Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e2035363530.roa
File: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=
Subject key identifier: 98:85:67:8B:91:49:32:1A:52:26:CA:FB:EB:86:5F:4B:A0:48:D7:C1
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 4D9718126F20CE61097F99F927C0905454F7A3AF
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e2035363530.roa
Signing time: Thu 27 Mar 2025 14:58:12 +0000
ROA not before: Thu 27 Mar 2025 14:53:12 +0000
ROA not after: Thu 26 Mar 2026 14:58:12 +0000
asID: 5650
IP address blocks: 62.122.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 23:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:97:18:12:6f:20:ce:61:09:7f:99:f9:27:c0:90:54:54:f7:a3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 27 14:53:12 2025 GMT
Not After : Mar 26 14:58:12 2026 GMT
Subject: CN=9885678B9149321A5226CAFBEB865F4BA048D7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:35:c0:4a:d0:e6:7d:a7:52:f7:70:ce:bc:
93:5f:fb:85:6c:d3:a2:38:28:08:2b:55:a6:9b:83:
07:4e:50:48:48:58:10:75:42:22:39:fa:90:14:ed:
10:a5:87:64:af:88:71:46:f4:9d:cd:c0:a6:36:79:
e3:04:2e:3c:fa:db:01:8b:6a:41:ae:0a:70:74:af:
48:c2:e1:e3:97:b4:fa:17:25:a9:f6:b2:20:e5:e6:
3e:9f:9d:9e:45:92:67:98:d3:9e:e6:9a:b5:67:86:
76:9d:b6:03:76:31:65:21:2e:b9:10:4b:00:1c:17:
f5:eb:69:db:c1:f1:5e:54:02:b5:b7:4b:ba:8b:a8:
8c:e1:5d:0a:ed:81:1d:29:47:0f:2d:9f:a7:bf:ab:
ad:a2:9f:12:e9:0c:64:f5:ae:f8:23:6c:ae:9a:5d:
92:cd:80:45:b2:16:a6:0f:16:3a:8e:82:67:06:a5:
72:98:a8:14:bf:01:ff:a2:12:c9:55:91:24:1d:98:
7a:76:bb:e0:fb:71:92:6a:17:b1:1c:0e:76:f0:65:
31:a0:5a:71:28:b8:52:8e:cb:5a:4b:6f:e5:0f:aa:
2f:96:52:3d:18:54:d7:03:86:1e:97:bf:01:b7:54:
ee:18:8d:d8:65:75:16:e0:76:89:0e:f2:4f:fc:f6:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:67:8B:91:49:32:1A:52:26:CA:FB:EB:86:5F:4B:A0:48:D7:C1
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1c:e7:60:2a:05:84:e9:1b:e5:0e:a6:a5:16:b3:8e:29:e1:
7f:c2:4d:c3:e0:73:b7:36:dc:d7:41:cc:fe:7e:fc:e3:45:e2:
3c:e3:fe:8f:39:39:60:a7:02:62:c7:be:52:89:a2:06:ab:90:
cd:dd:6d:cf:47:87:cc:8e:b7:96:9c:84:c1:f4:20:d0:94:c6:
6f:3a:15:03:59:9f:af:7a:f3:7d:e1:0d:c4:19:60:31:87:ab:
a0:30:da:44:38:bd:a2:f3:b5:18:29:df:bd:bb:30:5f:51:16:
df:67:07:4c:3b:e6:e1:8c:40:cd:56:dc:6a:7f:4e:74:49:d8:
fb:dd:16:8f:77:f6:a9:55:0e:1f:94:46:1c:b7:7e:f2:54:81:
48:66:06:a5:62:1c:15:fc:a7:6d:43:f9:87:e3:ce:24:00:22:
d6:56:c5:97:61:80:c4:4a:89:13:87:05:1a:7f:2e:4f:bd:9a:
45:1a:17:1d:0c:c5:ff:39:b7:84:18:79:ad:8b:a9:f8:4d:08:
e2:f1:b6:c1:18:cc:fd:ec:7e:f4:89:93:2b:05:8d:20:33:a0:
f5:0f:be:5d:c3:8d:81:70:f9:2a:cb:26:12:8d:41:94:61:19:
95:84:91:47:42:89:0c:46:c6:98:21:1e:51:d1:a7:6f:05:32:
00:51:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:26 2025 by rpki-client