Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50f59e85-50ab-4b5a-9119-096ba93f86f2.roa
File: 50f59e85-50ab-4b5a-9119-096ba93f86f2.roa (raw, json)
Hash identifier: n61+cwklooxmWbl1KKD8XqfPonUB7tbONuo09VyvD/U=
Subject key identifier: 23:D9:A2:5B:CF:60:D4:7E:5F:4A:19:8C:DE:09:2D:CB:22:2F:B5:A0
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 59979EAF554C45AFFCF9346B8902B94A6CDAEB05
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50f59e85-50ab-4b5a-9119-096ba93f86f2.roa
Signing time: Wed 03 Sep 2025 00:30:11 +0000
ROA not before: Wed 03 Sep 2025 00:30:11 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:97:9e:af:55:4c:45:af:fc:f9:34:6b:89:02:b9:4a:6c:da:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:30:11 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=72748b3ac3fdd61a54c24922222c50d86c6c428123970c14d20742604d6dd58e, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:9b:a1:67:31:10:2e:b5:47:0b:a9:f7:ee:
5d:41:33:eb:77:7c:c1:ef:ea:13:d6:7e:01:94:dc:
47:94:45:eb:1d:50:4c:2d:91:49:99:92:a6:b9:e4:
00:0d:e9:c2:4f:1b:1f:ca:7a:82:b4:8f:e6:33:25:
66:42:01:a3:c8:93:23:ea:15:d9:9c:69:4d:6e:1c:
07:0f:de:d3:cf:2f:e0:a3:da:6e:83:88:70:2b:21:
3c:0e:3e:2c:90:00:fb:99:bb:b1:64:ff:93:e8:d6:
10:53:b7:7f:2c:20:87:14:f1:4d:de:95:9f:53:9b:
02:b3:d0:50:8c:38:32:01:8c:d1:d4:ec:71:7a:ac:
29:bc:fa:6d:e6:ee:c6:08:98:21:5d:0e:e0:43:2f:
d2:9c:a9:34:f3:9a:3a:e3:24:23:e9:aa:66:5d:7a:
74:1a:3e:1f:05:8f:89:2c:54:58:ee:aa:86:3b:9a:
a9:ac:72:74:50:c1:70:ac:65:5f:ff:ab:2a:57:68:
d5:cb:9f:a6:1b:62:5e:1b:40:92:6d:16:de:86:0d:
ec:95:41:de:3c:93:f6:81:65:e3:d2:cf:9d:aa:af:
3c:50:da:46:bc:52:23:c1:7a:f8:6a:ee:79:4d:e7:
c9:15:ba:dc:5d:c8:65:c9:43:90:d3:fb:81:2a:d9:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D9:A2:5B:CF:60:D4:7E:5F:4A:19:8C:DE:09:2D:CB:22:2F:B5:A0
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50f59e85-50ab-4b5a-9119-096ba93f86f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
87:7e:21:af:88:d6:22:e9:7b:0e:ac:c9:b9:9b:fe:ae:15:ca:
38:83:dd:83:ef:82:28:ed:a0:35:43:d6:b2:7d:02:69:4b:96:
9b:87:68:f3:00:0a:03:35:cf:e1:28:ab:52:5c:15:cb:7a:b2:
5b:34:cb:e9:0b:87:3a:09:41:e8:6d:c7:99:42:39:f5:c7:83:
26:c8:fa:d6:be:86:db:74:23:d4:93:34:d5:2d:44:8a:af:ff:
54:71:26:f2:2e:81:58:39:9b:38:f3:a5:19:52:00:42:4c:8b:
4d:16:ee:9e:5b:82:50:5e:7a:ab:9a:35:cc:6a:ed:1b:63:a8:
3b:cd:ae:d0:72:ed:b5:1e:89:cf:f0:34:ec:56:d9:12:e9:6b:
6d:e8:c8:20:7c:f1:e3:b5:85:fd:fd:8e:4f:f3:f4:31:8c:c9:
8c:80:1f:78:92:7f:1e:c9:f3:a5:16:75:29:45:0c:bb:68:1c:
87:e6:d4:ed:5c:66:2f:ef:af:a0:c6:c1:a7:eb:ba:c2:6d:85:
74:41:75:b5:d4:fc:92:20:2b:f5:ae:d6:54:e8:0a:07:fa:4d:
7d:66:99:9e:d2:80:ec:4f:0a:29:61:5f:16:de:7b:8a:e6:bb:
7b:b6:94:7b:46:82:bb:8a:35:96:b4:b9:80:90:4e:2d:f9:27:
0a:3b:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:49 2025 by rpki-client