Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a0347bc-2355-45ba-953f-4658b951cf4b.roa
File: 2a0347bc-2355-45ba-953f-4658b951cf4b.roa (raw, json)
Hash identifier: KMeI4Ac/G5P35p+AN6sxorv+jtSmEpPRTztYaXC/cQc=
Subject key identifier: A1:A3:91:34:01:AA:E3:1E:5E:90:7E:BB:7A:14:6B:57:37:9D:FA:E4
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 4BC1D915384C2421A8FF12B797AE11FA727041A0
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a0347bc-2355-45ba-953f-4658b951cf4b.roa
Signing time: Mon 26 May 2025 15:10:15 +0000
ROA not before: Mon 26 May 2025 15:10:15 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:78c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c1:d9:15:38:4c:24:21:a8:ff:12:b7:97:ae:11:fa:72:70:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:15 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=964c2b7be061238e3d93e37d3fb7ce7909bcea44acf83d882d0509d0fed11e64, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:0d:55:51:d1:23:8f:dc:3c:c5:3c:fb:94:
0d:f9:83:55:47:fd:f5:05:7c:c1:2c:45:4d:b2:df:
20:9b:a0:4b:11:3e:70:69:ba:3a:c6:2e:eb:35:3a:
af:c2:22:ef:2a:3c:52:23:99:54:f7:1f:ea:3a:9c:
76:9f:59:a5:87:64:5a:cb:72:01:be:cf:15:2a:eb:
d8:a1:47:8e:5d:00:8b:87:35:fd:22:4e:07:99:4d:
f5:18:88:0c:51:96:c4:a7:17:c6:f0:2c:ad:82:04:
ab:a2:71:61:46:01:19:bc:f4:16:02:a4:50:ad:14:
95:76:27:ed:47:64:b8:90:af:20:0f:f1:d1:23:93:
58:1d:17:c5:56:fa:da:50:26:48:a3:97:f8:d8:8f:
b9:1c:18:f9:81:c2:62:01:d1:1b:78:d5:48:c7:dc:
f7:13:43:bf:08:5b:98:9e:73:9c:84:5f:b3:b2:15:
5f:e5:ee:15:8a:f9:9d:b6:df:09:db:9c:8e:8c:c0:
55:42:33:f3:ad:7f:3d:9a:cc:28:71:0e:7c:26:0c:
b2:e0:2a:20:34:77:2d:dc:22:aa:ef:d8:ec:10:0b:
2e:b4:95:37:d6:06:10:67:26:5c:1b:ef:64:b0:32:
20:db:30:b2:12:16:31:17:ad:9d:0a:35:a6:86:88:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:91:34:01:AA:E3:1E:5E:90:7E:BB:7A:14:6B:57:37:9D:FA:E4
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a0347bc-2355-45ba-953f-4658b951cf4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:78c0::/46
Signature Algorithm: sha256WithRSAEncryption
11:12:f2:70:3f:5d:a7:70:ba:e7:55:e6:40:a8:6a:33:8f:f2:
dd:93:6b:2e:fa:47:a8:c4:6d:ff:cb:74:8b:9f:49:d1:4b:dc:
28:79:15:e6:84:7e:f4:07:b6:53:a0:bf:d2:05:5a:a8:e3:28:
4d:9f:68:01:e1:13:ab:94:e7:64:b5:02:5f:c5:20:27:47:1b:
bf:3b:0b:ae:c1:f6:8d:f3:de:e3:5b:c6:12:86:df:6f:3e:48:
0e:1f:a6:e5:c8:7b:67:2e:2f:db:8d:76:51:74:5f:33:43:c3:
07:1c:65:46:39:02:76:7b:8e:cc:3e:ac:64:76:02:a8:4e:59:
2c:38:b8:2d:ff:1d:ee:7d:28:77:1b:89:fc:cd:41:b1:4e:8e:
e2:7c:7c:88:c6:65:06:ab:5b:88:49:ec:0e:ce:32:57:37:4d:
10:6e:c2:81:13:96:e0:d5:ed:95:ba:55:a5:63:45:62:70:38:
c0:1e:2c:9f:5c:0a:02:8d:f7:e8:39:37:72:18:17:de:d1:05:
1f:18:cd:b3:e1:15:fa:61:0b:75:49:6d:d9:37:69:23:53:e4:
7d:21:4d:f9:52:3e:d1:8b:0f:d6:4f:75:b9:0c:b3:27:4d:0e:
1a:01:ba:87:2a:b4:b0:74:ad:22:54:76:77:73:e5:22:5a:39:
23:4c:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:47:11 2025 by rpki-client