Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0921c3e8-5877-4b50-aeac-160b00663d91.roa
File: 0921c3e8-5877-4b50-aeac-160b00663d91.roa (raw, json)
Hash identifier: TX92ukMjtHYkGmpmWHqwW/ibjAq4kmvAeQGhJ//zH6E=
Subject key identifier: C3:A6:AC:9B:31:B5:00:5D:A2:6A:F8:25:27:C9:85:B3:6E:97:EC:0D
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2A5F4DC1B1BC7E1DA959E9A8670BA500812B8BCE
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0921c3e8-5877-4b50-aeac-160b00663d91.roa
Signing time: Sat 27 Sep 2025 00:53:08 +0000
ROA not before: Sat 27 Sep 2025 00:53:08 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:9800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5f:4d:c1:b1:bc:7e:1d:a9:59:e9:a8:67:0b:a5:00:81:2b:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 27 00:53:08 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=cbf9cd9ce1cfdd7a87d8cc500d45cbdf3012fb6d639cfb01503540632c6c5bbe, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:6c:79:12:0d:e3:6d:1b:f2:be:b9:7e:15:
e7:2f:b3:9b:6b:cc:d5:94:ad:f2:0f:fb:9c:a6:96:
bc:96:08:db:0a:44:60:ab:35:41:ff:f4:75:61:9d:
4e:62:a9:e4:7d:6c:cd:f3:a3:f1:32:ba:3d:ac:b3:
ad:43:62:d6:dd:ab:05:bd:55:f6:68:26:d7:ed:63:
b5:97:7e:8c:6f:64:ba:3e:d2:04:33:88:1e:20:85:
41:7f:88:98:3f:5b:d6:52:2f:0b:e2:bc:de:11:31:
36:1e:77:5d:c3:3e:99:ab:8b:f0:31:30:58:97:3e:
06:b5:31:a7:0a:5e:3d:3c:87:1c:46:6f:b6:72:35:
37:ec:21:87:33:50:a8:76:6f:06:d8:0c:9a:0d:0f:
65:ab:e4:1c:1f:db:3d:64:6c:80:f8:02:26:a1:89:
f1:13:16:e8:35:31:4b:a7:7a:49:85:47:50:7c:3a:
4f:01:df:85:19:4a:96:b3:de:d7:81:cf:45:d8:69:
5d:19:f4:da:ff:a5:c6:c3:32:21:38:c6:b6:97:3d:
ac:dc:9d:8b:be:14:44:dc:fb:b9:8c:76:8e:94:5f:
26:e7:c9:b6:b7:23:44:7d:ae:fd:30:94:65:e6:df:
79:95:43:8c:48:c9:f5:98:6e:d5:c5:26:b9:96:37:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A6:AC:9B:31:B5:00:5D:A2:6A:F8:25:27:C9:85:B3:6E:97:EC:0D
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/0921c3e8-5877-4b50-aeac-160b00663d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9800::/40
Signature Algorithm: sha256WithRSAEncryption
61:26:ba:dc:73:0e:e4:c2:d5:ae:d3:8a:2e:33:0d:9b:f2:7a:
f1:94:b0:d5:08:71:3e:dc:b3:f3:29:ba:01:7e:7a:5b:54:12:
37:84:11:1a:8d:46:35:4a:f3:56:8e:41:10:b3:fd:13:3c:41:
ce:02:2e:b2:a0:c3:48:48:22:c5:f5:04:51:1c:42:b9:4a:19:
1e:c5:62:14:4a:6c:c8:8e:22:ba:91:c3:43:9e:56:ea:fd:1b:
4e:5c:77:54:c6:38:3a:66:8f:c6:b2:36:80:48:86:5b:89:7d:
5c:06:70:25:04:1d:a3:5a:94:0d:de:c3:1f:ac:74:d1:be:f6:
40:ee:c9:74:20:8a:f6:8e:e6:1c:73:fc:ce:47:db:7e:52:4e:
47:26:78:f6:d1:e7:bf:e9:1a:00:25:15:90:de:bd:7c:72:9a:
54:7f:13:72:62:ed:b8:51:d1:d8:27:1c:7c:29:59:80:87:67:
25:ad:79:13:f2:4c:e5:e7:4c:41:f4:d2:cc:fc:05:d2:4f:07:
71:66:63:7f:2d:69:fb:f1:27:31:88:ca:b3:f8:13:1c:8b:1f:
b7:6c:74:b4:a0:7e:81:84:16:e5:ec:e4:cd:ab:07:e8:4b:47:
52:15:4b:6b:27:c8:29:0d:3a:b7:de:bc:7d:76:fe:cd:34:16:
1d:71:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:08 2025 by rpki-client