Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
File: 2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa (raw, json)
Hash identifier: 9v0myEvlI47Gamrrm/YnM77WcpJ/4sFSwT/sswDqt9o=
Subject key identifier: 43:63:1F:31:8F:FC:B3:F7:96:DA:8C:84:92:09:5E:DB:41:F4:F3:8E
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 553379DD2BC1CA80F5E485E90F5B1CC5114E45EF
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
Signing time: Wed 03 Sep 2025 00:20:39 +0000
ROA not before: Wed 03 Sep 2025 00:20:39 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:33:79:dd:2b:c1:ca:80:f5:e4:85:e9:0f:5b:1c:c5:11:4e:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:20:39 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=9438c445d38d9cac7a3df2201eaa6f2e136d81828cf35b5a44a8d4e4988da433, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:ef:80:4a:00:eb:03:1e:a2:f6:06:79:11:
20:99:8b:cb:04:aa:4c:03:1c:b1:ec:fa:1c:62:c6:
d4:1a:22:05:ab:f3:e8:81:e2:09:9d:6d:21:47:9a:
f6:d9:6a:5c:89:4b:62:71:9e:e1:bd:a6:72:52:d7:
dc:08:b5:37:41:36:19:b3:02:1f:41:ed:fc:e0:4a:
42:74:61:4f:af:8d:eb:11:05:fb:55:f1:c4:0b:a3:
0a:2c:8d:b3:be:b6:3d:4b:fc:41:5f:3b:44:a2:bc:
34:6c:49:ae:e3:7d:63:50:38:a1:70:2e:7b:14:ab:
02:17:e6:2e:00:35:d8:3c:5b:6a:3a:ee:be:8c:51:
69:0c:e5:08:6b:d6:ef:08:5b:fc:ba:2a:11:37:da:
fe:cb:47:9b:d7:be:47:31:47:86:e6:f4:dc:33:1d:
da:1f:39:57:48:85:87:b5:a8:62:9d:ea:80:1a:67:
12:0c:17:a6:b7:bc:cb:91:91:f9:e8:fe:2d:3c:fd:
bf:f3:c6:15:2f:4b:e8:25:1e:b9:21:24:c0:af:bf:
61:15:76:03:6d:aa:1c:d1:05:47:d7:27:16:85:ba:
11:d1:3d:43:38:81:c0:86:0c:3a:ca:c2:cb:13:d7:
24:f3:66:61:76:45:ee:19:14:7c:83:f2:f0:5a:b1:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:1F:31:8F:FC:B3:F7:96:DA:8C:84:92:09:5E:DB:41:F4:F3:8E
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
a8:4b:94:ed:a8:2f:12:18:71:eb:84:c6:de:76:10:bc:b8:5c:
5f:1e:eb:16:68:c8:e7:47:6a:e0:fe:80:56:b3:2a:40:8e:e0:
44:7e:d8:35:eb:a2:60:3c:c8:16:2a:36:58:0a:cc:21:77:fa:
58:28:b1:73:67:d6:0a:e0:a5:d7:2d:62:83:85:68:71:1b:91:
8f:8c:aa:b9:c0:36:cd:f3:db:38:97:52:af:1a:d0:0c:f1:59:
7a:dc:03:8e:51:1c:64:e5:9f:e0:02:66:a2:44:55:13:75:c3:
10:27:be:64:02:94:15:d8:b5:63:cc:6a:16:1f:21:57:28:ed:
1b:af:9b:24:da:96:46:21:a3:76:ca:0f:64:44:b9:9e:20:40:
45:1f:61:27:ad:2d:4b:98:7e:34:be:e0:d8:ad:8d:58:cb:8c:
a2:d8:3b:84:9a:24:f7:0e:02:13:2c:94:12:52:79:25:77:5d:
84:49:d2:8c:c6:62:ec:1c:0b:d4:09:1d:11:f4:dd:1c:59:17:
2d:ea:bc:f5:61:e3:7f:49:15:07:33:f0:75:f4:2e:30:27:dd:
80:99:c4:f5:dd:65:28:3a:f1:43:19:25:46:d5:58:4f:2e:3e:
14:d3:e6:ba:42:82:f0:ed:c1:b5:b6:eb:0e:7c:79:fb:ff:9d:
55:0c:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:53 2025 by rpki-client