Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1e498054-99a2-4f2b-82cb-7448499c313c.roa
File: 1e498054-99a2-4f2b-82cb-7448499c313c.roa (raw, json)
Hash identifier: niADDtCC9eXSjfhEdgDgfYtduqn/A2sN9Ug1KP1c+sc=
Subject key identifier: 80:E7:31:45:5E:BC:62:72:A6:6B:42:EB:5F:EA:C7:70:BA:5D:00:82
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 08116F3662BF9310960363FBC10419780358EAA1
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1e498054-99a2-4f2b-82cb-7448499c313c.roa
Signing time: Fri 20 Jun 2025 00:20:52 +0000
ROA not before: Fri 20 Jun 2025 00:20:52 +0000
ROA not after: Fri 25 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:11:6f:36:62:bf:93:10:96:03:63:fb:c1:04:19:78:03:58:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jun 20 00:20:52 2025 GMT
Not After : Jul 25 23:59:59 2025 GMT
Subject: serialNumber=3c22b4e95d86d1385fb7b706d56f8e6fc842d20083b66e9252b6b240f18264cc, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:e2:e7:54:af:7c:69:e6:c3:14:2c:e7:c7:
86:25:0f:db:a5:bb:d2:80:03:11:a1:15:bf:42:31:
64:6e:45:26:ab:4a:ec:58:01:5d:62:38:b8:7d:7a:
c1:30:35:8a:54:6f:b9:f0:61:3e:44:8f:1b:cc:8f:
29:ee:5b:9c:fb:d3:0d:bc:fb:01:20:8b:0e:6c:a9:
47:73:7e:99:da:f1:7f:43:b6:27:6c:eb:cc:8f:5e:
8b:d6:78:b8:d9:d6:ec:bf:01:f6:3a:dc:3e:02:ea:
8c:02:8c:1b:95:7a:b0:6c:dd:86:78:5d:0d:08:21:
a4:7b:c0:7b:e8:fa:86:5f:98:c2:b2:83:e8:af:55:
18:7f:d4:3c:64:43:8d:c9:12:1b:5c:e8:a7:81:df:
8e:f0:06:7e:16:42:26:ad:9b:f7:a4:f3:52:80:17:
ce:c7:95:88:65:33:c3:2a:61:c8:66:35:77:a2:07:
81:71:7b:28:ab:d8:0f:fa:20:c5:78:81:6c:8f:78:
c2:bc:d4:07:18:40:0f:76:84:c6:6c:25:28:88:84:
85:59:6d:a1:21:3e:3b:3c:a9:c3:bc:c5:0b:7b:7f:
57:e3:a9:13:14:a4:c3:56:71:46:b5:da:94:d9:cf:
1e:b2:bf:1d:55:e8:2d:c0:2d:75:c0:23:89:d6:9d:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:31:45:5E:BC:62:72:A6:6B:42:EB:5F:EA:C7:70:BA:5D:00:82
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1e498054-99a2-4f2b-82cb-7448499c313c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
81:33:51:46:ec:a6:72:ae:9c:80:d6:cc:9e:ad:5b:93:ab:2f:
73:e1:b5:69:1d:4d:a2:ad:e0:4a:bd:60:71:5a:ef:0a:cf:5c:
33:90:5c:92:00:45:54:b4:51:7a:da:4f:2d:6a:4f:b9:85:8b:
f2:e7:bc:72:8f:28:0c:61:e4:f7:a8:b3:bb:43:6b:d0:82:12:
18:fa:d0:30:e5:82:f1:aa:22:04:bf:10:24:7a:ff:1e:67:f1:
be:c6:e2:17:17:bb:29:32:0e:e7:c3:75:5c:e4:eb:b8:30:ac:
b6:bf:e3:16:f2:a4:3f:a8:15:a0:91:3a:af:ed:04:bc:f8:b4:
51:69:0b:22:72:c6:e4:27:89:45:c4:79:4d:f1:6b:f5:f8:3a:
89:88:43:e1:fd:6d:9e:2d:cb:d5:23:f7:77:a2:e8:2d:8f:78:
7c:d0:7d:17:5a:e4:da:a9:b3:b0:a3:39:2b:d8:39:9f:fc:33:
37:f4:1d:9e:b3:c3:72:fc:fc:96:c0:8c:10:03:3e:ca:3f:d7:
e7:ff:3c:28:06:0d:2a:77:80:ad:b7:71:12:90:43:34:a1:db:
51:63:52:e4:f1:04:91:1a:12:cd:e5:58:2d:4d:e6:39:85:0b:
a9:77:b6:eb:ed:9b:f1:a5:99:38:9f:1f:34:01:cb:8f:93:d7:
99:f2:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:18:15 2025 by rpki-client