Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa
File: 5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa (raw, json)
Hash identifier: RB93xa2W9tpMGSdp3m2ASSH/zB0ZZa0cao6GKgIm9f0=
Subject key identifier: B0:01:D9:BA:48:E8:0F:94:E7:2F:DB:E6:3D:ED:6F:63:8C:3F:20:27
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 308A43BD782C47CCF64583AED03F10E0C26C9D01
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa
Signing time: Fri 20 Jun 2025 00:10:49 +0000
ROA not before: Fri 20 Jun 2025 00:10:49 +0000
ROA not after: Fri 25 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8a:43:bd:78:2c:47:cc:f6:45:83:ae:d0:3f:10:e0:c2:6c:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jun 20 00:10:49 2025 GMT
Not After : Jul 25 23:59:59 2025 GMT
Subject: serialNumber=58079f7761dec46d05f646dfa1c27ecf2f7a578c5c4dff3be0c197d298b93c29, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:66:93:70:70:98:53:bd:1d:8e:ce:af:5e:
dd:d9:80:7f:29:3e:cb:d1:9f:e8:ff:ec:79:d9:31:
0b:37:fe:fd:04:7e:42:6e:bb:a1:90:84:b3:2b:19:
bf:09:77:36:77:dc:bb:33:83:c4:c7:dd:c9:9c:8d:
03:3e:11:cf:e0:8e:63:d1:b8:24:a2:17:62:87:8c:
b2:4b:09:b0:55:5c:ac:5c:cc:4a:d2:df:c4:5a:eb:
07:dc:69:71:2b:99:60:27:e5:ba:1c:f0:da:9a:6b:
0e:0d:39:d3:d0:ea:d7:79:24:57:18:bc:dc:37:90:
07:27:db:ea:5e:57:9d:c7:64:50:fe:70:1e:10:f2:
5d:f2:41:91:ef:60:0d:ad:99:a1:89:b2:6f:af:56:
74:b8:31:51:c0:51:9e:95:6b:ff:51:2e:74:20:99:
5a:3b:24:40:18:1a:87:bd:41:a6:11:e1:b8:38:34:
5b:e4:a8:d8:a2:b6:44:08:76:b5:f7:e3:3a:c2:8b:
b7:93:22:95:5b:03:c7:41:38:84:8a:81:3d:6d:0c:
0b:73:61:d0:a4:88:a0:ef:92:d1:72:be:82:68:34:
96:42:6e:f6:36:1e:ad:48:78:90:99:86:68:12:16:
2b:4a:27:86:22:0d:4f:0e:4b:50:19:93:08:5a:34:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:D9:BA:48:E8:0F:94:E7:2F:DB:E6:3D:ED:6F:63:8C:3F:20:27
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
28:53:31:8d:44:9f:3b:cc:9e:5a:d4:6a:36:b9:ef:a5:8d:af:
d4:b1:96:b3:8c:70:de:f7:06:5a:eb:1f:d6:21:75:72:f5:3b:
ce:a7:4e:cb:35:f8:08:7a:39:1a:e4:a2:50:ed:83:b7:dc:81:
a6:49:4d:86:4e:5a:3d:a3:df:f1:ae:54:64:84:65:e4:a3:fb:
f2:90:f6:05:87:5b:b5:35:69:fb:cb:79:7f:6e:7e:ad:bf:8b:
b9:c7:86:85:c9:b0:29:68:22:25:68:36:c7:79:6c:86:c3:95:
54:1c:95:51:61:05:4d:d2:ac:64:36:9b:6a:f4:57:9e:3b:7b:
bd:6c:63:20:b6:41:cc:05:a7:b6:e2:78:c6:cd:53:16:02:be:
2d:e5:6d:7f:1b:75:55:3a:09:af:f3:20:d3:88:81:8c:b3:65:
8c:3a:5b:10:51:f8:84:05:18:d2:a5:34:5e:e9:2c:67:8b:ef:
01:32:75:c0:b7:87:f7:0d:c2:0e:a4:e5:aa:35:29:2d:74:26:
3b:42:bd:92:dc:1f:6d:62:2b:5c:c6:73:11:b9:6c:74:8a:2a:
82:09:31:d4:f1:a8:23:ae:f0:9f:82:cf:b8:6d:3a:a6:a1:d7:
60:06:78:f5:41:6e:1b:f2:b3:ad:05:03:43:19:2e:fe:26:91:
b9:83:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:35:49 2025 by rpki-client