Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6762.roa
File: AS6762.roa (raw, json)
Hash identifier: LHGYCJUHaDPrw++F9UEvQOaNtIpO4H5U2WaBhZHrG2c=
Subject key identifier: C1:FE:55:92:6B:BC:AB:13:90:5E:69:D0:8E:E7:A5:AA:5E:C6:D5:01
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6D937B529E33146565FA350F27C43B1CF50D868E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6762.roa
Signing time: Mon 24 Mar 2025 11:59:40 +0000
ROA not before: Mon 24 Mar 2025 11:54:40 +0000
ROA not after: Mon 23 Mar 2026 11:59:40 +0000
asID: 6762
IP address blocks: 96.62.128.0/24 maxlen: 24
96.62.129.0/24 maxlen: 24
96.62.130.0/24 maxlen: 24
96.62.148.0/24 maxlen: 24
96.62.180.0/24 maxlen: 24
96.62.181.0/24 maxlen: 24
96.62.182.0/24 maxlen: 24
96.62.185.0/24 maxlen: 24
96.62.186.0/24 maxlen: 24
96.62.187.0/24 maxlen: 24
96.62.192.0/24 maxlen: 24
140.233.168.0/24 maxlen: 24
140.233.169.0/24 maxlen: 24
140.233.170.0/24 maxlen: 24
147.79.5.0/24 maxlen: 24
147.79.22.0/24 maxlen: 24
150.241.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:93:7b:52:9e:33:14:65:65:fa:35:0f:27:c4:3b:1c:f5:0d:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 24 11:54:40 2025 GMT
Not After : Mar 23 11:59:40 2026 GMT
Subject: CN=C1FE55926BBCAB13905E69D08EE7A5AA5EC6D501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:be:ca:75:41:41:d3:48:f1:f5:40:ed:10:
20:73:33:e4:1e:fc:e2:b1:fd:31:87:c9:54:8a:f2:
cc:ca:1c:3f:b1:e4:bc:dc:60:c9:98:15:5a:cc:30:
49:d1:5e:a0:cf:c9:94:38:b4:64:f6:9d:30:a5:c8:
43:10:94:7e:73:5b:bd:21:f3:13:f0:2f:d9:88:99:
e5:4a:55:38:31:7c:03:10:f2:30:1e:43:8f:7d:b9:
9a:63:b4:0a:48:3e:08:64:64:81:e0:be:ca:ab:32:
17:ee:7b:92:aa:99:97:fc:66:0b:61:68:b1:f3:dd:
74:68:5b:b3:c0:86:88:a8:c1:7f:ad:fa:50:70:4a:
69:c1:d6:92:5d:0f:51:66:02:63:0b:11:d6:f3:c2:
83:98:ee:43:5f:b3:18:22:1a:f5:0c:f0:82:f3:d7:
68:89:69:1f:aa:4b:7a:4c:fd:a5:66:51:80:fc:03:
10:9e:35:e1:11:ff:85:90:67:e1:c9:31:22:20:70:
90:cd:88:3f:49:10:39:fc:a9:ae:d6:16:9b:95:d9:
c3:b5:a7:69:71:42:9a:ea:ae:c0:0f:ac:1b:94:d6:
d2:4d:58:c1:79:ba:46:8f:20:00:a3:bb:c5:ba:73:
fe:e4:9a:ca:c3:48:d7:8d:7e:bb:b9:64:4e:4d:32:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:55:92:6B:BC:AB:13:90:5E:69:D0:8E:E7:A5:AA:5E:C6:D5:01
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.128.0-96.62.130.255
96.62.148.0/24
96.62.180.0-96.62.182.255
96.62.185.0-96.62.187.255
96.62.192.0/24
140.233.168.0-140.233.170.255
147.79.5.0/24
147.79.22.0/24
150.241.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:eb:3b:ca:ec:e2:89:7f:e7:ca:ec:a1:b0:fb:9a:b7:cf:b0:
45:dd:f7:d5:da:69:66:28:0c:7a:1f:f8:d2:e0:f9:f2:e0:5c:
da:dc:39:c0:02:4f:fb:13:c0:3f:09:3f:fb:b6:6a:68:6d:1e:
f1:84:6a:3c:9a:63:c1:1b:79:f7:1b:4c:03:99:a7:14:15:dc:
74:77:b3:9d:bd:12:b4:fc:d4:65:c4:be:e6:a5:b6:95:48:06:
22:bf:8a:e8:82:8b:40:02:c0:44:ee:02:d5:bb:9b:13:e0:62:
9a:f6:19:e8:57:74:62:1a:f9:8e:69:a5:bc:85:d5:9f:df:38:
2b:05:db:4b:e8:a1:c4:e3:75:b8:9c:9f:0a:31:00:b6:98:eb:
26:7c:26:cd:ce:46:46:c4:03:9f:7c:95:90:21:5f:59:3d:bf:
ac:bc:72:7b:57:21:01:74:3b:99:ab:47:77:43:a0:f1:ed:7b:
02:9f:a1:83:70:ab:83:d7:c5:e7:a8:d2:6d:8b:76:06:74:5a:
01:b0:1c:81:da:1a:c8:af:4f:29:5c:d7:46:e5:25:97:45:68:
0c:f9:9d:43:23:0c:0d:73:e8:c8:a6:ac:37:36:6a:8f:60:ce:
03:e1:97:ba:1a:10:40:2a:e7:74:f1:67:5f:23:20:38:11:d8:
b2:61:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:55 2025 by rpki-client