Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/eff6a3a5-b241-438e-ac29-04afb84fc11c.roa
File: eff6a3a5-b241-438e-ac29-04afb84fc11c.roa (raw, json)
Hash identifier: FHWDD289rn7vRkNfltV0AL6LvTcFJt1OJlX7ZKxjic0=
Subject key identifier: A1:BF:6A:80:11:65:0E:6C:C6:2D:9D:32:D2:45:04:25:05:EE:6E:0F
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 7525E4B2C7C371691445BCAE00827C6842A3EE53
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/eff6a3a5-b241-438e-ac29-04afb84fc11c.roa
Signing time: Mon 14 Jul 2025 16:37:07 +0000
ROA not before: Mon 14 Jul 2025 16:37:07 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc5:9800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:25:e4:b2:c7:c3:71:69:14:45:bc:ae:00:82:7c:68:42:a3:ee:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 14 16:37:07 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=40e77d803995dc4100ddae2b022cc0f59260f8d36d86f997443c44afc605730e, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:bf:b1:5e:83:03:c3:d9:bb:ec:ed:a3:3a:
6a:e9:6d:13:74:c7:bf:86:fa:a3:4f:39:fe:cd:71:
b5:ce:5b:98:82:81:09:56:e5:f2:39:53:40:42:3e:
49:b5:6d:d7:19:37:1b:e8:a9:92:b5:73:cd:96:07:
c6:56:78:19:39:59:06:eb:c9:f9:f1:87:62:7a:4e:
01:f9:f6:51:e3:08:f1:00:50:89:44:19:45:06:d9:
b0:5b:92:99:6c:85:08:25:e5:40:ee:50:e8:09:07:
6e:dc:37:52:5d:86:3f:2a:f4:a2:d3:c7:5a:93:ba:
a8:1a:78:d0:38:a2:ad:68:f0:26:a5:ce:ec:f7:60:
b8:81:4b:a4:eb:db:47:5c:8e:12:bd:b4:62:71:43:
c5:31:cd:a5:c1:62:e7:a3:b5:68:8d:d1:91:a7:40:
ca:98:a6:80:01:77:eb:ae:69:4f:fd:fb:31:5e:45:
9d:67:7b:9c:81:61:3b:94:4b:7b:4a:21:be:87:2f:
83:2a:68:cc:47:46:f5:2a:95:df:94:3f:cc:3e:d1:
bc:ee:9d:99:3a:cb:fb:79:46:2f:a5:4c:63:fe:76:
f5:ba:7e:ce:b7:ea:5f:a7:85:b9:7e:c5:51:66:82:
87:3d:75:ae:f7:15:1a:93:28:7c:9a:07:3e:3f:8b:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:6A:80:11:65:0E:6C:C6:2D:9D:32:D2:45:04:25:05:EE:6E:0F
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/eff6a3a5-b241-438e-ac29-04afb84fc11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9800::/40
Signature Algorithm: sha256WithRSAEncryption
41:44:5f:0f:be:29:fd:b5:b4:18:44:93:01:9d:c4:ef:2c:94:
c0:5a:21:4f:b9:b1:24:f0:43:b4:66:5c:ba:08:34:a9:76:59:
cc:8d:6a:2b:87:03:d1:bb:f4:9e:bc:75:95:e3:08:4b:1b:47:
77:5a:0e:42:c7:30:e3:0e:84:c2:01:f5:c3:fc:c0:0e:06:57:
cc:fd:a5:8b:5d:cb:e9:4a:fe:b6:0a:3a:e1:4a:08:01:e4:59:
24:84:eb:d8:87:d2:20:d0:66:76:f6:7c:24:33:35:3f:6e:31:
c2:9e:6c:24:02:2c:fb:d8:fd:2d:7e:6b:27:38:fd:d9:40:b5:
a6:c3:cd:c0:64:02:eb:53:83:4c:cc:8d:f1:67:d1:54:65:e7:
b7:c0:0e:16:6c:26:c3:c8:54:38:21:60:b6:b3:14:57:b0:48:
88:fa:f6:cc:0a:42:df:65:d1:43:38:ab:15:f6:53:fa:b2:1b:
aa:2d:58:08:c0:34:20:e5:cc:2c:c3:17:9b:84:5a:c2:ba:c9:
c3:9e:7c:c9:a6:84:78:54:27:f7:08:a0:64:7f:c8:51:76:8c:
af:d8:fc:1f:db:79:58:65:90:1d:13:7f:9c:5f:96:32:9d:68:
ea:b2:50:dd:74:44:92:0c:72:69:50:e6:3e:42:f3:85:35:7b:
d7:75:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:05 2025 by rpki-client