Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0921c3e8-5877-4b50-aeac-160b00663d91.roa
File: 0921c3e8-5877-4b50-aeac-160b00663d91.roa (raw, json)
Hash identifier: 1FR0EysWav25q96oBTEueEJR2WwDouldv17V5PNx098=
Subject key identifier: 2A:AF:27:4C:13:83:95:02:FA:0E:D7:F2:F9:A7:CF:7F:6F:C4:2B:15
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 3837E0079FABDDF527BF74DF2D95984EA915E07C
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0921c3e8-5877-4b50-aeac-160b00663d91.roa
Signing time: Fri 08 Aug 2025 00:40:04 +0000
ROA not before: Fri 08 Aug 2025 00:40:04 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:9800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:37:e0:07:9f:ab:dd:f5:27:bf:74:df:2d:95:98:4e:a9:15:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Aug 8 00:40:04 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=5b06f84e1f4990036ee6a40855a11c6a95e1442de1149e33888977fa3a6992f2, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:12:cf:41:ca:10:a3:75:40:fd:90:6c:d6:
f9:7b:a8:c6:65:67:b7:0d:43:05:83:ca:4e:00:21:
e4:63:dd:39:f4:90:a1:7f:8d:d4:08:32:f1:c4:54:
64:80:c3:df:20:49:07:74:03:39:f6:26:63:fa:c4:
55:61:8e:77:a7:63:63:fa:13:a8:b1:2a:3c:4a:31:
73:09:b0:00:73:8c:2e:6b:ed:1c:e0:00:e8:10:56:
2b:cc:1b:0e:f1:bd:89:dc:5f:f0:d1:8c:1a:71:20:
03:64:7d:70:b9:71:d6:87:44:57:54:a4:33:bf:94:
2b:87:2d:27:36:e9:c7:09:d8:78:2e:61:42:3c:51:
c6:b7:13:9c:d5:50:4f:16:55:fb:79:c0:32:a7:64:
4a:f2:ba:33:cf:06:6c:04:98:a3:ec:c8:e4:f2:02:
fd:85:b4:66:e4:70:93:9e:d5:6e:4f:cf:4d:40:5b:
7e:e7:dd:0d:23:1f:a8:19:89:88:ce:7b:38:4d:3b:
78:21:b2:95:6e:79:26:1d:63:e2:9b:6a:f8:35:ea:
f7:46:9f:f3:04:85:b4:ba:bd:c0:ab:38:ec:16:ee:
8f:b2:46:3f:e0:c7:90:e8:05:7d:ff:13:10:03:27:
06:4f:72:c2:37:dc:1d:e9:ae:a7:2a:0a:f5:46:4e:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:27:4C:13:83:95:02:FA:0E:D7:F2:F9:A7:CF:7F:6F:C4:2B:15
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0921c3e8-5877-4b50-aeac-160b00663d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9800::/40
Signature Algorithm: sha256WithRSAEncryption
0c:c0:3f:98:d6:af:de:31:cd:80:f7:2e:ce:50:31:04:42:4c:
cb:94:10:e9:e6:88:3c:b8:ad:78:8c:8d:9c:dd:d1:87:54:54:
77:2d:da:48:1a:6a:4c:eb:8f:80:51:54:52:73:fd:7e:59:09:
1c:7d:b8:98:88:5c:a2:46:5f:31:82:aa:24:fb:1f:22:af:c2:
66:bb:e6:8a:f6:ef:9d:4d:55:e2:96:20:f7:b4:47:95:ef:d2:
c0:05:ca:aa:0e:14:0c:c2:5d:de:f6:4f:ea:ae:9f:97:09:f9:
e0:75:64:71:27:43:35:4f:99:ca:90:88:1d:ab:4a:17:6a:c4:
9d:3f:50:7a:2a:27:fa:8e:b8:88:09:e4:46:bc:b9:b3:68:e2:
68:79:d9:3e:e3:3a:cc:44:5e:3b:25:bf:0b:9f:5f:7c:23:70:
fe:07:f8:9b:ab:54:d3:c3:ba:97:7c:43:e5:f3:e4:db:2c:00:
95:a2:20:07:1e:19:9b:2a:d9:55:71:40:c4:20:a8:b4:79:ce:
0b:4b:44:30:71:22:b0:14:af:aa:ab:20:d2:20:fa:75:29:ad:
ab:ed:98:3a:87:14:9c:2a:51:0c:2f:d0:27:31:8b:da:a4:25:
4c:0b:3f:a3:96:fb:e5:68:8d:fd:8f:d1:31:25:34:df:d2:73:
2d:b7:45:02
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUODfgB5+r3fUnv3TfLZWYTqkV4HwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA4MDgwMDQwMDRaFw0yNTA5MTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDViMDZmODRlMWY0OTkwMDM2ZWU2YTQwODU1YTExYzZhOTVlMTQ0MmRlMTE0
OWUzMzg4ODk3N2ZhM2E2OTkyZjIxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLREs9ByhCjdUD9kGzW+XuoxmVntw1DBYPKTgAh5GPdOfSQoX+N1Agy8cRU
ZIDD3yBJB3QDOfYmY/rEVWGOd6djY/oTqLEqPEoxcwmwAHOMLmvtHOAA6BBWK8wb
DvG9idxf8NGMGnEgA2R9cLlx1odEV1SkM7+UK4ctJzbpxwnYeC5hQjxRxrcTnNVQ
TxZV+3nAMqdkSvK6M88GbASYo+zI5PIC/YW0ZuRwk57Vbk/PTUBbfufdDSMfqBmJ
iM57OE07eCGylW55Jh1j4ptq+DXq90af8wSFtLq9wKs47Bbuj7JGP+DHkOgFff8T
EAMnBk9ywjfcHemupyoK9UZOL2kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQqrydM
E4OVAvoO1/L5p89/b8QrFTAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
MDkyMWMzZTgtNTg3Ny00YjUwLWFlYWMtMTYwYjAwNjYzZDkxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8WY
MA0GCSqGSIb3DQEBCwUAA4IBAQAMwD+Y1q/eMc2A9y7OUDEEQkzLlBDp5og8uK14
jI2c3dGHVFR3LdpIGmpM64+AUVRSc/1+WQkcfbiYiFyiRl8xgqok+x8ir8Jmu+aK
9u+dTVXiliD3tEeV79LABcqqDhQMwl3e9k/qrp+XCfngdWRxJ0M1T5nKkIgdq0oX
asSdP1B6Kif6jriICeRGvLmzaOJoedk+4zrMRF47Jb8Ln198I3D+B/ibq1TTw7qX
fEPl8+TbLACVoiAHHhmbKtlVcUDEIKi0ec4LS0QwcSKwFK+qqyDSIPp1Ka2r7Zg6
hxScKlEML9AnMYvapCVMCz+jlvvlaI39j9ExJTTf0nMtt0UC
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:15 2025 by rpki-client