Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c2e3ffab-b8ab-476f-9c6e-5e4842d705f6.roa
File: c2e3ffab-b8ab-476f-9c6e-5e4842d705f6.roa (raw, json)
Hash identifier: 8KvweALq7qalOoyESW4vXwHFvXtFr8yEMiPKeKcBh5E=
Subject key identifier: E7:67:9B:FE:3B:61:4A:96:79:B7:13:49:F0:50:70:53:8E:D6:00:A8
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 0ED76C3865FA3952AC939044EC22B4AF5764B6B9
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c2e3ffab-b8ab-476f-9c6e-5e4842d705f6.roa
Signing time: Sat 05 Apr 2025 00:21:11 +0000
ROA not before: Sat 05 Apr 2025 00:21:11 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d7:6c:38:65:fa:39:52:ac:93:90:44:ec:22:b4:af:57:64:b6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:11 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:74:81:7d:70:00:ae:cc:09:c9:04:9d:3b:
97:7f:09:4a:ab:dd:ad:61:5e:a7:10:bb:d8:22:96:
99:63:5c:67:8e:15:4b:40:cd:36:3d:87:ed:ec:39:
e1:28:7b:4a:31:25:41:ce:48:d4:7c:92:9f:98:87:
17:7f:79:79:4d:f1:84:c4:f8:6b:51:38:bd:25:e1:
60:9e:a4:64:b5:f6:b9:f5:14:0d:97:dd:d1:c0:38:
16:73:3f:ff:60:73:b6:77:d9:54:f6:45:d8:e0:8d:
59:70:1f:14:c5:03:08:82:3c:11:16:18:a0:5e:d3:
b4:77:8e:d2:de:1c:9d:1c:ab:f7:9f:d8:1d:96:11:
d6:b2:d4:3e:ae:df:dd:4d:04:36:ac:61:74:e5:89:
49:de:0b:29:8e:2a:06:6f:97:5d:31:50:6d:94:31:
75:58:9f:9e:b2:cd:b7:80:f9:10:f0:0b:eb:88:56:
f5:af:33:0f:e5:2b:a1:78:28:a0:f9:ad:15:e7:00:
c8:0d:a1:70:c4:15:bb:19:91:f4:6b:23:59:69:0d:
29:e3:65:d3:fc:7c:a2:70:72:93:92:cc:8c:d5:a2:
c5:6b:9a:64:1a:f2:2a:5b:0f:a8:e3:46:84:35:3f:
d4:f0:6c:74:27:c1:78:13:ef:cc:3d:2d:c2:b9:7c:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:9B:FE:3B:61:4A:96:79:B7:13:49:F0:50:70:53:8E:D6:00:A8
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c2e3ffab-b8ab-476f-9c6e-5e4842d705f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:1800::/40
Signature Algorithm: sha256WithRSAEncryption
6a:2a:2f:53:ba:0f:21:bf:37:2f:63:f9:5a:d5:8c:0a:8b:9a:
76:11:96:68:e3:50:bf:b6:43:22:6a:cb:c6:c0:4a:20:61:68:
8c:84:4d:df:f2:d8:fd:b4:58:73:d8:66:f5:86:7f:47:23:69:
56:b6:9b:22:73:89:d4:b8:59:8b:97:3b:c7:e5:1f:35:08:60:
23:6c:28:73:52:1b:d9:b4:52:bd:9d:91:4a:ae:78:f6:bc:66:
4e:ce:48:eb:dc:42:aa:32:a2:aa:bb:3c:6f:94:08:c0:72:19:
3a:b8:bf:e3:c9:d5:c5:1e:70:9f:09:75:97:c7:ab:68:a2:cf:
8d:54:49:59:2a:7b:44:73:d7:2d:55:61:d4:a8:6a:fb:3a:f5:
ae:8c:18:2a:35:db:63:1d:3e:87:8a:a2:4a:ef:10:b0:dc:1b:
26:70:cf:cd:45:3c:d5:0b:93:5e:16:56:76:06:3a:9e:ae:93:
bb:d3:2f:a3:d8:c8:ba:fa:24:ae:27:31:9d:4e:f7:68:43:44:
f8:6a:0e:21:19:ad:81:9c:87:7a:01:d6:50:60:cf:41:be:70:
d1:6d:f5:6e:b8:17:ef:e8:da:2d:35:7a:97:17:a1:39:eb:57:
cd:ab:b0:6d:0f:f2:7e:92:f8:6f:63:0a:5f:93:25:98:34:96:
08:e0:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:47 2025 by rpki-client