Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
File: ab79adfe-f7aa-409f-9455-78c2f2264124.roa (raw, json)
Hash identifier: oAa5WnEKbsTyXG4rDasJ7K1eTYIdYzl+yvlehXymVXk=
Subject key identifier: 81:EE:50:B6:6D:15:35:D2:89:8E:8C:25:CF:D9:BF:89:D4:91:97:90
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 1400F74F51213735263945BC6A2535DF258BD8AC
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
Signing time: Wed 30 Apr 2025 00:11:08 +0000
ROA not before: Wed 30 Apr 2025 00:11:08 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:00:f7:4f:51:21:37:35:26:39:45:bc:6a:25:35:df:25:8b:d8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 30 00:11:08 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=622ef612b05115c525ae42aa3173dd7a500bf76636673b36d0dad6ac08a5df56, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:0a:da:08:2a:be:70:15:1b:5e:a1:27:25:
ea:a5:7c:af:64:88:f7:5a:8a:b0:e1:5a:10:77:04:
d8:57:17:18:2c:d4:18:8f:7b:a7:82:16:4a:95:1d:
da:79:be:45:5a:ec:70:db:66:40:88:e7:6b:24:bf:
7c:98:98:96:6e:da:3d:f3:5a:d8:5f:5e:98:82:15:
a3:22:66:e0:c7:c4:38:90:dc:01:d5:7e:00:a5:2b:
a5:5a:ba:37:ad:58:bd:cf:e3:f7:33:32:ba:44:18:
45:84:90:66:cd:de:83:79:7e:7b:32:1c:25:90:7e:
fe:90:a5:2f:13:e7:6a:32:c6:2a:d6:4e:a9:4b:26:
f7:28:62:dc:0e:fa:79:a9:21:a0:b9:c0:60:2d:05:
a4:b1:c3:16:cd:ea:ae:c2:67:1f:ca:66:71:4c:85:
89:d6:12:85:d8:ed:c5:d1:33:9e:9c:4c:ba:fc:62:
6e:e5:2f:de:73:14:2b:e6:8a:ad:64:66:6c:3e:da:
99:44:e2:2a:23:23:f3:10:ec:d2:28:58:40:c6:88:
87:64:16:d7:57:c8:27:35:bc:a2:98:81:f0:62:d1:
d5:c3:0c:e6:42:d3:ec:f5:51:01:33:61:78:81:d2:
5a:1a:fd:23:58:fc:60:d2:af:05:ee:ba:24:63:1b:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:50:B6:6D:15:35:D2:89:8E:8C:25:CF:D9:BF:89:D4:91:97:90
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5880::/46
Signature Algorithm: sha256WithRSAEncryption
23:c5:63:9c:88:67:18:23:5b:b7:90:1e:a8:7b:d8:8d:52:ae:
25:a9:1d:6a:59:86:7e:9e:07:8a:ba:05:35:54:9a:a4:ea:3b:
37:ee:67:74:67:2d:62:49:ca:78:8e:d3:2f:c4:6d:46:82:19:
48:50:81:0c:56:db:11:aa:5a:22:13:14:db:dc:b8:d1:af:c8:
51:03:83:c7:1a:a8:1a:be:ae:d1:a2:a1:26:ec:64:28:e3:46:
7c:12:69:b8:aa:3e:ea:e4:b3:81:1e:71:c4:96:af:cf:b8:b0:
32:de:4c:56:b6:1e:61:cc:6e:df:6c:87:44:b1:95:73:3f:97:
23:9d:1e:16:ef:c4:37:03:23:52:cc:95:17:19:68:d2:55:5b:
b0:21:43:66:dc:59:58:01:0a:f7:6e:62:cc:cc:18:44:8f:66:
a2:ff:0f:74:cb:8f:00:eb:67:44:72:44:28:25:f5:e2:f7:9e:
65:12:b1:cd:89:53:59:60:9b:82:bc:8c:2d:9e:fb:1e:d1:09:
02:66:c1:cd:27:55:23:2d:2d:72:d1:0f:3e:d0:42:bb:6b:1f:
b2:7c:11:4e:0b:98:71:bc:63:6d:d7:82:b2:93:22:0f:6e:47:
b0:79:d2:e3:6b:5c:bb:4c:a7:20:8b:be:90:07:34:cd:e7:e1:
8f:ff:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:30:22 2025 by rpki-client