Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f4581009-959f-4805-904e-a85043ac559b.roa
File: f4581009-959f-4805-904e-a85043ac559b.roa (raw, json)
Hash identifier: ggsHVNHWMgSh9h4xgyPcH3NAJFYyYtsbBLhSmHCmEwI=
Subject key identifier: 9A:89:9B:26:8E:D0:E3:BF:07:F6:E7:8A:ED:71:B6:BF:33:BE:EF:1F
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 17D3409832ED04AE477C3EF0D474F3C581C1C6D2
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f4581009-959f-4805-904e-a85043ac559b.roa
Signing time: Wed 03 Sep 2025 00:21:22 +0000
ROA not before: Wed 03 Sep 2025 00:21:22 +0000
ROA not after: Wed 08 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:a800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d3:40:98:32:ed:04:ae:47:7c:3e:f0:d4:74:f3:c5:81:c1:c6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 3 00:21:22 2025 GMT
Not After : Oct 8 23:59:59 2025 GMT
Subject: serialNumber=e0b573fef5c2f58738bacda6d381adfa0825e36bf818e236124878c439772116, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:7d:1d:64:c7:4b:75:58:60:2d:57:13:7b:
74:45:e4:3c:e4:9a:fa:d8:ad:85:95:b8:b4:d7:a0:
56:2d:e3:4c:88:06:09:2c:e1:86:fa:68:aa:9c:8e:
f1:8b:d7:20:8c:02:b2:97:0e:36:98:3a:8e:6c:4c:
c8:8f:50:fc:ca:85:2e:23:f4:d0:c6:48:1a:a6:0e:
8f:c0:b5:a1:dc:ad:a7:cd:95:74:78:80:b0:dc:c2:
b6:56:6e:e7:2e:ef:00:7f:4c:36:ac:5c:88:1a:97:
98:82:8f:77:70:71:83:53:b2:ce:9c:c0:8c:df:fe:
5c:05:0a:d0:a6:48:1b:0c:5e:c2:fc:13:6b:6c:50:
ab:0e:72:91:b8:db:a2:c5:0f:81:99:b6:5a:2e:e2:
55:4b:7b:b7:09:f4:24:a9:5f:89:7c:0f:72:30:ea:
67:ea:88:2b:10:93:7c:ef:9c:aa:03:88:09:46:84:
d0:65:5e:2d:94:3b:0a:9f:30:f7:ec:33:99:ae:e9:
40:aa:ca:ea:aa:09:aa:13:c0:b2:15:7b:3e:d2:86:
39:d8:ff:c4:67:1c:42:57:59:6d:a7:f3:52:e0:09:
fb:66:83:35:20:62:db:7e:b1:8e:00:1d:82:e9:e3:
4c:b3:06:f0:9a:8c:6e:79:4e:d6:6f:47:fe:ca:9e:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:9B:26:8E:D0:E3:BF:07:F6:E7:8A:ED:71:B6:BF:33:BE:EF:1F
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f4581009-959f-4805-904e-a85043ac559b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a800::/40
Signature Algorithm: sha256WithRSAEncryption
6a:ec:fb:6f:c7:e5:13:58:46:b8:b8:97:a4:36:0f:a2:bc:74:
78:8e:2d:47:93:f3:bf:35:bd:a7:31:e8:d0:d4:34:51:c1:40:
e8:99:54:b7:07:42:9e:3e:d1:af:9a:a0:b0:5d:fc:29:96:4c:
71:30:a5:94:e5:a2:b4:54:c8:d0:67:ab:e4:ff:ca:06:20:06:
9f:f7:32:ab:3b:41:ec:dd:55:cc:a8:79:c0:07:49:f0:db:dd:
8a:cc:3c:98:6f:7b:65:60:4d:9b:7d:c7:d0:13:f9:87:45:67:
65:68:ae:d5:9d:02:30:ab:1e:ea:39:2d:9d:86:1e:70:0e:5e:
53:cf:c4:3f:70:f8:85:2c:ea:c7:df:3f:a9:4c:87:20:40:66:
de:2f:eb:b0:26:93:3a:eb:3d:a5:07:8b:5a:3b:d1:28:f5:3a:
10:79:81:92:93:c7:d5:bb:11:2c:94:97:a3:61:e6:d4:e8:4d:
f6:27:69:29:6c:a4:09:87:46:71:50:c8:fe:87:70:3e:96:4c:
2c:f5:91:a7:c1:83:d2:ae:6f:56:96:8b:56:58:f5:38:de:bf:
91:88:05:7a:52:dc:5e:16:a3:24:8e:32:8d:46:64:f5:d7:59:
94:44:41:24:5c:3c:f9:1c:a7:25:16:ae:05:be:a6:25:9c:6a:
9c:81:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:35 2025 by rpki-client