Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0b1379a0-a965-4871-ba33-de2086e8028e.roa
File: 0b1379a0-a965-4871-ba33-de2086e8028e.roa (raw, json)
Hash identifier: YNesgUEt0qQdOLtIdUWtJI6GNxadTKGbDQ3+a8MFarE=
Subject key identifier: 36:F6:4A:D9:8A:30:96:5E:69:CC:3F:42:45:DA:5E:A7:45:B8:56:D5
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 03114CF6F8FB02A3FB8CC7DF1F5D5E59B2F826DC
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0b1379a0-a965-4871-ba33-de2086e8028e.roa
Signing time: Wed 03 Sep 2025 00:21:14 +0000
ROA not before: Wed 03 Sep 2025 00:21:14 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:11:4c:f6:f8:fb:02:a3:fb:8c:c7:df:1f:5d:5e:59:b2:f8:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:21:14 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=eec8e7f4e92622b396ba2cc449063388b752bfbd7d159527b486130a1da8f435, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:d5:6f:fa:82:68:9c:3b:5b:c3:51:27:f9:
0a:39:0b:aa:51:61:80:19:83:b8:a6:0f:6a:0a:33:
53:bc:dd:1d:27:7e:88:a5:3e:f0:48:84:dd:4f:b1:
b2:b0:4a:3c:cf:c6:47:87:f6:3e:b2:99:df:6d:e3:
bc:41:98:57:9d:ad:4b:43:bf:23:46:26:37:cc:36:
ff:5a:92:ac:6c:43:47:17:5a:3a:76:47:f0:cb:d4:
9c:e3:7a:b2:ad:12:ee:f1:88:c1:15:c2:fa:03:f6:
0f:f2:d8:3d:5b:c1:ca:71:73:a5:7f:99:88:c7:5d:
8f:c0:c8:92:48:37:1f:b4:23:d5:ea:d1:b9:4a:e0:
cd:d3:8a:a4:0f:f3:2f:7a:b2:fd:7a:c9:19:85:13:
76:d1:b5:0c:1e:6d:2d:f3:ff:7e:6f:19:49:4f:b7:
c1:77:66:bc:33:05:e6:7c:a3:64:72:07:44:09:67:
ba:7b:59:2a:40:24:6f:e4:e8:ab:5e:60:32:68:c5:
14:8b:6c:dd:45:34:b7:29:a6:6c:8e:a3:c5:44:20:
c4:68:70:17:2d:5d:c8:4b:07:eb:23:43:bb:e0:ce:
49:e2:7c:84:d0:21:a0:67:43:ac:0d:46:39:07:e0:
57:d8:78:10:e0:22:a9:f0:58:44:2f:1a:27:9e:74:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:4A:D9:8A:30:96:5E:69:CC:3F:42:45:DA:5E:A7:45:B8:56:D5
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0b1379a0-a965-4871-ba33-de2086e8028e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
08:cf:dd:d5:bb:ff:8c:54:54:95:76:36:88:a8:c0:b1:71:f0:
43:b3:fb:1e:d6:ef:cb:88:5f:1d:0d:13:26:12:3b:37:8d:64:
00:be:6d:2d:84:da:bf:36:e3:df:c1:7b:2f:35:ec:2f:95:2a:
b9:49:fb:ca:50:e4:72:ff:bd:d4:9d:3f:5c:4c:80:71:de:a4:
65:7e:68:9b:ee:e8:81:13:4b:64:25:98:dc:ef:91:d2:92:46:
5f:42:33:bb:cc:8b:56:20:cd:0e:c5:56:af:53:f6:cc:65:e6:
1a:bb:b7:08:7c:89:b2:1a:ec:56:e4:bc:07:8f:2e:17:71:bb:
9e:fa:9b:15:4d:b7:ea:08:63:0a:26:5c:3e:e1:9a:c5:83:e7:
c4:d2:de:4e:78:e3:88:cd:6f:c1:5c:db:db:4d:2f:b5:b1:ba:
83:9a:b5:57:a8:cd:85:76:82:ca:bd:19:27:6b:97:b1:04:11:
2e:1e:ce:d1:83:08:42:29:7c:c4:54:ad:e7:11:28:39:10:5c:
e0:c9:ed:82:91:ce:d1:72:69:98:67:a5:d7:8c:6e:df:f2:fc:
5b:82:5e:ba:79:b1:3a:2a:4d:67:b3:d3:3c:18:94:af:5f:92:
9d:c9:e7:66:28:74:38:61:b2:1d:07:9f:13:61:da:f0:2f:33:
f0:96:68:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:36 2025 by rpki-client