Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
File: 8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa (raw, json)
Hash identifier: 4jHliC4v8MybrYIjOm+ulpQVPxo+HdMJrVcsgQTa+JI=
Subject key identifier: 36:35:D5:49:5C:AC:B3:06:7D:BE:83:25:C7:2D:DF:6E:DB:4B:3E:C5
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 031D2FD640D54EC6F19C299D2213B43D452EB0A8
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
Signing time: Wed 30 Apr 2025 00:10:42 +0000
ROA not before: Wed 30 Apr 2025 00:10:42 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1d:2f:d6:40:d5:4e:c6:f1:9c:29:9d:22:13:b4:3d:45:2e:b0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 30 00:10:42 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=3eabb0d0c567469537c57313c7dbdd6f0e1630e6009aa68ebfc5873086b83dfb, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:db:f0:8e:d8:ed:c5:5a:0a:67:a4:dc:34:
76:ee:4d:09:00:2f:aa:22:db:61:ce:2d:6d:15:92:
7a:50:a1:d0:9a:3c:2c:da:4f:eb:d6:ae:7a:01:38:
2e:e3:89:fc:cc:d6:9f:e0:67:97:d5:7c:b8:be:38:
0c:1b:a8:60:90:28:5f:2d:51:19:ed:90:9a:17:d6:
32:a3:e8:01:d7:26:5c:c2:03:45:46:be:81:44:ef:
55:20:7b:14:0a:29:bc:64:94:52:39:db:5b:62:77:
22:f9:54:b4:ae:c9:1a:bb:36:47:a5:79:83:38:60:
4e:3e:c9:c6:30:f7:ec:3e:af:5e:5d:b2:e9:a1:56:
e7:c8:0a:e7:30:a0:51:34:62:ec:7d:bb:4d:73:32:
cd:43:bb:42:fd:23:41:05:83:21:3d:3a:3b:8a:aa:
04:89:f1:e5:e4:b0:d2:c9:39:ce:55:fe:a7:e8:bb:
d2:02:80:6a:48:a3:4c:e3:1b:0e:4a:90:a7:cf:76:
d1:93:09:dd:fb:b5:90:ff:53:46:6e:bb:b7:3b:97:
e8:cd:d5:3e:d2:5f:ce:e2:25:f4:5d:eb:85:a4:06:
b5:a5:ed:4b:0e:3f:9e:d8:ff:c5:10:d8:9b:60:44:
9c:49:cd:c7:60:e1:b2:7f:6e:0a:6a:ca:01:54:36:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:D5:49:5C:AC:B3:06:7D:BE:83:25:C7:2D:DF:6E:DB:4B:3E:C5
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2840::/48
Signature Algorithm: sha256WithRSAEncryption
93:ad:ed:84:2e:52:57:ac:ed:39:dd:30:0d:26:6a:83:1b:10:
86:f8:08:42:e1:22:6c:43:73:f5:c4:e3:dc:8e:f5:6a:69:db:
65:d6:08:a1:90:e5:cb:6f:51:9c:ad:f9:1f:1c:c7:6d:bf:56:
da:17:ba:3f:e1:1c:fc:39:47:0a:fe:55:b0:c6:6c:aa:d8:10:
99:00:f9:d4:30:53:46:f8:47:06:fb:bc:67:1e:9a:b3:3a:ad:
d9:69:ca:d2:6c:55:74:50:f6:6d:e0:5d:fb:da:45:d8:87:9e:
c3:a8:25:fc:f3:ba:ea:11:87:32:36:fd:f3:37:10:35:e2:cd:
03:33:27:59:3a:b5:06:f9:45:ec:a3:55:3f:f8:5f:ce:94:ef:
74:bf:aa:b8:70:62:3c:cc:39:ab:60:c1:07:da:af:2d:b7:25:
17:9c:2d:fe:c8:ca:ee:21:81:13:9b:2b:95:1d:d2:06:96:be:
c3:1a:dd:3a:3d:5b:34:f2:ed:72:2a:9b:e2:ca:2f:c6:18:2e:
37:86:49:69:40:7e:22:6f:22:be:5c:5c:73:e0:4f:23:75:50:
46:41:68:63:3f:fe:5a:bd:8c:31:41:b5:e0:5f:48:c1:47:8c:
7b:4c:85:9c:00:66:61:b6:e1:dd:c5:a8:1b:4c:65:5b:e1:3c:
49:27:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:30:43 2025 by rpki-client