3a:5d:2c:6a:47:ac:5e:18:af:bc:38:78:89:32:20:
ed:67:f5:3f:b3:a3:a0:f9:12:ba:19:79:16:8b:58:
a9:c7:53:e4:f5:53:ef:7d:c7:93:39:c2:2c:b4:9a:
f9:af:2b:2f:a9:40:ce:c1:3c:fb:9c:9e:ad:de:78:
63:f8:dc:d9:b4:6a:35:36:30:f5:b5:5d:5e:50:69:
ac:30:78:ce:71:f5:88:79:84:f2:06:29:90:b1:ae:
8a:f6:fc:3c:97:12:35:7c:e3:f8:09:3b:bb:ba:25:
f0:ec:b4:43:57:b4:b3:b1:fb:76:0c:cf:dd:f4:12:
09:d9:b2:02:c1:64:73:51:92:8f:95:62:7d:f3:c5:
3f:88:6d:4f:00:26:11:a6:e5:11:35:87:eb:62:77:
1f:89:8a:58:c5:40:da:55:9c:3f:c9:b3:41:3a:49:
fe:19:ed:b7:14:88:0d:e8:a2:42:2d:5d:90:50:9a:
b4:0f:cd:08:00:41:a7:a5:51:52:36:79:51:11:26:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:B6:6A:EF:DB:FC:39:35:23:94:C1:9B:77:F7:71:31:D5:AE:A4
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb6731f4-6cec-4564-8c6d-9e46397fac5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
13:a0:9b:cd:00:68:b7:56:a2:29:7a:fe:66:50:c3:e6:7e:6b:
a8:ff:23:cc:c0:3e:d8:98:c8:30:91:84:d4:30:41:c0:97:0c:
20:3f:85:38:4a:e8:73:98:d8:3b:c5:68:27:c7:e7:08:b5:e4:
b0:6b:dc:d9:7e:b5:a5:be:2d:ef:2b:1a:96:bd:ce:a6:d5:17:
a8:e3:6e:fc:ad:39:31:e8:8d:51:da:ec:89:84:08:5e:59:3f:
39:ca:8d:86:5d:bb:8a:e3:0a:d5:d6:aa:cd:3c:13:88:c3:ee:
ad:1d:bc:7b:09:c1:58:22:89:68:87:c9:8f:98:63:ce:a5:7a:
26:c4:b7:b3:23:d5:62:37:ec:e7:b1:ac:e0:81:49:df:1a:6d:
fa:77:ec:69:e0:11:2b:dd:7c:2d:53:27:71:f3:a5:ab:84:73:
b9:18:6b:80:90:3c:10:4c:f9:cd:ef:9d:7d:7e:ba:25:25:77:
61:9f:e1:22:62:23:db:f1:cc:65:ea:f6:fd:f5:84:8f:ae:9d:
4d:46:b4:48:70:b6:d0:8c:e4:bb:ae:45:f3:e0:4c:cb:4b:d6:
b0:87:ea:1c:be:d4:b6:c8:df:33:d4:9c:80:62:b7:81:8f:9d:
3e:52:32:f4:f4:25:f8:d7:96:13:47:61:01:cc:d2:20:df:cd:
ea:89:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:44 2025 by rpki-client