Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3230342e33372e302f32342d3234203d3e20313938323331.roa
File: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (raw, json)
Hash identifier: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=
Subject key identifier: 61:A3:14:67:15:72:B3:82:EE:B8:83:9D:30:00:FD:B2:43:17:F3:96
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 73663179074A2F8022E68C980B2579A22DD26607
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3230342e33372e302f32342d3234203d3e20313938323331.roa
Signing time: Mon 10 Mar 2025 18:37:53 +0000
ROA not before: Mon 10 Mar 2025 18:32:53 +0000
ROA not after: Mon 09 Mar 2026 18:37:53 +0000
asID: 198231
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:66:31:79:07:4a:2f:80:22:e6:8c:98:0b:25:79:a2:2d:d2:66:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:32:53 2025 GMT
Not After : Mar 9 18:37:53 2026 GMT
Subject: CN=61A314671572B382EEB8839D3000FDB24317F396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:68:fb:d6:9b:24:2f:92:a2:17:aa:12:b8:
36:8f:7b:c5:54:7d:22:b9:1c:78:3c:16:f3:81:98:
ea:a5:26:85:46:30:58:83:fb:fd:d0:0a:14:44:98:
6d:14:a2:3a:78:1d:e5:48:2f:4a:f4:0c:11:75:91:
bd:80:d4:6a:99:8c:68:35:b1:2c:e0:14:ce:db:22:
d5:94:6d:dd:62:fb:22:1f:42:f2:1e:bf:40:81:09:
e5:5e:35:ae:09:38:01:41:e1:c3:59:bb:04:05:93:
f9:1b:9c:60:60:5f:1a:08:c9:0e:c4:89:f7:29:67:
8a:dd:2a:62:f9:9f:f0:ec:08:56:97:a5:eb:a3:aa:
bd:f1:df:00:5b:e5:0a:8f:b8:7c:21:e8:5a:ce:08:
4b:55:e6:ca:9c:19:f2:11:80:52:34:26:5f:80:53:
28:d9:68:0a:39:62:ce:47:2c:35:4e:07:a2:ae:4f:
ad:18:68:62:12:92:53:a6:0d:ca:10:a0:30:56:b0:
7a:c0:8e:3e:86:4a:19:d2:a1:b5:be:5c:8e:02:d1:
08:d2:19:4c:13:48:ee:4c:81:f8:a4:a3:79:0a:25:
0d:81:d9:b2:a9:c7:21:8b:6a:d1:fd:8b:9c:a0:78:
bf:1a:6d:2c:82:4b:09:62:9f:0b:e1:4f:e1:95:09:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:14:67:15:72:B3:82:EE:B8:83:9D:30:00:FD:B2:43:17:F3:96
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3230342e33372e302f32342d3234203d3e20313938323331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:cf:d6:c4:e8:00:80:f3:06:c8:e5:7e:9b:99:a9:f9:ec:
88:0d:a0:b4:04:3c:71:10:ef:df:f5:36:65:7e:43:6b:a2:e3:
bd:1e:8a:f7:d7:97:c3:fb:f1:9c:43:b9:34:ff:15:3f:0c:a7:
6e:0b:1e:d2:15:a7:fd:ba:3d:fc:5a:5e:a8:43:5b:bc:dc:67:
f4:21:db:31:25:15:36:d0:f9:a8:01:bc:1b:40:3c:5c:ac:4f:
f8:0f:a3:ea:1b:49:b3:be:f4:9a:15:6e:9b:7f:4c:ac:6f:37:
45:97:d4:69:df:97:df:96:4f:30:44:80:04:9e:7b:72:b0:aa:
a4:56:d1:ce:0b:76:d1:aa:76:cc:bf:2e:36:55:b5:38:6c:bf:
03:8b:30:04:15:5f:85:23:81:f9:87:71:da:be:a1:ca:29:6d:
d9:89:d1:f7:6c:9d:b9:7b:b2:2c:d4:fe:55:a8:e2:ba:b4:04:
2c:01:d6:c9:1d:12:12:b3:bd:0d:7f:80:cf:06:78:c1:9f:94:
ce:d1:00:8e:61:7e:f8:f2:b7:ba:a5:2a:e2:e4:f4:35:ac:58:
82:13:1b:5c:ea:35:da:ce:3a:27:1e:3e:04:6c:63:a3:01:c9:
f5:f3:35:e3:3d:6a:8d:d8:a5:92:e2:93:3c:08:53:c8:11:19:
c7:b2:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:02:50 2025 by rpki-client