Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
File: 8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa (raw, json)
Hash identifier: uGP1DMUGq4wQ+PmEg031b2JGuiTmNLclACJUAa2KhmE=
Subject key identifier: F9:64:95:5D:DC:0D:76:F6:35:0E:62:74:A4:88:39:B0:2F:BB:55:10
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 792F510394E8B070470C985076C99C4937D1D413
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
Signing time: Sat 09 Aug 2025 00:20:54 +0000
ROA not before: Sat 09 Aug 2025 00:20:54 +0000
ROA not after: Sat 13 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2f:51:03:94:e8:b0:70:47:0c:98:50:76:c9:9c:49:37:d1:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Aug 9 00:20:54 2025 GMT
Not After : Sep 13 23:59:59 2025 GMT
Subject: serialNumber=1460d1e4d222271ad5b9312bbc0fddd41cf1388ad25e84ef481c006d32de502e, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:78:dd:2a:a3:a1:30:74:65:d2:82:64:43:
c6:1a:dc:45:a8:38:7f:1e:26:56:06:41:36:3c:ae:
f3:78:32:09:43:ca:dd:5a:30:1c:06:79:74:5a:04:
35:69:49:ae:ad:6d:34:ea:8a:50:4f:fe:cd:48:be:
76:34:99:02:24:f2:1d:68:5a:57:40:08:51:0e:7d:
a8:e7:7f:9c:0c:00:97:9b:69:73:2f:6e:a4:bf:b7:
80:8c:a2:aa:2b:22:1a:c8:bf:87:2c:35:1a:f6:6c:
4b:cd:8b:b2:93:45:ba:34:b7:8e:8b:49:b2:cb:c6:
a0:4b:1a:e2:9b:be:ed:32:d7:ff:62:23:0b:53:00:
af:60:ca:6a:94:6a:71:d1:00:9a:e9:09:a6:4a:5e:
00:05:ee:fd:02:51:5d:a6:30:2c:e6:c3:96:49:c2:
28:b4:e4:c8:92:5c:4a:89:03:fc:43:17:f7:49:f2:
2a:c5:92:18:d4:64:1a:8b:ab:da:15:cd:99:d8:39:
16:83:e2:07:ac:18:2d:4a:42:3c:58:48:40:3b:9c:
38:30:a5:46:32:83:38:70:4d:df:2b:22:c2:1b:14:
f3:a0:01:7b:b8:2a:d1:fc:51:4b:5f:a5:14:47:2a:
cd:65:35:04:2f:c5:54:b6:3d:33:f7:42:c5:4d:1f:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:95:5D:DC:0D:76:F6:35:0E:62:74:A4:88:39:B0:2F:BB:55:10
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2840::/48
Signature Algorithm: sha256WithRSAEncryption
97:e6:54:34:f7:a4:0e:0f:f1:5e:02:0f:fe:9c:ce:6f:d5:1b:
6c:45:f1:3e:d2:37:fc:5c:ce:bf:be:89:2d:62:8d:bc:59:e5:
7c:49:3c:69:17:1b:6c:73:47:73:72:a6:b1:a5:36:f0:92:18:
f8:64:53:a8:a2:2b:25:e4:24:17:ed:9e:ac:49:34:f9:87:4c:
85:7e:7a:d0:1b:4c:5c:14:40:46:d1:6e:d8:ec:2a:9b:89:fb:
a3:70:1b:44:a5:7b:72:16:dd:7d:79:22:a4:17:58:78:e4:61:
f3:18:9d:50:5b:84:cd:8e:82:cc:89:02:f3:c8:e5:0f:2e:4f:
da:20:2f:fe:6b:14:68:a6:e4:0c:9f:ce:19:4e:68:d7:b6:46:
4c:f9:15:7c:c7:98:69:2f:55:38:63:4a:c6:7d:d9:fa:9e:ae:
cc:68:e4:fa:44:96:e8:55:6c:11:22:86:0b:87:97:e4:74:d3:
7f:ac:37:00:e7:77:dd:58:f3:2a:77:ed:f5:2a:fa:86:cd:19:
15:fd:d0:f8:70:34:c5:2a:97:50:2c:be:5d:a4:bf:18:2c:81:
ee:81:8a:e4:11:86:c9:43:7a:9a:44:16:96:93:75:a8:6d:d9:
8f:c7:cd:ee:1c:7d:7f:64:b9:de:1c:93:56:65:1d:8d:99:9a:
1c:a8:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:56 2025 by rpki-client