Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36302e302f32332d3234203d3e203331313033.roa
File: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (raw, json)
Hash identifier: 7hC/7buJ7T5t4OgZLWTNq+9WScksNQKydBgZ1vBlVgM=
Subject key identifier: 3F:3A:1F:B8:AF:55:93:B5:51:71:22:03:CB:AA:4A:22:4A:D0:37:07
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 303F8A935AE9DFF8CE7A13EC5F194535E47812C8
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36302e302f32332d3234203d3e203331313033.roa
Signing time: Mon 19 May 2025 12:51:52 +0000
ROA not before: Mon 19 May 2025 12:46:52 +0000
ROA not after: Mon 18 May 2026 12:51:52 +0000
asID: 31103
IP address blocks: 62.141.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3f:8a:93:5a:e9:df:f8:ce:7a:13:ec:5f:19:45:35:e4:78:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 19 12:46:52 2025 GMT
Not After : May 18 12:51:52 2026 GMT
Subject: CN=3F3A1FB8AF5593B551712203CBAA4A224AD03707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:17:8f:0d:c2:06:fe:ec:a5:60:bb:aa:82:
33:d5:2e:15:4a:fb:ee:3b:90:08:4d:26:15:ad:51:
c6:ce:f5:18:32:f5:1e:07:6c:20:bb:7b:cd:a8:7a:
33:b8:99:bc:b5:ba:30:d3:f2:c4:af:c1:7a:17:ae:
41:1f:f5:8f:ea:09:2a:4f:1f:7a:35:0a:0f:a8:28:
e8:40:6e:ef:ed:d1:4a:5d:36:6d:33:78:91:4c:e5:
f8:bb:86:f0:b8:27:38:eb:71:d5:08:ea:74:12:e4:
f6:ac:5f:e5:de:05:28:3d:4b:cc:e4:13:d8:94:32:
ca:33:92:a4:aa:c2:db:f2:2d:1a:ad:df:df:a6:52:
6a:31:d3:0f:ae:53:de:f2:55:34:18:3a:67:2b:2f:
9d:8d:db:9a:1f:4d:7e:0e:07:2b:aa:2a:9d:e7:3f:
0a:09:f8:fd:12:b5:dd:bc:f5:1a:6a:15:91:12:9b:
7c:53:c5:b2:7b:ed:8a:c2:dd:1b:d7:c9:b2:9e:3a:
4f:92:33:41:57:2b:0e:1f:e7:bf:34:1b:1c:cf:b9:
d1:cb:35:a3:a6:78:c1:27:7d:b8:0e:eb:82:65:ff:
7f:e0:db:eb:38:29:9a:86:84:9a:c8:35:30:2e:7e:
95:e1:7e:6d:ff:74:c3:e8:02:9a:9c:4e:a1:b9:59:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:1F:B8:AF:55:93:B5:51:71:22:03:CB:AA:4A:22:4A:D0:37:07
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36302e302f32332d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:63:79:04:3e:b3:65:6d:0c:a9:3e:50:7a:2f:aa:98:9d:de:
1a:cb:91:06:b1:f0:88:55:9b:e7:5a:14:96:89:54:36:a9:d3:
af:ac:44:06:4d:76:59:0c:65:f8:94:24:df:67:56:b6:0b:5f:
3e:c7:80:d4:c5:cc:3b:20:32:55:83:0d:68:31:49:e8:dc:a7:
c3:5f:01:48:96:c5:79:24:32:6e:7c:4e:5a:07:2b:78:06:a4:
4d:2d:c7:26:70:67:85:64:6d:03:0b:ee:5b:91:a4:81:e4:2b:
39:f4:90:3a:dd:11:d4:93:2e:86:5d:16:f2:4f:9f:3e:ab:e1:
dc:c5:ac:ed:ad:83:e1:e4:3b:a8:c4:41:1b:40:a7:a6:7a:f0:
17:3f:b5:64:fe:5d:ab:b9:fa:dc:42:25:8f:b9:95:7f:41:48:
f5:41:ef:c5:8c:b2:60:94:aa:5b:22:a3:c9:ac:65:c6:20:d0:
13:e3:b1:79:8a:93:f1:20:02:a3:6a:e1:61:e7:64:e2:0d:01:
a3:dd:d0:af:6c:25:e9:61:d2:c6:68:b4:40:86:6a:33:5a:eb:
03:d0:02:10:77:7c:c1:61:0b:71:1f:ae:9a:00:0d:e9:94:10:
4a:81:7b:51:1b:46:94:e3:fb:2a:02:c0:75:c5:1d:06:2b:cf:
2e:1e:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:14 2025 by rpki-client