Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1d757286-8eda-42c2-aecf-19a8c013dc64.roa
File: 1d757286-8eda-42c2-aecf-19a8c013dc64.roa (raw, json)
Hash identifier: TWAaG8tcu00jg5/Z/AUKzX7i994ZlY4PU4zChfHrkG0=
Subject key identifier: 50:10:EC:05:96:5F:A3:7B:D6:48:3B:EA:D0:F1:AD:16:E9:64:AF:B3
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 4DE995E839AF416F9326AC9BF70F787BB18961AC
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1d757286-8eda-42c2-aecf-19a8c013dc64.roa
Signing time: Wed 03 Sep 2025 00:20:34 +0000
ROA not before: Wed 03 Sep 2025 00:20:34 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e9:95:e8:39:af:41:6f:93:26:ac:9b:f7:0f:78:7b:b1:89:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:20:34 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=df37346be5c88891a291d81595b705db11ce40349ec6f1733d0084fb20807deb, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:49:f5:5e:bf:c8:ab:8d:71:e1:19:46:42:
02:af:de:2d:27:e7:2f:02:1e:8e:64:66:e3:4d:c6:
7f:e5:a1:63:0b:50:2e:e5:08:59:78:76:ba:e5:7b:
3c:3f:98:7f:50:7b:76:20:c9:b0:a1:5d:ce:0d:9c:
11:c3:cb:31:83:ac:92:54:d4:7f:ca:d8:39:10:15:
30:41:23:43:c6:ee:2a:61:94:b8:05:80:45:0e:c9:
99:fc:4e:6b:0c:0b:d2:a0:00:05:38:1d:55:19:55:
a3:82:17:fd:7f:96:ed:29:d2:c7:98:3b:da:ef:6a:
df:1c:6f:d4:e7:f8:2c:c9:1e:e4:ab:1a:3c:e2:f2:
08:30:36:a7:14:b0:b6:11:e6:6a:59:01:e4:b8:2d:
e4:4c:b8:c3:04:fb:3e:8d:80:78:72:b4:c0:0d:13:
f8:28:02:56:65:a7:4a:4e:bc:34:be:c7:e3:84:3c:
ef:75:2f:0b:f0:a8:b7:31:1e:7d:a5:2b:ca:b2:bb:
bb:00:01:88:5d:e0:d0:7f:b7:b3:44:10:3d:5b:df:
83:ef:87:87:6e:c1:bc:47:ba:28:26:e4:76:e5:5f:
ab:91:a6:6c:af:5a:05:86:4f:88:ee:13:2a:fd:cc:
1d:d2:f9:3a:86:47:54:4d:1e:3d:c5:32:c0:d5:76:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:EC:05:96:5F:A3:7B:D6:48:3B:EA:D0:F1:AD:16:E9:64:AF:B3
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1d757286-8eda-42c2-aecf-19a8c013dc64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8400::/38
Signature Algorithm: sha256WithRSAEncryption
6b:78:c8:81:44:dd:be:6c:7d:e3:a2:f5:08:81:dc:5d:81:9f:
f6:8b:8e:10:57:01:e8:3d:69:da:e5:76:6b:bf:58:7a:a7:b0:
ed:d4:96:d1:7d:8c:b6:ee:47:8f:ac:78:40:4b:3b:d4:b8:75:
ff:40:da:80:c7:f4:75:cc:2e:c8:07:0f:41:1d:5c:4a:61:90:
29:ee:36:a2:28:c5:c6:b3:81:7a:fc:f3:a8:f3:7d:b1:da:40:
bf:bf:4e:cb:05:ed:9e:91:56:cb:33:a6:47:9a:a5:c7:82:ae:
c9:6a:3b:45:95:f7:cc:d3:90:7b:44:7f:de:5a:d4:60:74:15:
51:34:59:11:60:1b:8e:d8:a1:17:b3:5c:87:41:d8:eb:40:a5:
82:de:57:6f:a9:c3:ca:a9:03:67:e6:4d:1e:9b:a4:09:2c:b8:
8c:7a:35:e6:16:fe:ad:bc:8b:2f:26:41:f4:7b:7d:79:99:c6:
fb:72:76:53:f8:eb:90:2b:a4:7b:8b:43:1b:ea:ed:3d:af:d5:
67:67:b4:d6:f1:da:79:43:ef:16:90:17:6f:41:e6:8f:d2:2e:
3d:d8:4b:31:aa:7b:a7:19:2e:ee:7c:40:f1:02:3c:ba:2f:a2:
c7:ef:1e:45:fd:21:d5:93:f9:28:ec:0a:44:7e:6c:d2:c3:56:
f9:0f:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:48 2025 by rpki-client