Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/b128bc8d-b462-4700-9503-592938317487.roa
File: b128bc8d-b462-4700-9503-592938317487.roa (raw, json)
Hash identifier: giarn6HHCUlE1z1lw7ZxEPd3kVL3KYnn/4LY+a/4ZBA=
Subject key identifier: FB:DC:B4:A1:94:18:0B:F1:E4:09:D6:F4:27:D0:17:C9:C1:D2:0D:75
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2E08DB37E89CB8BB6C249761EC0E086299143C9E
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/b128bc8d-b462-4700-9503-592938317487.roa
Signing time: Mon 26 May 2025 15:10:47 +0000
ROA not before: Mon 26 May 2025 15:10:47 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:08:db:37:e8:9c:b8:bb:6c:24:97:61:ec:0e:08:62:99:14:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:47 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=318f87289eaac12d453b6ee876cb84e40e6fca449a7ee8eefc32976ee9a9b17e, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:36:d8:18:eb:9e:9a:cc:77:ec:76:62:64:
11:35:56:ca:e0:10:75:71:5c:96:bd:09:24:41:aa:
c6:e6:2d:45:cf:ea:78:a8:bb:cf:af:70:50:25:45:
0a:e4:c0:0d:4e:c0:9a:0a:c8:fc:80:ab:9c:4e:7c:
ea:0c:88:4d:71:b8:a0:5a:ef:0d:c2:aa:b6:7d:8c:
ef:a4:99:9e:b1:b9:52:c8:24:db:53:0c:70:ce:c0:
4f:33:ba:c0:c7:33:a4:9e:f6:16:db:18:40:c3:28:
59:19:f3:cc:d0:78:04:5c:db:11:b9:7a:97:bf:e4:
b1:99:80:92:d9:27:ae:f3:ca:6f:6b:48:2f:ee:69:
2b:35:d6:e4:82:39:fb:a1:3d:56:a5:fb:60:3e:5f:
55:80:77:a9:a7:71:4f:4b:39:66:91:f6:43:a6:75:
b5:3f:48:28:08:1b:02:0f:c9:e7:2a:cf:e0:20:0b:
83:2f:f3:55:7b:20:80:67:45:76:e1:f9:10:6e:8c:
0a:f3:05:88:9c:45:fd:2c:95:1a:39:b5:f1:dd:00:
41:43:f8:b2:ca:56:03:62:c8:f8:cd:97:40:3a:24:
f5:d5:6e:cd:e6:98:c0:b3:d8:f3:ff:54:fd:15:f7:
0a:79:9c:a3:f2:88:c4:30:71:78:18:d7:4f:ed:28:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:B4:A1:94:18:0B:F1:E4:09:D6:F4:27:D0:17:C9:C1:D2:0D:75
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/b128bc8d-b462-4700-9503-592938317487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:880::/48
Signature Algorithm: sha256WithRSAEncryption
72:87:17:f1:9b:08:a4:4f:60:a9:42:7d:af:cd:92:49:44:80:
6c:bc:5d:09:5b:e9:8c:69:b6:b6:d7:ed:0e:25:91:fc:45:7e:
9f:34:22:5f:da:96:7b:03:ad:fe:48:fd:04:aa:54:fa:95:56:
de:a4:4e:3a:86:8a:70:a0:4f:65:de:a0:80:3d:fa:a2:03:88:
91:86:5d:62:c6:7d:0f:26:3b:96:b2:e5:c9:ac:a5:6f:b2:51:
70:a3:e4:89:5b:93:2e:6f:42:48:f2:ac:f2:d9:0d:83:d0:d6:
76:6a:49:bf:9b:dc:e5:94:f5:e5:31:79:b7:8d:d7:b4:92:26:
02:85:cb:04:68:3e:de:65:47:41:dc:b3:16:4d:2d:e8:91:19:
45:1a:72:a4:5e:a3:96:e7:25:c7:f4:cd:f5:3d:19:cd:22:10:
9c:71:da:a6:95:cb:db:e6:2b:78:59:99:3b:23:20:bc:9b:88:
02:2e:c4:8a:4b:a4:83:39:33:ea:5f:06:59:83:f8:31:9f:15:
27:6c:29:c7:37:5a:bd:81:ee:57:b2:50:8d:20:6e:3b:ad:73:
b0:ed:fe:d9:ec:1e:2b:ed:74:77:40:a8:0b:93:57:ca:fe:f1:
88:c7:1e:74:90:77:d7:05:9e:a2:a0:b2:53:6b:ab:58:fc:4d:
a2:59:12:84
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULgjbN+icuLtsJJdh7A4IYpkUPJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA1MjYxNTEwNDdaFw0yNTA2MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDMxOGY4NzI4OWVhYWMxMmQ0NTNiNmVlODc2Y2I4NGU0MGU2ZmNhNDQ5YTdl
ZThlZWZjMzI5NzZlZTlhOWIxN2UxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1eNtgY656azHfsdmJkETVWyuAQdXFclr0JJEGqxuYtRc/qeKi7z69wUCVF
CuTADU7AmgrI/ICrnE586gyITXG4oFrvDcKqtn2M76SZnrG5Usgk21MMcM7ATzO6
wMczpJ72FtsYQMMoWRnzzNB4BFzbEbl6l7/ksZmAktknrvPKb2tIL+5pKzXW5II5
+6E9VqX7YD5fVYB3qadxT0s5ZpH2Q6Z1tT9IKAgbAg/J5yrP4CALgy/zVXsggGdF
duH5EG6MCvMFiJxF/SyVGjm18d0AQUP4sspWA2LI+M2XQDok9dVuzeaYwLPY8/9U
/RX3Cnmco/KIxDBxeBjXT+0oiyUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT73LSh
lBgL8eQJ1vQn0BfJwdINdTAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
YjEyOGJjOGQtYjQ2Mi00NzAwLTk1MDMtNTkyOTM4MzE3NDg3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8AI
gDANBgkqhkiG9w0BAQsFAAOCAQEAcocX8ZsIpE9gqUJ9r82SSUSAbLxdCVvpjGm2
ttftDiWR/EV+nzQiX9qWewOt/kj9BKpU+pVW3qROOoaKcKBPZd6ggD36ogOIkYZd
YsZ9DyY7lrLlyaylb7JRcKPkiVuTLm9CSPKs8tkNg9DWdmpJv5vc5ZT15TF5t43X
tJImAoXLBGg+3mVHQdyzFk0t6JEZRRpypF6jluclx/TN9T0ZzSIQnHHappXL2+Yr
eFmZOyMgvJuIAi7Eikukgzkz6l8GWYP4MZ8VJ2wpxzdavYHuV7JQjSBuO61zsO3+
2eweK+10d0CoC5NXyv7xiMcedJB31wWeoqCyU2urWPxNolkShA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:24:25 2025 by rpki-client