Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
File: 40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa (raw, json)
Hash identifier: yl+v3eal8oaf5t1VSNPSsqtu6faiiuS6Ko9TmfmwiOs=
Subject key identifier: 54:97:14:4B:99:F5:60:05:3C:34:CE:30:99:F6:00:60:7A:97:EA:D0
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 710EFC3DC86CFC51C690B4E2FCAE7F18B925183B
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
Signing time: Wed 03 Sep 2025 00:20:18 +0000
ROA not before: Wed 03 Sep 2025 00:20:18 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0e:fc:3d:c8:6c:fc:51:c6:90:b4:e2:fc:ae:7f:18:b9:25:18:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:20:18 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=30ba2553747c6c8de372a142fb69afa44f09dd2359eea91d25ef4015ffb11486, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:c4:01:a6:3b:a0:65:44:15:39:fb:dc:9e:
a6:30:42:56:76:c4:81:2b:a8:7e:5f:4b:4b:15:c7:
50:20:a0:4b:88:b4:31:b3:a3:55:bf:24:25:e7:14:
aa:f8:62:39:15:c2:8f:41:24:a5:f2:23:4d:37:4c:
e1:1a:7f:3e:d5:95:5c:bb:4b:19:e9:2f:7e:17:af:
f0:54:90:58:5f:e5:9a:a9:e4:fa:3e:26:40:14:9c:
a3:af:8e:c8:7a:ad:d2:2a:76:14:79:6a:45:46:e2:
57:40:ae:39:db:18:34:4f:b1:d8:6d:01:dc:f4:f5:
02:65:8c:f4:7f:58:2f:38:b5:65:b4:95:a5:fc:a1:
d7:19:25:5e:e1:e8:53:d5:95:c7:e1:36:db:ad:5f:
33:4c:73:94:04:01:2a:97:9f:b8:6f:89:1f:2e:3b:
ff:d4:0b:9b:47:8b:5e:84:e7:d8:e5:ef:b3:40:b8:
5c:9c:bd:82:be:ab:f4:a4:cf:5a:8f:0e:4e:c2:cd:
f7:94:6a:d2:8b:58:b9:1f:ff:c9:34:f8:d6:da:af:
ce:fc:68:f4:fb:9b:59:92:fd:52:01:84:67:14:a3:
46:fe:0d:4c:3d:6d:59:dc:ff:fa:96:4a:6d:94:aa:
56:07:c5:9d:fe:bd:5d:d1:ce:b8:b9:88:e1:cb:9d:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:97:14:4B:99:F5:60:05:3C:34:CE:30:99:F6:00:60:7A:97:EA:D0
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/40f9b1f2-5ad7-442e-b02a-156712d4fa19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
5c:b8:d8:81:c6:46:9d:e2:2a:a5:75:4a:6c:41:80:00:30:6a:
34:76:cc:f0:7a:f0:ce:88:34:91:67:88:c6:3e:e5:e4:50:b3:
30:5e:5c:16:80:4c:25:1d:a9:b2:9f:ae:1d:d6:b8:cd:44:d0:
cf:2a:58:13:3c:7f:b3:d2:c0:1e:ad:c8:94:aa:fc:b3:45:95:
9c:09:c2:7e:b4:f0:2b:52:e6:a8:4e:56:5a:e8:f1:1b:92:b8:
42:05:65:ab:dd:fa:b4:06:ca:cf:19:6b:14:3e:ca:56:31:1a:
c4:46:54:2b:77:4b:6a:4b:61:29:45:00:33:47:7e:f4:0a:a8:
71:74:6a:76:d2:87:d4:f5:38:12:1e:83:70:35:7e:45:79:97:
38:65:25:f5:cb:8e:06:e3:6a:bb:7b:73:b0:3a:d9:04:0f:36:
0a:bc:01:8f:0b:20:08:39:6d:95:4d:e0:5e:89:01:d1:ab:08:
11:5d:c1:7f:3c:aa:7f:6a:08:4e:8a:fc:bd:b9:fe:24:84:9b:
49:1e:be:33:e9:9f:7e:9f:59:e5:62:5e:3a:67:9e:9f:3d:d6:
0f:90:51:88:7c:15:06:90:97:fb:6a:c6:4e:5a:7b:57:a9:bd:
29:6b:c9:1a:47:41:32:82:40:85:3e:ed:4f:40:ff:7e:6d:65:
f1:49:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:50 2025 by rpki-client