Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
File: AS62068.roa (raw, json)
Hash identifier: YYXs8k4yr/12FqjElO24hd1oBoc11cEKE2kSMMcc2KE=
Subject key identifier: 2D:CD:F7:98:A3:40:DE:9D:76:9E:7C:3F:BB:86:07:EF:DC:ED:58:3D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 20C4C26682D7A4906E14A46D4225867BD0F243C1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
Signing time: Thu 03 Apr 2025 10:20:42 +0000
ROA not before: Thu 03 Apr 2025 10:15:42 +0000
ROA not after: Thu 02 Apr 2026 10:20:42 +0000
asID: 62068
IP address blocks: 141.11.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c4:c2:66:82:d7:a4:90:6e:14:a4:6d:42:25:86:7b:d0:f2:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 3 10:15:42 2025 GMT
Not After : Apr 2 10:20:42 2026 GMT
Subject: CN=2DCDF798A340DE9D769E7C3FBB8607EFDCED583D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:5c:e6:23:e7:cd:d6:e1:0b:e5:54:14:af:
10:e7:5c:9f:a0:6a:1c:c1:e5:69:38:91:a3:10:22:
5f:1a:79:09:03:01:42:48:4d:cf:3a:9c:06:a3:f1:
73:0d:14:b1:95:78:d8:78:33:2e:cb:ae:dc:b0:50:
8c:3f:e6:29:06:d7:e1:a7:32:64:d4:90:ee:b3:67:
6f:34:e2:85:9e:a4:b4:23:f8:82:ea:5b:b6:18:e1:
98:c6:a6:c4:bb:70:73:ec:0d:78:9d:73:b6:5b:56:
00:24:a9:82:d6:13:15:69:45:3d:bb:bf:87:2c:34:
e4:8d:90:22:32:b6:a0:aa:8c:99:41:00:68:04:8a:
e8:74:24:d7:54:33:d4:b9:0d:ae:4e:d6:a6:6d:80:
ab:4b:cc:d5:ef:d5:20:77:48:6c:3e:15:5b:41:ea:
6d:c8:51:64:5a:93:0b:30:67:dd:a2:28:49:30:8c:
b2:86:4b:ed:05:49:3f:5e:05:9c:b8:ca:91:26:eb:
6f:9a:18:b5:be:55:87:e2:d8:31:6a:d9:aa:9a:2b:
2c:69:aa:76:60:62:3f:5a:b3:5e:3f:83:0a:db:a5:
f2:77:21:cc:bf:67:45:48:08:a3:1c:4c:2c:5d:25:
b4:47:1b:25:96:6e:2c:28:b0:28:ae:66:30:0f:9b:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CD:F7:98:A3:40:DE:9D:76:9E:7C:3F:BB:86:07:EF:DC:ED:58:3D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.244.0/24
Signature Algorithm: sha256WithRSAEncryption
64:56:89:77:d4:e9:0f:e5:82:3b:95:cd:e5:c8:a8:74:fb:da:
fa:b9:2e:7d:4e:5c:c3:da:df:c6:6a:55:3f:33:17:c1:52:b5:
a5:de:5e:47:58:f2:e8:86:fd:7a:c8:dc:dc:a3:08:c2:3f:80:
e2:86:f6:26:20:0a:e0:0f:6d:41:e6:8b:40:02:13:bc:e1:d8:
43:9f:a2:27:de:ee:77:c7:2d:96:de:88:7b:a0:77:53:45:e9:
fc:9f:ba:32:15:15:2e:6a:1d:7e:71:a9:fa:2d:b7:6f:2a:64:
f9:8c:36:62:81:3b:4c:c9:be:99:58:5c:a8:3f:f9:37:f0:99:
68:4c:53:87:8e:74:60:97:a7:e0:d6:83:8f:ea:65:f8:8f:33:
6d:5a:cf:b0:52:7d:ac:4d:3c:fa:15:e4:e6:f7:0a:44:bb:e7:
19:47:e2:cd:db:2f:40:8a:e3:86:18:61:90:40:1e:c4:49:c5:
d1:d9:04:1a:8d:94:fd:9e:dd:70:73:e8:85:76:73:19:e3:b7:
36:42:fa:9d:11:46:21:33:00:aa:10:62:c5:a8:71:f6:0d:fa:
a0:4a:2f:bb:46:a8:31:cf:55:1a:96:60:37:6c:be:38:ab:36:
47:fa:67:4a:7b:b7:65:8a:6a:20:04:c5:8b:89:70:9b:3a:5b:
f0:a1:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:09 2025 by rpki-client