Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/b128bc8d-b462-4700-9503-592938317487.roa
File: b128bc8d-b462-4700-9503-592938317487.roa (raw, json)
Hash identifier: 2W1njgWO13jMCRjYJ9Gw9/BUiXdN+MYKMoVNITcB4sM=
Subject key identifier: 53:3D:FD:4B:72:DF:85:9B:0F:16:B2:A7:B5:7D:A6:CC:A6:65:AD:3B
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 7E76F4825A378799B0220181DDC49A2FEA6FAC84
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/b128bc8d-b462-4700-9503-592938317487.roa
Signing time: Wed 03 Sep 2025 00:20:04 +0000
ROA not before: Wed 03 Sep 2025 00:20:04 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:76:f4:82:5a:37:87:99:b0:22:01:81:dd:c4:9a:2f:ea:6f:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:20:04 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=247040d79fb036ecbe1057aaf8e21422eb54a8d97f1bb760c2e227b6d0273053, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:e1:a2:fb:8b:a4:44:49:9d:f4:59:39:48:
bf:d3:18:47:0f:01:82:98:1a:ac:d1:c2:33:1b:a7:
ea:74:fd:91:3a:43:8d:91:a7:65:9a:2b:20:49:db:
a0:8b:bd:b1:89:5d:9b:9d:83:4f:1d:d3:40:ab:9e:
5d:87:1e:24:28:5d:03:72:30:a7:0a:aa:bf:97:68:
4e:c8:ad:90:fa:d0:9d:03:36:67:77:a1:52:6e:f9:
84:d9:a9:c8:21:53:c3:e2:67:1f:16:5a:17:e5:d6:
e0:93:ba:51:1c:84:43:ac:2f:99:c9:be:6d:94:ce:
7c:6a:4a:91:7d:0c:4d:0a:d4:67:83:30:48:16:80:
ae:30:e8:2c:0b:69:16:f4:32:90:45:ea:6b:dd:5f:
48:34:0e:21:26:06:a4:ad:c8:94:1d:e9:07:dd:b9:
ed:04:91:7e:17:4b:28:44:40:28:81:a8:c4:48:cd:
c9:a7:a0:da:c8:65:e9:40:16:e6:7a:91:ce:cf:29:
6e:c9:b3:88:93:ae:4b:19:49:f0:98:c2:2e:03:c6:
9e:ba:b9:6b:ba:99:9e:60:75:3b:ad:61:3c:bd:63:
33:83:b7:d5:5e:27:7d:bc:f7:70:c4:50:c3:db:2b:
f4:9c:2e:1b:20:5d:11:9b:a7:2c:4d:88:b4:5e:ce:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:FD:4B:72:DF:85:9B:0F:16:B2:A7:B5:7D:A6:CC:A6:65:AD:3B
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/b128bc8d-b462-4700-9503-592938317487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:880::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1c:2f:11:31:9e:c3:ad:d6:8c:6b:33:13:89:92:24:34:6d:
09:9f:6a:1a:05:72:f3:eb:59:ae:05:69:56:04:9a:29:5c:4f:
5e:3d:ad:8f:fe:80:5d:7c:f3:ae:14:e0:c1:77:8f:0f:78:65:
dc:5f:c1:97:53:ce:0b:e9:46:5b:b1:b5:fd:fb:9e:c5:d6:fa:
92:92:16:a1:49:9d:8c:c0:8c:6e:7b:fa:3e:f5:22:eb:ea:8d:
f2:7b:3b:f6:b1:e8:c5:20:2b:c4:af:43:28:8a:f4:6d:97:2d:
fc:69:0d:81:0a:8f:b8:1d:55:e2:80:8b:1d:2a:c0:eb:23:59:
2f:52:9b:bf:e9:1f:e4:45:ee:cb:59:7f:61:0d:fc:9a:00:96:
1e:22:4d:99:1d:5b:cd:3b:59:f6:5b:ce:e1:7a:00:40:4a:37:
5c:74:6c:3e:02:b9:01:c9:54:e7:f0:7c:2d:3e:52:19:55:c7:
cc:a8:75:e4:48:8c:69:10:a0:e5:e6:be:32:e9:67:d5:bd:11:
b5:dd:58:3e:30:13:e6:da:4f:07:d5:61:04:1c:43:56:41:58:
0b:79:a0:6c:98:22:e1:40:56:95:11:ec:78:e6:88:07:c1:99:
8c:df:46:e5:cf:9a:96:b1:87:19:2c:20:75:2a:eb:ed:54:0b:
68:7c:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:33 2025 by rpki-client