Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa
File: 00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa (raw, json)
Hash identifier: cG5xLy9lqscMpqQiMoB21C4qdGravOvVkOvOHhqNF6Q=
Subject key identifier: B1:0F:33:11:E6:6D:00:14:74:F7:56:32:1B:7C:60:B7:48:2D:51:BB
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 0A57231DAC6A75ED132686F874B36B6BFA4AB050
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa
Signing time: Wed 30 Apr 2025 00:10:33 +0000
ROA not before: Wed 30 Apr 2025 00:10:33 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:57:23:1d:ac:6a:75:ed:13:26:86:f8:74:b3:6b:6b:fa:4a:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 30 00:10:33 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=4b6c32b4a5d255385bc6b1271d12d17562d4bfc2e48d7ddc75177d4953a8cc0d, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:12:67:76:9e:70:f7:fb:a6:24:91:d7:87:
a4:f0:3d:76:6d:8b:0a:ad:d0:9d:95:29:a4:70:ed:
66:be:52:44:56:33:e7:c8:b4:ac:2c:ef:c9:c0:07:
fb:45:ef:3f:69:70:96:8f:6b:65:62:9b:04:47:10:
1b:1d:09:a0:5f:85:5d:b3:43:a0:ea:23:0f:e0:47:
52:52:58:74:0b:2b:b7:c6:20:98:7f:9d:66:f6:b4:
54:ee:c0:4f:ce:39:49:ce:ea:9e:4e:18:f4:d1:ec:
46:cb:9f:53:7f:3d:f0:3c:ca:e0:89:e5:c5:5c:21:
d1:da:3d:36:59:ba:02:2c:d6:73:83:05:20:35:c3:
9c:c5:a3:fc:88:1e:2c:14:95:08:c1:7a:d3:1f:e0:
88:9a:f7:24:6f:d2:e7:68:7c:c9:59:0b:44:43:19:
e6:d3:17:cf:3e:7f:3d:9c:43:e0:83:b8:4c:c2:79:
b3:6e:f8:71:98:c1:70:f7:12:46:2b:92:a2:d3:5f:
77:28:00:20:8c:a0:5a:80:18:d9:e9:5d:cb:21:41:
c6:1b:a9:14:7e:3a:d1:40:25:3f:a2:76:f8:c9:4d:
da:f3:cb:57:58:0c:e5:df:e5:27:39:b0:98:fa:2b:
91:32:69:91:2f:ef:2d:90:e6:e3:d1:ad:de:42:08:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:33:11:E6:6D:00:14:74:F7:56:32:1B:7C:60:B7:48:2D:51:BB
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00e367f0-18fe-4be3-8ccd-885f75baf0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/36
Signature Algorithm: sha256WithRSAEncryption
18:ec:6d:55:eb:53:15:ca:c2:a1:ae:91:5e:c9:49:21:d8:d2:
ef:cd:24:a6:9d:76:00:5c:63:50:15:76:6c:6b:b8:d3:a9:25:
11:2d:ff:bf:97:07:5e:d9:2c:ad:f4:10:1a:9d:86:94:2d:04:
37:2f:f1:dc:9c:e6:a8:c1:26:d1:fe:b5:8a:d0:89:38:d9:6b:
a9:8b:d6:e0:53:82:bf:2a:4f:42:10:64:45:20:51:4f:52:c2:
fd:e9:72:7b:39:f8:b6:da:dd:86:68:c0:1d:17:b9:b6:00:9c:
f0:8c:55:60:d2:e9:0b:c9:64:ed:4c:54:3a:4f:ec:ee:c9:8e:
3d:71:de:b6:bb:a6:ca:59:77:e3:d8:12:df:ab:d0:9d:2b:15:
02:5a:5b:5f:b6:96:72:0a:67:5d:1f:1a:07:8e:52:f9:45:22:
8b:d2:e7:b3:0b:3c:85:f2:01:52:b0:59:9b:f5:48:69:17:7c:
5a:da:54:29:ac:dd:b7:90:1a:1d:64:f5:a2:e6:0a:56:e1:a4:
fa:ab:53:af:73:73:4d:3d:ac:6c:97:70:93:c0:9e:77:91:d7:
c5:c7:fb:07:08:6b:d0:e8:26:aa:0f:d2:70:b1:9d:9d:fc:c3:
ec:c2:d0:3e:4f:57:dd:52:e1:cf:a0:c2:e2:97:ea:b5:52:8c:
d0:f0:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:54:29 2025 by rpki-client