Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2743eb54-0e16-4048-a058-1bc32c140fc6.roa
File: 2743eb54-0e16-4048-a058-1bc32c140fc6.roa (raw, json)
Hash identifier: qo3XB52396KWEWLPkYmy+Mq9/Y34Dzwp84bvsqldy44=
Subject key identifier: 48:E6:AE:98:90:C3:C7:86:A0:42:74:9B:46:D9:DC:67:13:9C:2F:DB
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 5D983EC8D1324BA01362205C830CCA873C77AC34
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2743eb54-0e16-4048-a058-1bc32c140fc6.roa
Signing time: Fri 20 Jun 2025 00:11:20 +0000
ROA not before: Fri 20 Jun 2025 00:11:20 +0000
ROA not after: Fri 25 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b840::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:98:3e:c8:d1:32:4b:a0:13:62:20:5c:83:0c:ca:87:3c:77:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jun 20 00:11:20 2025 GMT
Not After : Jul 25 23:59:59 2025 GMT
Subject: serialNumber=16223cd899a13e4aaa0ba2e242f0fd0f84318a284f8ddec0d4cdd4e880eeaf95, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:c2:e5:70:a8:27:74:c6:0c:84:eb:50:c8:
bb:39:6f:2b:c5:83:57:0e:4a:23:7d:b2:ff:73:3a:
f3:07:05:cf:43:ba:fd:41:cf:e8:81:5c:bb:4e:bd:
2d:56:6f:6c:9c:23:07:41:88:e6:7f:e7:52:51:37:
ed:ea:b0:c3:c2:19:53:3a:3c:02:3d:2e:24:55:57:
02:ad:90:16:4a:e8:ce:83:06:ba:25:53:ff:2b:a4:
35:48:35:93:a2:25:cc:cb:e3:7c:39:38:a7:73:cf:
28:64:f9:38:5f:12:66:df:71:29:49:b0:09:55:c0:
a0:c7:9f:9a:8a:24:2f:e2:20:5e:fd:8b:82:3c:c8:
8f:ec:3f:eb:7c:bb:ec:77:f2:d5:8f:01:47:28:4d:
7e:d3:ce:0d:9c:ec:30:8f:2a:74:6f:5f:0b:03:3d:
d6:70:32:53:f6:b1:91:86:67:fa:0b:23:e3:4a:5e:
41:50:dc:35:4b:ad:24:05:b2:0c:f1:a2:7e:e2:c8:
45:06:33:6d:ac:90:1d:63:a7:93:4f:40:40:d9:6f:
82:88:57:67:e5:71:21:b0:82:7b:4d:b1:93:9f:d8:
11:dd:0f:a3:cc:e3:21:d0:71:fc:ab:b7:d9:c7:bf:
23:7e:e3:f1:2a:87:32:ab:04:2a:67:bb:b7:8c:dc:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E6:AE:98:90:C3:C7:86:A0:42:74:9B:46:D9:DC:67:13:9C:2F:DB
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2743eb54-0e16-4048-a058-1bc32c140fc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b840::/46
Signature Algorithm: sha256WithRSAEncryption
85:1b:80:80:38:9f:95:8e:9a:08:c8:c3:e1:ca:50:e4:07:83:
84:09:af:ec:6c:91:07:55:34:a0:d2:30:d6:f6:d5:ed:75:2b:
97:ed:f5:a9:7f:54:86:43:7b:3a:e5:af:c1:36:46:ba:14:19:
49:7d:77:b5:54:92:c2:3b:cc:ed:22:61:59:7b:11:ca:ed:04:
93:9f:67:74:a1:4c:58:58:b5:97:53:18:ac:2a:4b:68:eb:3f:
25:be:a1:f8:be:30:15:bc:d6:35:16:f9:fb:ce:c2:15:a3:b3:
76:e0:fc:52:3b:f4:cc:77:6a:48:0d:b1:4b:f4:f3:21:20:e9:
d0:e2:b0:14:ab:17:c0:e6:88:e7:77:88:aa:7c:58:ae:77:5a:
04:22:6e:87:57:20:5d:4c:4b:15:ec:c5:a6:95:87:66:f9:16:
1e:d3:f6:d1:65:80:a0:36:c2:38:8a:c6:25:ad:71:6d:ad:3e:
7b:3b:6b:b5:d5:34:3f:66:2b:77:c4:41:55:d5:09:b9:83:21:
7c:24:84:9e:8c:a3:bd:4e:91:98:10:51:ef:69:25:87:24:ac:
6b:89:fc:4e:82:54:11:d5:d8:af:e0:b7:60:ee:b8:a6:b4:65:
5a:84:32:6e:5d:7a:d9:5c:78:a8:8e:a0:ba:67:39:87:33:b5:
fb:68:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:58:33 2025 by rpki-client