Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa
File: 5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa (raw, json)
Hash identifier: HCaaueeBvbwRjbS9aWjnR4bBsuPaB8UIPkgI8VPLy6s=
Subject key identifier: AC:2A:43:EE:90:D2:59:B7:5B:03:AA:B3:D5:91:2B:E4:EC:77:95:A7
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 52D6584275C51215B87332B610D190D3ED7CD4C8
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa
Signing time: Wed 30 Apr 2025 00:10:41 +0000
ROA not before: Wed 30 Apr 2025 00:10:41 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d6:58:42:75:c5:12:15:b8:73:32:b6:10:d1:90:d3:ed:7c:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 30 00:10:41 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=5311a1c9fd0bb7fbc91b7e1a2e7c6fa291d2ff698f360b976d1dba2b05593dfd, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:7f:3f:43:a2:84:71:11:7a:88:18:50:db:
77:0b:7c:9d:75:a8:27:83:77:03:a2:57:3e:15:3f:
0f:a2:32:3b:63:d4:53:21:6b:da:6f:ae:99:28:f7:
49:25:5e:d2:20:2d:b6:91:84:fd:4b:07:76:77:39:
95:fc:e0:7b:e5:b5:ea:d6:ff:36:10:3a:ae:8c:14:
eb:f6:f3:8f:55:39:cc:5e:3d:7a:c5:a6:31:74:27:
93:99:aa:d5:a1:c7:45:97:39:a1:6e:a5:f1:4e:9f:
95:12:61:82:1e:3f:88:e5:c9:93:75:b1:a4:ad:54:
64:a2:b2:10:a4:6b:14:d9:ec:2f:81:00:71:5f:c8:
5e:c0:bf:d7:c8:43:06:84:51:f1:85:1a:c9:ce:02:
8c:6f:85:4f:0c:37:a7:ee:e4:e5:64:af:3f:1c:1f:
95:0b:f5:97:bd:e8:33:e6:f0:9b:d7:22:cf:5f:b5:
9b:f8:69:8c:46:d7:f4:88:db:ca:3c:69:08:3b:49:
e6:26:7d:28:8c:4d:c8:20:32:4d:56:9f:82:3b:fe:
de:32:25:d7:f7:87:76:80:54:22:d9:72:a9:91:b7:
b4:81:bf:16:cf:f2:bd:ee:f3:76:3e:6e:49:c8:20:
fb:18:d6:97:7d:2a:e4:73:6f:1e:98:79:98:40:9d:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:43:EE:90:D2:59:B7:5B:03:AA:B3:D5:91:2B:E4:EC:77:95:A7
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/5980baf0-35fe-4ca7-b869-04bb2e738b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:d1:a2:3d:e8:c9:43:84:64:69:70:ef:00:f2:c3:e6:42:91:
55:32:da:03:0d:5d:35:0c:47:0d:73:55:49:b0:58:2c:39:14:
14:d9:33:6a:b3:58:f6:23:c0:f5:eb:72:fb:40:df:8c:0f:31:
f1:27:1a:17:0a:15:26:11:71:0f:45:6d:b2:20:47:df:61:5a:
a1:07:6a:22:ba:bb:98:85:11:37:82:94:8a:d3:42:34:35:c8:
b5:ae:96:b2:75:f6:9a:aa:49:71:d3:3d:52:74:ec:1b:7c:76:
9f:a3:5b:26:77:f0:39:b8:93:3e:e8:aa:56:83:a3:0b:ef:ee:
38:56:17:a1:40:53:97:cc:53:70:2b:34:f3:ae:a4:94:ed:ea:
5a:46:4f:94:5b:29:49:bd:00:50:56:d1:74:b0:5c:9d:c0:50:
00:c7:f2:50:d5:93:52:3a:ac:88:1c:2c:f3:51:9c:9b:71:ad:
6f:f4:0a:02:f2:58:9a:ad:63:6f:f4:73:41:cc:f8:81:5c:06:
98:62:ca:51:bd:26:5a:91:22:cd:3f:83:22:6c:0f:eb:35:6c:
f8:7e:70:f5:c0:be:0a:96:c2:ab:83:15:b1:3d:47:53:91:91:
86:bc:f6:88:56:20:1e:56:1d:68:89:7f:63:f3:ce:8b:66:28:
f5:fc:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:37:42 2025 by rpki-client