Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
File: ab79adfe-f7aa-409f-9455-78c2f2264124.roa (raw, json)
Hash identifier: 9VFkOhne0zljY8k8XJufLUhX6kmgxXuzEg5WmG5hHLw=
Subject key identifier: 3D:D5:68:33:3E:AE:8C:39:E7:EE:A4:DD:CC:F9:72:B7:76:11:85:45
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 6B660B78FD7151D0C3F68E28C098DCDA7777EE35
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
Signing time: Fri 20 Jun 2025 00:11:23 +0000
ROA not before: Fri 20 Jun 2025 00:11:23 +0000
ROA not after: Fri 25 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:66:0b:78:fd:71:51:d0:c3:f6:8e:28:c0:98:dc:da:77:77:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Jun 20 00:11:23 2025 GMT
Not After : Jul 25 23:59:59 2025 GMT
Subject: serialNumber=22758a7e8e4ab5330d228e84d35bc0624b66f8ea179b8951c95390bf3d08b00f, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:5b:5b:22:7b:44:6c:57:db:91:d3:8b:89:
9c:ee:79:83:1e:f8:b2:9f:d0:ec:4a:f7:96:a1:05:
f8:c7:06:d0:4f:a5:54:63:f3:63:7a:f7:88:fc:64:
98:01:5b:62:95:f9:b8:91:61:cf:10:38:29:fc:36:
ce:d3:b2:41:9e:66:c7:24:5a:04:6f:e9:aa:5d:d7:
5d:23:43:cd:fa:46:f9:2c:ee:2b:0a:e3:5a:91:a9:
ed:02:aa:95:92:c0:a1:79:ba:be:2d:73:a3:d4:be:
a2:6a:72:ee:16:a8:fe:fe:3e:0e:48:a8:d1:f7:43:
8c:0c:9d:22:d0:34:c5:c0:94:bb:3a:b7:da:a1:f3:
79:1d:56:a1:a3:8d:d5:10:a4:b1:d4:36:ba:30:e4:
5e:21:8f:55:17:f6:14:86:3d:b7:65:a8:5b:97:2b:
cd:55:75:d6:85:87:11:32:96:f4:af:f9:57:08:90:
29:e6:1d:da:cf:bc:d4:02:b3:1b:69:64:51:f3:32:
49:5a:72:40:1d:80:47:17:33:34:d3:c2:62:24:94:
11:a3:3c:a4:0d:5d:80:09:a0:5b:e5:0b:36:79:7f:
16:cc:57:b3:cf:91:e5:de:73:b7:dd:c0:c1:39:82:
40:c6:0e:08:79:e2:6b:53:54:27:0d:7f:24:4b:c7:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:68:33:3E:AE:8C:39:E7:EE:A4:DD:CC:F9:72:B7:76:11:85:45
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5880::/46
Signature Algorithm: sha256WithRSAEncryption
40:7c:10:97:6d:f1:a8:36:e9:cf:59:d5:0a:4f:cd:b2:fe:ac:
b4:86:21:d3:af:e5:68:78:18:38:9f:ec:a0:36:1b:a5:65:d9:
cb:1a:c8:06:c8:c6:8b:e9:9d:5a:7f:c5:a3:4f:9d:59:ea:33:
52:73:18:c7:f1:e0:87:1b:34:a7:e4:94:ed:99:5f:a9:71:50:
c9:d4:3d:0b:ce:08:79:43:d0:9f:d7:61:63:36:da:b8:96:fd:
c7:b2:3a:1e:48:9b:0b:c4:d2:68:9e:dd:d6:a0:c9:81:99:95:
ed:eb:ea:60:32:03:3a:a2:a6:f5:7d:d0:d9:c3:e4:8a:0f:a5:
84:89:34:1e:83:26:2a:c6:36:ac:45:f2:95:5a:81:fc:58:b8:
09:ed:80:c6:06:f2:1f:2b:a5:3b:a3:73:9d:78:d9:c2:7a:72:
7c:1e:12:3d:c3:ad:18:74:f1:6d:05:35:f6:7b:98:5a:29:6d:
af:73:72:5d:b8:c1:fd:e3:66:03:6f:62:0d:01:fa:fa:04:a5:
67:36:76:cb:85:34:92:cb:ae:8b:c3:09:40:e2:92:54:85:df:
a5:3f:70:6c:8b:6d:4b:ee:c5:4d:56:62:27:79:c3:2f:40:8b:
26:dc:43:29:45:42:b1:c0:38:e0:36:3c:8e:1e:6a:90:ec:32:
f9:66:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:21:25 2025 by rpki-client