Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/36322e3138322e3139322e302f32312d3234203d3e203236393534.roa
File: 36322e3138322e3139322e302f32312d3234203d3e203236393534.roa (raw, json)
Hash identifier: Ik7anBwPgCuhmGi57S9xoCnrcZASk7NJHdOlyprymaY=
Subject key identifier: 40:1F:B8:01:F0:33:E5:42:12:13:FA:A6:C4:85:0A:EE:30:B9:B7:5D
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 1DE6A806A5859B8D0548B0B8D079E6A20EEC0ACF
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/36322e3138322e3139322e302f32312d3234203d3e203236393534.roa
Signing time: Thu 20 Feb 2025 01:21:27 +0000
ROA not before: Thu 20 Feb 2025 01:16:27 +0000
ROA not after: Thu 19 Feb 2026 01:21:27 +0000
asID: 26954
IP address blocks: 62.182.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e6:a8:06:a5:85:9b:8d:05:48:b0:b8:d0:79:e6:a2:0e:ec:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Feb 20 01:16:27 2025 GMT
Not After : Feb 19 01:21:27 2026 GMT
Subject: CN=401FB801F033E5421213FAA6C4850AEE30B9B75D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:c0:f0:c9:0e:45:18:6b:47:7a:58:1a:32:
c0:01:b5:40:38:1e:d4:52:23:73:18:8e:99:35:43:
8b:6a:d2:7d:7f:0f:8f:a7:07:79:83:1a:cd:9a:75:
75:81:a7:db:d9:12:5b:da:d7:ee:92:77:98:27:92:
1b:99:98:47:59:89:ad:e4:a1:52:9d:a1:8d:57:11:
04:f7:15:d5:8b:33:9d:86:a5:b4:14:86:88:05:89:
42:3c:4c:0b:62:17:68:ad:cd:28:f5:4e:02:9f:8f:
a0:8f:13:c3:fb:34:a3:3e:0c:a4:ca:57:54:ff:28:
e6:4a:41:ef:1a:09:8a:c2:c4:f6:c9:0b:e0:2f:fa:
59:1f:05:25:b2:c8:2b:8d:71:bd:e6:80:f1:20:59:
ac:e9:c5:51:9f:ed:4a:44:b1:f8:22:2d:7d:ae:31:
87:94:fd:30:50:89:e6:27:d5:cb:eb:51:de:f2:b0:
fb:0e:58:d6:14:56:76:55:0a:ae:a1:81:bf:fa:be:
d6:9e:8a:b1:c0:c0:b0:5f:e3:6a:69:9e:9b:76:d8:
de:70:5f:65:fc:95:df:ee:f6:05:4f:4f:82:23:80:
8e:57:33:c8:30:f8:47:c4:2b:f2:3c:85:71:b8:8a:
3e:bc:d5:c6:89:19:7b:35:f4:46:a7:bd:de:e6:ef:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:B8:01:F0:33:E5:42:12:13:FA:A6:C4:85:0A:EE:30:B9:B7:5D
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/36322e3138322e3139322e302f32312d3234203d3e203236393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:e4:f7:8c:b5:9b:68:04:f8:1e:c9:c3:78:27:a1:95:b3:6b:
15:c7:72:66:d3:4b:6e:b0:39:4b:66:98:57:51:c5:8b:17:ea:
2a:ab:81:a7:e0:21:f4:e1:92:46:00:60:30:09:6b:76:ea:26:
6d:08:b9:cc:1a:e7:46:bb:62:9b:c0:fd:68:fe:30:27:58:3e:
b3:34:a9:ce:97:85:27:c8:28:bf:95:8e:c6:16:90:a3:bf:c7:
d8:e9:f2:2a:c3:d1:34:84:15:b7:52:b7:b4:0b:5e:63:fb:a0:
6b:a3:4a:61:6e:ec:62:86:20:88:de:47:c6:59:f0:29:95:28:
b2:b6:02:60:63:13:bd:51:68:78:eb:e5:9d:07:5d:a5:db:15:
da:f2:72:ef:6b:9a:1b:06:fa:2f:64:a5:fe:c1:4f:13:34:c2:
62:67:48:ff:e1:6b:cf:41:6c:13:1b:f6:1f:95:51:b0:ac:c0:
47:e5:62:d1:65:83:c9:fc:7e:d3:6f:f3:70:1d:53:4f:2a:40:
ee:8a:c2:4f:af:4a:b0:8e:63:a7:b5:83:8f:77:19:7d:46:ae:
08:86:ec:50:62:5e:3d:62:a6:5e:ac:9c:06:79:3a:79:95:f7:
5f:62:04:65:41:24:dd:ea:f9:41:cb:89:d7:82:95:03:a7:a8:
50:be:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:31 2025 by rpki-client