Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f8610070-4efe-423a-a72e-bfc906b441cc.roa
File: f8610070-4efe-423a-a72e-bfc906b441cc.roa (raw, json)
Hash identifier: g8851JaYyiXT4dmcFvvqLsmxb3+W8G2ZwrOeZ5Rlj/0=
Subject key identifier: 11:4A:D8:BC:5B:B9:5E:87:58:F0:50:9E:DA:FA:83:EA:FD:44:FD:5D
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 052647BB4480715FB4A0E0134461525CEB0415DC
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f8610070-4efe-423a-a72e-bfc906b441cc.roa
Signing time: Mon 14 Jul 2025 16:37:10 +0000
ROA not before: Mon 14 Jul 2025 16:37:10 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:26:47:bb:44:80:71:5f:b4:a0:e0:13:44:61:52:5c:eb:04:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jul 14 16:37:10 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=22353aed296ec62b724a68e75a4424efa54061bad14d440b1d32c74db8571af3, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:9a:9a:1b:cc:bb:7f:87:59:73:5f:9f:20:
f3:b9:53:29:2d:ef:27:64:1a:92:13:03:73:ec:e9:
30:7b:57:a5:fd:26:2f:aa:bc:a6:9a:3e:c6:4c:38:
62:14:0d:cf:c5:28:6e:3f:35:1a:d2:12:47:e5:08:
b8:60:53:b8:26:5c:20:28:53:2f:f6:51:d9:1c:56:
7e:45:86:58:c1:19:a6:66:52:49:8d:29:a9:10:30:
0b:2a:cb:c1:8d:c8:e8:b5:dc:7f:6a:bd:0a:6a:23:
db:de:a6:23:61:5a:e3:34:ee:9f:e3:dc:9e:2b:6e:
39:53:2e:d8:c3:fd:04:b5:e5:82:ba:a2:cf:21:e8:
ab:d3:d9:fd:07:98:0f:44:c6:5d:b3:29:ea:b6:1e:
be:db:60:5f:fa:0d:4a:2e:37:16:1b:d7:d5:97:01:
b1:18:14:0d:8d:bc:8b:9a:13:a9:da:dd:10:ee:a3:
e9:e5:1e:1c:31:65:20:f3:c2:75:85:f3:0b:91:12:
f2:19:1e:a1:ad:7f:c9:60:19:39:ff:b2:9c:fb:8f:
ad:31:57:20:2f:69:86:ad:7f:25:55:2d:59:ba:04:
cf:17:d9:14:25:24:40:fb:24:6b:87:88:71:10:fa:
8b:14:e7:26:ff:f4:1d:9b:11:45:84:4d:fa:6e:70:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:D8:BC:5B:B9:5E:87:58:F0:50:9E:DA:FA:83:EA:FD:44:FD:5D
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f8610070-4efe-423a-a72e-bfc906b441cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
6a:60:ad:69:99:2c:41:a5:2d:33:0c:ca:62:75:f8:c8:55:7a:
cb:36:0d:da:b8:58:5a:b0:60:55:60:53:5b:53:9f:36:2b:f8:
94:f0:4b:3c:2a:b1:ec:d3:8f:e2:56:8b:87:f8:d3:76:7e:91:
f2:ad:c7:3d:75:20:d2:ba:1f:80:b9:d7:f5:a5:bf:3b:4f:4e:
20:77:3a:f4:f4:e4:b2:88:d0:bf:77:b6:91:f0:c2:10:e9:d6:
21:5b:94:89:61:0a:06:86:78:43:a7:64:50:7e:d7:2d:bb:95:
ac:1d:e1:34:47:6a:de:77:26:5f:ce:4c:aa:5c:e3:39:6f:7d:
0e:d6:c1:3e:89:d5:f0:b3:27:ec:ab:53:fd:92:e3:41:da:91:
19:2a:31:71:57:4d:56:2e:37:dd:cf:5c:f7:b1:ba:ba:21:a2:
1e:2a:92:76:e2:91:f0:08:80:be:89:f3:f9:01:c0:ce:a6:33:
7e:1b:06:4c:45:7f:ea:8c:07:ba:83:34:c4:c4:a3:72:c7:f0:
c6:3d:35:4a:d2:12:52:e3:9f:a6:19:7b:b9:c6:e4:ce:0d:c9:
c5:af:b2:14:c4:96:1a:6b:b4:6a:66:8f:f2:8d:df:ee:fd:d4:
d5:35:eb:a5:60:73:f4:37:19:66:03:af:66:36:89:aa:4c:a0:
42:a2:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:10 2025 by rpki-client