Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/215a2c9b-4dc1-48db-846e-de75149ba3ec.roa
File: 215a2c9b-4dc1-48db-846e-de75149ba3ec.roa (raw, json)
Hash identifier: w5HlKvdW9ifpv3VWRmrf8vWZL7K7f35/U9IuAZLAg/I=
Subject key identifier: D9:8A:36:7E:75:70:D1:80:7F:D4:A2:6C:DA:7E:CA:68:F9:D1:4C:8E
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 45D03753DAE124BF98AF68E3C2C5EED08E371094
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/215a2c9b-4dc1-48db-846e-de75149ba3ec.roa
Signing time: Wed 03 Sep 2025 00:20:43 +0000
ROA not before: Wed 03 Sep 2025 00:20:43 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d0:37:53:da:e1:24:bf:98:af:68:e3:c2:c5:ee:d0:8e:37:10:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:20:43 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=508848d14e81def644621b6c91c6f857d9c292e954b868016d50d5aaab578204, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:41:5c:5c:ae:34:f7:da:12:b1:7c:ae:9b:7b:
8a:81:0f:ce:56:f2:28:3a:26:93:f0:14:7f:4d:cd:
40:f3:0a:55:02:6f:da:29:0c:0c:ae:8f:a4:f5:89:
19:22:23:55:78:fc:05:ef:0d:cc:60:bd:c7:7c:ce:
f1:16:b6:d7:b5:c2:1c:7e:0c:7f:b9:ce:c6:e5:54:
d0:59:a9:f3:86:80:b3:76:25:86:8b:42:32:99:4a:
81:cc:3b:9a:b9:49:af:b6:b1:94:0d:2f:49:78:5b:
47:b0:66:f3:34:e6:5e:6d:61:4f:c6:59:d6:95:78:
28:64:b5:bb:64:26:c4:04:7b:21:e6:08:b0:c6:5c:
f2:12:83:f1:83:55:20:d5:89:8d:b8:b6:f9:1f:62:
36:13:f8:0b:79:00:cb:a9:03:91:0f:0c:83:7d:24:
4a:96:20:7b:5a:ff:d2:36:f6:8f:f2:18:05:32:73:
3f:41:55:a7:43:b6:53:37:24:c5:0e:b4:df:17:63:
f2:c1:08:00:79:04:4f:04:49:84:8d:f2:96:4c:49:
b5:d2:46:6b:1d:62:c5:6a:2a:cb:2d:44:e0:f5:af:
25:44:dc:b0:16:76:19:3b:13:8d:27:a3:33:e9:b0:
18:81:3c:07:6d:08:85:fa:7d:af:6e:17:86:a5:b6:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:36:7E:75:70:D1:80:7F:D4:A2:6C:DA:7E:CA:68:F9:D1:4C:8E
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/215a2c9b-4dc1-48db-846e-de75149ba3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
95:84:e8:66:17:5b:dd:69:2d:67:03:1a:95:79:5f:a6:e8:8b:
e0:be:58:0c:e5:a0:b0:57:52:40:4b:34:b3:94:43:eb:f4:10:
b5:0b:7b:35:9d:1b:bf:aa:36:40:44:97:f1:be:fb:f4:5f:eb:
ac:38:92:fc:61:8f:f8:e9:5f:34:9d:04:0a:31:84:49:8d:bb:
94:32:70:c0:eb:cd:a9:d2:74:6a:37:d9:53:69:cb:37:5b:26:
8d:49:8e:bb:83:1e:3d:53:e3:24:bd:74:c5:fb:52:a0:a7:98:
42:f5:59:1f:86:3d:26:2a:17:ec:5a:6f:74:9d:45:6d:de:8a:
37:ce:92:67:73:ee:d0:4b:86:5e:17:f6:2d:a8:8f:35:88:bd:
99:ee:0e:48:38:df:4e:e6:c7:43:5e:b9:e0:0d:55:e1:c1:32:
67:27:fa:64:ef:ca:d4:8a:45:24:98:56:69:48:2e:70:52:f8:
e7:2f:f2:cc:53:14:cd:c5:9c:a5:68:23:e7:f4:3d:f1:14:41:
92:04:0d:bf:38:c9:a9:ba:c5:01:df:b2:60:02:4c:f0:8a:50:
00:38:d8:0b:55:92:ce:49:9d:c5:9d:e4:dc:6e:e6:04:e3:c9:
29:74:7d:80:83:3b:44:92:a3:85:5c:0d:71:3a:b6:f9:23:8c:
a0:97:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:55 2025 by rpki-client