Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ebc73b73-ecf4-4aa8-ba90-88de51fde036.roa
File: ebc73b73-ecf4-4aa8-ba90-88de51fde036.roa (raw, json)
Hash identifier: BK+uYzyabXUUm4JRnATAaUnSw1cSBqXc7Jvi8vzCbvo=
Subject key identifier: 0B:59:3E:F3:56:FA:9A:34:5C:8E:5B:59:5C:F1:0F:54:4E:A0:CA:72
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 283609CD12532CACDC540B2B90C7F61CF589765A
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ebc73b73-ecf4-4aa8-ba90-88de51fde036.roa
Signing time: Sat 05 Apr 2025 00:21:07 +0000
ROA not before: Sat 05 Apr 2025 00:21:07 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:36:09:cd:12:53:2c:ac:dc:54:0b:2b:90:c7:f6:1c:f5:89:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:07 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:b3:ff:00:b5:54:a0:83:43:83:e2:5d:fd:
64:59:b9:d1:8c:f4:af:96:23:17:f3:66:bd:d2:f9:
01:55:9a:f8:d4:c9:24:39:0c:b7:2a:78:88:ae:50:
21:46:18:e6:62:4e:04:89:dc:41:76:15:9e:33:cb:
cf:cf:dd:44:fc:95:a5:ce:f1:0c:2a:c4:cb:17:aa:
5a:ad:8d:73:0d:a4:84:84:03:f1:1e:f9:37:5b:4e:
cf:92:b2:c6:39:f4:5c:a9:0c:a7:7d:38:06:4f:e6:
41:ec:37:4c:b7:cd:cc:de:d8:23:08:86:59:97:a6:
4c:07:74:e0:12:1b:bb:a5:87:ca:ac:c5:14:90:45:
8b:50:9b:01:0c:79:65:35:5c:1e:e2:7f:29:cd:58:
56:a8:c8:d7:7e:96:a1:40:72:c4:48:cb:9f:0a:5d:
69:74:81:04:5b:b9:03:9a:13:21:7b:ca:22:df:f6:
c5:cc:b3:f3:1f:5c:85:d6:ba:14:2b:0c:49:70:5c:
9b:d2:c4:28:26:76:fb:c4:fb:f0:0f:fe:fa:ab:7b:
1a:21:90:0a:65:59:72:ef:a6:f9:95:d7:b0:db:72:
cf:26:fa:7a:0c:b9:e2:7e:13:c8:0c:42:2c:f1:9f:
4e:cc:21:26:8d:3d:2f:39:38:19:9e:9a:36:6b:cb:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:3E:F3:56:FA:9A:34:5C:8E:5B:59:5C:F1:0F:54:4E:A0:CA:72
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ebc73b73-ecf4-4aa8-ba90-88de51fde036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
26:90:64:5c:40:1c:3f:72:85:a4:7b:f7:5e:72:52:9b:47:cf:
2b:32:5c:e8:34:04:ed:a5:c5:89:df:80:8a:4f:ba:a9:31:bf:
fc:b4:f3:d6:c2:fa:36:18:fb:94:c6:b4:18:11:e4:dd:eb:50:
4d:75:d2:94:d7:10:aa:3c:b4:ee:57:c9:80:b6:73:a9:0c:e8:
1d:2d:a8:19:b0:09:41:21:72:7e:d5:bb:da:8e:07:eb:b0:87:
07:42:41:72:2e:6a:58:cf:28:63:21:84:e9:ae:f9:ca:83:31:
06:ba:47:9a:31:40:78:87:7d:68:41:45:db:4d:0b:9d:fa:0b:
b3:26:58:e7:06:8c:71:8e:2d:07:63:b8:f6:bb:6e:6d:f3:a3:
12:0b:4a:bc:83:1f:8d:63:65:0d:7d:5d:f8:17:55:57:da:ed:
98:40:64:a4:93:ea:27:9a:91:7b:86:aa:a2:1e:79:0b:55:bb:
d0:75:5a:8f:03:c6:5f:1f:ec:a1:3d:3a:b2:4b:ba:2d:17:3e:
43:d8:49:77:07:97:bb:51:64:b9:b4:76:4e:cc:27:e4:25:d3:
47:28:77:e9:25:e4:45:e3:20:bf:73:0d:f7:52:e7:ac:c7:d7:
b7:39:c4:00:97:6b:1f:09:40:65:6a:30:21:50:92:a5:47:91:
66:09:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:07 2025 by rpki-client