Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa
File: bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa (raw, json)
Hash identifier: oafzXNtQMLSFvaNXtLaOVvxrk7xKF8oPm6ZGzrz8dAs=
Subject key identifier: 4A:22:0E:E8:D2:B6:F1:66:26:E8:91:2D:F7:AB:77:D7:C7:03:53:7B
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 771395E1D50E15055FA57DA04B3B44430F23C122
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa
Signing time: Tue 15 Jul 2025 00:21:13 +0000
ROA not before: Tue 15 Jul 2025 00:21:13 +0000
ROA not after: Tue 19 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:13:95:e1:d5:0e:15:05:5f:a5:7d:a0:4b:3b:44:43:0f:23:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 15 00:21:13 2025 GMT
Not After : Aug 19 23:59:59 2025 GMT
Subject: serialNumber=a87833e6f960efc0549c5718934493b0f40a8cd802adcba7101d46928debd211, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:38:1f:4c:c1:89:32:84:8e:58:2e:5e:e2:
ba:ad:a0:4b:0a:93:45:b1:48:c5:fc:41:a2:2e:ec:
fa:7e:41:e2:30:52:58:2e:7b:1c:b7:0e:56:9e:6e:
de:00:b7:b6:20:0d:d4:ab:12:41:bb:88:ef:39:3d:
e1:bb:f6:b7:1c:02:7f:22:26:27:2f:2c:b4:cd:a2:
a3:43:ae:62:6d:09:1b:97:01:18:32:8a:dd:98:e7:
59:38:bf:44:50:d7:d2:f9:ce:f2:cb:4c:f4:08:80:
67:bc:a2:c1:e1:75:a9:52:91:ae:b0:80:72:16:65:
e7:c8:e1:35:f6:12:60:e6:78:63:af:48:1a:55:47:
24:9a:33:c3:11:b0:4a:4f:bc:2c:f1:95:f9:e2:03:
d3:8f:94:03:71:a7:23:39:88:93:b7:d7:56:18:6f:
c6:96:e5:6d:00:a7:99:a3:3a:43:5b:4f:67:f6:38:
06:1d:aa:09:cb:89:9a:24:f5:06:19:92:88:68:96:
a5:07:39:44:8b:35:29:94:36:a1:3f:b4:c1:e3:bb:
65:f9:60:65:15:9e:8a:50:da:3a:86:4a:4e:b3:dc:
ef:be:c6:70:a3:6c:64:d3:af:4b:28:df:88:de:b7:
26:9e:9c:60:42:fa:18:4a:2b:14:58:4c:e8:34:2c:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:0E:E8:D2:B6:F1:66:26:E8:91:2D:F7:AB:77:D7:C7:03:53:7B
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f880::/48
Signature Algorithm: sha256WithRSAEncryption
40:77:71:06:84:9c:a7:35:ed:51:e7:d4:5a:4b:ed:be:ac:dc:
55:b4:dd:6e:93:a7:64:12:7e:42:bc:8c:67:98:42:46:3c:e4:
ec:a0:92:9f:37:c0:4b:1f:21:73:ca:37:cb:cf:40:79:9c:b5:
5c:35:80:4c:93:9d:f0:27:26:fc:0b:53:7f:e0:34:7e:c9:ec:
d8:27:b7:02:84:5f:ac:77:8f:e3:43:ce:50:33:47:88:48:0b:
f2:a5:29:a3:65:f4:33:a0:8f:b0:77:54:5e:c1:4a:6c:9e:fa:
be:6f:2c:66:d7:6d:df:c0:13:97:68:d7:99:63:4e:d7:97:02:
fa:23:95:ab:86:41:32:a8:34:e0:48:e1:21:69:19:c4:19:43:
52:26:01:d9:48:b0:56:64:c3:99:fd:92:14:50:52:49:cb:7d:
4a:86:d9:8a:53:3d:8c:52:87:ba:4c:4f:d3:b7:73:8e:44:8d:
20:99:ec:a4:31:ea:36:de:b4:ce:c4:4d:fe:51:d3:f3:a5:4f:
a2:18:27:ff:44:da:16:00:97:9e:e0:a5:e0:c2:12:7f:50:52:
a5:93:e1:ff:35:2e:99:f4:d6:e3:1c:bf:53:9a:f9:dc:d8:ac:
ad:36:93:cd:a3:81:e3:89:ab:ae:80:fa:bc:92:c7:27:2d:31:
24:fd:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:05 2025 by rpki-client