Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/afb29442-cb58-4fe7-9319-202c1646019f.roa
File: afb29442-cb58-4fe7-9319-202c1646019f.roa (raw, json)
Hash identifier: OAuWjPh9D30lOKCHuZlO4t+mrWGOdIc5duTO/evt7YQ=
Subject key identifier: 15:64:B6:3C:F9:27:1C:FE:F2:3E:91:71:F4:C1:11:F4:83:BB:B9:EB
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 268A3776057763282762441947512D96D3F2E311
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/afb29442-cb58-4fe7-9319-202c1646019f.roa
Signing time: Wed 03 Sep 2025 00:21:20 +0000
ROA not before: Wed 03 Sep 2025 00:21:20 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8a:37:76:05:77:63:28:27:62:44:19:47:51:2d:96:d3:f2:e3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:21:20 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=c3314aed00ea6bee9dce7aa15d74c1f19b5d5ba95cf49e2201d425ad171aa18c, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:d2:0f:f1:a5:e1:f5:49:1b:e4:cd:94:2c:
1d:57:8c:8c:d2:0a:f7:82:91:a4:25:53:2c:37:05:
91:4f:4b:db:3d:6d:f5:ea:34:69:0d:7c:26:52:dd:
55:df:c6:dc:7a:8a:be:b6:cc:3d:e4:b0:56:db:5e:
f4:3f:c0:99:ff:be:f4:47:9f:7a:a7:0b:35:d4:c8:
cc:fd:bb:c9:87:bf:1b:0f:d7:9c:fc:2f:66:73:de:
74:e2:1b:3a:ba:b5:87:d9:4b:c2:3f:21:5d:cf:8c:
f1:cb:8e:84:92:15:8f:1b:2a:19:57:72:4d:71:b8:
43:37:b5:64:6f:af:d3:94:a5:f0:df:22:be:31:3a:
f8:52:37:15:24:32:96:9f:ee:5c:ee:fd:63:24:87:
c3:39:f9:be:b8:86:3c:7c:e8:7e:26:c4:6a:1f:6f:
53:f5:6a:48:ac:59:fa:c0:b4:53:07:ea:c4:83:c8:
7d:84:db:7f:6c:3e:72:8a:1d:85:13:2a:fb:94:4a:
0e:5a:a2:1f:5c:1f:a0:7a:b4:0e:f8:d8:ca:06:c3:
56:3b:1b:e5:b6:2f:a2:80:c2:0e:8a:ee:af:f8:c9:
38:e5:64:39:60:63:74:82:e1:86:9b:0b:2a:af:9b:
b1:40:6b:22:f1:cc:07:70:b4:c8:dd:d2:93:8d:f8:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:B6:3C:F9:27:1C:FE:F2:3E:91:71:F4:C1:11:F4:83:BB:B9:EB
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/afb29442-cb58-4fe7-9319-202c1646019f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6::/40
Signature Algorithm: sha256WithRSAEncryption
75:55:bd:49:ed:20:08:30:d3:36:4d:1e:a2:c6:25:34:07:eb:
5e:75:43:b6:32:6e:3e:7f:8d:2b:91:46:5e:08:77:a6:ec:13:
cc:aa:b0:64:3e:2c:15:2b:9e:85:d8:e7:1c:ea:f3:31:2e:82:
46:19:07:58:8c:2d:ec:4a:88:c7:fe:2b:74:85:13:dc:d9:f0:
f2:e9:4e:8f:a4:ab:b0:df:4f:b7:8a:66:48:2d:a9:00:ea:36:
3b:98:52:cd:68:4b:61:b5:69:19:89:03:7a:1e:84:8d:0f:e1:
1c:18:be:3e:57:f5:f0:0c:81:50:d7:4f:19:85:d8:63:37:82:
21:e6:71:63:0f:1b:00:e6:13:f5:c6:5d:f2:ac:73:02:e2:c1:
ae:f8:6b:7b:9c:69:89:86:0f:94:cc:3d:4f:df:34:4a:c9:b2:
2f:99:cc:26:ea:cd:18:17:06:d2:df:9d:02:91:42:be:d2:18:
5e:d2:81:b3:25:20:7a:82:87:83:d0:b4:34:a1:4e:fd:58:0e:
5b:d7:7f:f9:7f:2f:fb:a9:5c:48:af:04:29:8f:a1:1f:83:95:
85:95:88:6e:88:08:7a:37:5e:e2:30:cc:ba:49:03:11:90:1f:
6a:00:44:ca:30:fe:d8:e4:54:f9:9b:df:4f:74:0f:73:e6:5b:
82:c6:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:43 2025 by rpki-client