Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa
File: 00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa (raw, json)
Hash identifier: gfShHsFbKqcBtGZv/WDmuXftkpA0TQE7k1ipLHBIqGI=
Subject key identifier: CA:F0:56:41:18:71:38:7A:B0:B7:30:E7:AE:3B:4F:0C:11:86:CE:05
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 1FE1D8C560E5306A14CE5F9295A2B7F7784E0CD9
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa
Signing time: Mon 29 Sep 2025 15:40:19 +0000
ROA not before: Mon 29 Sep 2025 15:40:19 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e1:d8:c5:60:e5:30:6a:14:ce:5f:92:95:a2:b7:f7:78:4e:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 29 15:40:19 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=29d4ac5d18c2c0fba692bbac0800eba17afeaf97c32c548379f90b4e15fcc6ef, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:bf:e1:d3:9f:f9:d6:22:54:37:ee:fa:c4:
4d:ad:2a:c5:3a:60:73:34:a9:7f:27:5d:3c:8b:33:
64:5a:d2:d9:09:0d:e5:08:6b:68:14:1c:d7:84:bb:
4f:ce:d2:7a:b6:20:18:da:82:84:d6:9c:16:77:c6:
6d:4e:8f:7c:c0:88:52:28:18:1e:d4:02:7b:09:b6:
7c:d2:59:3d:dd:f0:12:4f:9b:39:76:23:ba:43:6c:
2c:da:51:bd:cf:cc:09:99:08:94:ab:9e:85:e8:0d:
c5:ba:6b:6d:e0:9b:56:79:67:2b:4d:ad:25:1e:cd:
9f:b4:f5:7d:10:5a:79:26:e4:3e:ed:97:12:23:7e:
20:79:2f:af:28:f3:76:c6:58:fd:36:1f:84:3d:6d:
27:f4:90:66:a6:28:bc:4e:6e:46:69:c5:58:e0:e4:
89:af:19:60:b1:a8:b2:ef:cd:9c:a0:01:40:82:70:
8d:d5:4b:b6:2a:82:af:46:90:a5:60:a8:75:77:14:
ef:1b:93:3d:a6:e4:88:54:c3:a7:e3:b2:bf:c7:34:
a0:24:f1:2d:a7:27:a5:4d:b4:ff:31:55:b9:1f:15:
1c:90:ae:58:bd:a4:01:1a:92:7e:67:2c:1b:44:5a:
ed:6d:cf:f3:fd:5b:5a:1b:6b:ee:9e:71:c9:57:8c:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:56:41:18:71:38:7A:B0:B7:30:E7:AE:3B:4F:0C:11:86:CE:05
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/36
Signature Algorithm: sha256WithRSAEncryption
93:ea:7b:eb:f2:82:f2:07:4e:28:e5:72:fa:91:2c:f1:f3:82:
94:2a:df:a1:b7:20:55:28:cd:98:fc:82:5f:5b:b7:61:5c:59:
68:56:85:46:86:1b:bb:cc:a8:4c:67:17:33:db:b3:68:c8:62:
5b:58:d6:cc:94:ef:25:ec:bb:d7:7b:91:de:97:eb:d9:04:30:
45:24:00:c2:e7:c5:e3:25:5f:cd:ef:33:55:b5:ee:85:db:6b:
c1:11:7a:d9:2d:2a:5d:33:28:18:2a:79:2e:63:b4:96:59:50:
e4:5d:f8:30:3c:78:09:3c:5e:74:88:39:9d:1a:e7:d1:92:ec:
52:f2:09:d4:da:ef:01:f8:22:b7:fc:be:4d:1a:39:e7:74:6e:
11:85:ee:d5:92:9c:66:c4:1e:33:28:c4:da:fd:06:e6:ae:20:
44:cd:36:0b:cf:49:5a:39:b0:be:9c:d3:11:54:ee:a5:b2:71:
66:d9:3b:1c:5a:e6:5b:d9:99:46:47:99:ae:b6:cb:4d:7f:82:
e6:6b:35:a7:7e:fc:d7:04:5e:a6:4e:54:ba:4e:85:fd:81:a1:
b1:2d:fd:ab:36:65:19:e4:bc:08:45:a2:c1:ec:ed:2c:86:47:
10:ea:49:37:99:3a:ff:69:62:a2:df:21:f9:7f:52:ad:75:7e:
30:3f:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:07 2025 by rpki-client