Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
File: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: QUIoI+sfgGqnzSMGXGY2Nu/V/qv4f6G25FLk9a6yOMo=
Subject key identifier: 12:8C:37:BB:41:B6:34:34:4C:93:E4:04:3A:75:87:B1:87:AF:46:2F
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 1EAC1593A32DB3786B73B18596CB9841158C0732
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
Signing time: Wed 08 May 2024 14:24:27 +0000
ROA not before: Wed 08 May 2024 14:19:27 +0000
ROA not after: Wed 07 May 2025 14:24:27 +0000
asID: 16509
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 04:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ac:15:93:a3:2d:b3:78:6b:73:b1:85:96:cb:98:41:15:8c:07:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: May 8 14:19:27 2024 GMT
Not After : May 7 14:24:27 2025 GMT
Subject: CN=128C37BB41B634344C93E4043A7587B187AF462F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:bf:13:f8:12:fe:84:8f:75:56:0c:50:ff:
14:c6:7a:56:a9:a9:00:19:d1:1a:67:a9:9b:52:80:
7d:f9:7d:3b:14:10:14:77:28:7e:01:dc:a9:70:7b:
ff:b5:5e:72:59:c6:4a:8d:a5:96:62:de:0c:ba:fd:
0d:d5:3c:bf:b2:72:9c:c7:48:08:82:cf:d3:75:6f:
2f:68:c8:ae:d4:8e:3c:db:8f:67:8f:4a:29:0e:98:
a5:e9:32:fa:81:b8:25:ba:ae:52:7a:58:74:d2:cd:
36:81:8c:a2:ed:77:f2:71:ec:ca:dc:5f:43:a4:40:
a1:40:4d:e2:82:c1:63:c6:c7:0b:17:01:7a:04:ae:
31:cd:b6:10:25:39:76:61:1a:d1:90:17:f2:95:22:
5b:0d:bd:a4:8e:4b:52:a5:b6:3a:c3:6c:ee:20:aa:
5b:46:b7:42:8d:fe:98:14:8c:33:96:2f:ac:3b:0e:
4c:07:f2:53:76:28:04:8d:71:90:dc:77:97:88:c0:
7e:c8:3b:f6:ce:e5:31:1b:b5:7c:ab:93:81:2a:1c:
4b:2f:c4:74:d3:85:aa:24:e6:7e:f5:38:cf:13:8d:
16:f2:02:62:1a:75:df:71:d6:41:83:45:62:e1:30:
9b:fe:73:eb:12:fa:de:a2:e9:02:a8:6f:ca:2c:1f:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:37:BB:41:B6:34:34:4C:93:E4:04:3A:75:87:B1:87:AF:46:2F
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:89:48:0e:d8:ea:8c:e1:c2:e9:64:66:e9:b4:4b:6f:51:4a:
b3:5d:e2:07:9c:33:6d:ae:ba:07:3e:95:14:10:fc:c9:32:bb:
b5:e5:c4:c6:f1:d4:87:dd:21:3e:bd:be:04:04:13:09:d9:94:
ea:a5:77:1d:a0:ca:08:48:31:29:6b:7e:b7:04:05:88:77:84:
05:9d:e9:fd:9e:24:5e:b3:a5:58:61:f5:75:e6:3f:12:e5:98:
08:12:3e:d9:8b:13:c6:2d:44:26:3f:0f:12:0c:14:35:88:09:
27:6d:7f:46:d9:85:53:5d:7e:e8:8d:27:f9:79:da:3e:bd:98:
f2:a3:26:8d:d1:e8:1e:fc:50:8e:66:b3:34:2a:77:f3:93:ff:
f0:f3:86:83:41:d2:6a:0a:c1:91:aa:b8:3a:42:07:85:c5:06:
4a:b9:80:cb:a0:62:27:78:d9:9c:1d:18:e0:4d:5b:af:e5:0d:
eb:81:83:be:f1:3a:d5:6b:5f:75:bd:9f:e8:2f:c7:f2:50:bd:
58:98:cf:96:c8:90:85:35:13:af:d3:77:e0:2d:44:e7:b8:a3:
d2:97:ab:3c:a9:94:f7:cc:8f:76:ea:df:12:5c:92:47:4f:fc:
7a:2a:1e:5a:19:b7:1c:72:9e:65:90:85:97:b2:9d:e9:c3:87:
d7:2d:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:50 2025 by rpki-client