Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Uv6OxLHfherQgDvnenTKJPkP+iYFP89HU/TsZn3Z2Z0=
Subject key identifier: DB:70:6C:70:D5:A1:BE:FF:75:5F:44:DE:C7:77:50:5A:AF:C0:D6:D5
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 6CF6F3B8969E48AAD7500D2773DB2B3F1F108CF1
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Jul 2025 14:05:57 +0000
ROA not before: Fri 11 Jul 2025 14:00:57 +0000
ROA not after: Fri 10 Jul 2026 14:05:57 +0000
asID: 834
IP address blocks: 62.192.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f6:f3:b8:96:9e:48:aa:d7:50:0d:27:73:db:2b:3f:1f:10:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 11 14:00:57 2025 GMT
Not After : Jul 10 14:05:57 2026 GMT
Subject: CN=DB706C70D5A1BEFF755F44DEC777505AAFC0D6D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:6a:47:b1:06:c9:6c:b6:fb:56:74:94:7c:
8c:d3:c0:15:0b:cd:ba:03:2f:5d:e3:d0:eb:b5:c8:
5d:65:3f:25:75:a7:09:6f:42:97:76:af:60:b5:73:
18:53:84:20:3b:8f:e4:e7:8f:34:b0:7d:cb:ed:c2:
a3:24:ea:ab:62:36:1b:fe:0e:d2:28:40:ca:be:a5:
1f:61:c7:74:62:e4:3c:c6:19:38:8b:3e:aa:bd:2b:
63:bf:c5:f2:96:b8:c0:00:e6:10:0b:40:1e:e2:31:
6c:19:4e:ec:70:5c:5d:25:33:c4:5f:c9:96:79:71:
5c:3f:9f:29:5e:42:87:2d:0e:d0:21:ce:be:dd:1d:
2d:9e:3e:08:2c:99:6c:a2:2a:21:bf:87:b4:96:a0:
00:7d:4f:26:82:0c:40:cd:c3:85:65:70:4a:ff:1e:
9e:e3:b4:18:9b:69:03:31:73:3b:e4:75:59:d4:f1:
c3:97:f5:bc:97:50:fa:56:7d:fc:16:ff:91:c5:1b:
ac:75:6c:34:4d:ac:64:4b:78:fa:bd:4e:ef:04:5f:
67:6f:b0:7b:b6:62:46:52:b3:2d:2d:51:f8:6e:8f:
20:42:43:b4:28:de:b1:7c:ad:db:a9:68:e8:9a:84:
3c:f6:7f:94:1a:f6:e5:01:b5:13:4d:99:f6:8a:a0:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:6C:70:D5:A1:BE:FF:75:5F:44:DE:C7:77:50:5A:AF:C0:D6:D5
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/24
Signature Algorithm: sha256WithRSAEncryption
16:78:38:55:48:0d:04:f0:ac:5a:c4:66:a3:7d:4d:02:6f:41:
ff:a3:76:a7:e1:4e:44:97:0a:f4:db:b5:72:03:7a:81:9b:68:
d7:2d:d3:9e:dd:40:4e:05:0c:e4:29:7d:e7:7d:5f:5d:cd:b1:
67:e0:1d:50:ae:56:84:55:3f:22:17:31:cb:27:cf:c1:b6:a8:
b9:15:df:ae:d4:c5:6d:97:98:48:d0:0c:1c:c0:34:11:33:09:
87:34:1d:1d:fd:40:ae:f6:de:de:3a:f3:f6:5f:25:00:70:cb:
22:2d:17:55:9b:d9:7d:8d:0f:b9:4a:d3:44:fc:7e:59:a0:33:
db:a1:8a:64:14:fa:16:25:6a:5a:07:0f:53:d4:68:1d:b8:11:
f6:85:16:61:6b:05:45:54:81:41:e4:a6:b2:9d:8d:38:12:b8:
09:6a:99:a3:96:b5:f7:32:4c:85:37:80:a6:46:c2:62:db:e3:
87:04:5f:53:ca:ce:9d:a6:17:26:60:09:c8:3b:b2:9e:cf:5c:
52:42:1e:5f:4c:85:32:7f:19:68:bd:a4:6a:1c:8b:cf:df:24:
f5:d0:29:b7:f0:fe:f4:92:e6:93:01:50:71:75:a5:f6:c4:08:
48:58:79:e0:52:f3:81:80:f7:41:43:ae:95:67:74:f9:5c:0e:
19:ea:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:46:41 2025 by rpki-client