Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
File: 36322e3134362e3136382e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: I3nPfWw7RuLsZmQF/KxUHz4avfC6UtWz0379HoJf3Jk=
Subject key identifier: E5:15:24:F9:3F:22:63:0A:A5:F4:0A:68:C4:81:A9:36:5C:B1:AE:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28578152A417482B44DF485785D41BE3BC4BCFE2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
Signing time: Mon 27 Jan 2025 09:45:09 +0000
ROA not before: Mon 27 Jan 2025 09:40:09 +0000
ROA not after: Mon 26 Jan 2026 09:45:09 +0000
asID: 40021
IP address blocks: 62.146.168.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:57:81:52:a4:17:48:2b:44:df:48:57:85:d4:1b:e3:bc:4b:cf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:09 2025 GMT
Not After : Jan 26 09:45:09 2026 GMT
Subject: CN=E51524F93F22630AA5F40A68C481A9365CB1AE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:27:f3:ff:c4:6e:d0:84:1a:ce:ed:4c:bf:
82:72:c8:29:7f:0c:f0:81:49:18:27:5a:19:49:80:
6d:ff:80:09:dc:30:cb:b4:1c:b1:bd:ea:ae:a0:7c:
6f:94:02:73:e1:29:9f:81:0b:1f:d3:49:d5:75:d1:
85:a0:41:ab:f6:1f:68:66:3a:8d:d8:d9:d6:0f:64:
01:2f:85:23:70:8c:15:5e:7a:10:07:26:63:f8:86:
cc:79:9e:2b:96:e3:d0:dd:90:f9:a7:df:a5:ef:1f:
bb:4b:48:aa:31:fb:c3:7f:88:b1:e3:2c:d1:34:46:
fb:1d:b7:5b:af:7a:e2:ab:7a:6b:ab:c8:7e:d6:0e:
5b:30:88:cd:39:2f:ef:82:af:ee:9d:36:32:3a:e3:
d0:0a:16:96:08:41:a6:9a:f2:3d:2f:5a:68:c3:f2:
00:e9:2b:60:3e:30:7f:df:b2:29:c4:4f:64:01:41:
1f:c0:b0:73:b8:bb:eb:3c:63:b7:57:03:b3:9d:8a:
36:1a:e2:d4:bb:de:a4:9a:ee:32:14:63:4f:8a:49:
a8:a8:5e:74:27:4d:bc:80:fc:fc:d8:ce:e5:e8:e8:
66:ae:40:09:0a:d5:b4:be:12:bf:3c:71:7d:f5:b0:
68:8f:2f:b4:c4:3d:f0:ab:d8:b1:c7:51:3f:91:b4:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:24:F9:3F:22:63:0A:A5:F4:0A:68:C4:81:A9:36:5C:B1:AE:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.168.0/21
Signature Algorithm: sha256WithRSAEncryption
70:34:99:02:dc:a2:8e:34:8e:fb:51:56:ef:b3:a9:47:3c:2b:
e4:50:13:df:b2:93:ff:cd:95:a5:2c:e1:26:5e:10:25:6f:3a:
ef:ba:7e:06:e0:0c:c0:a8:f4:f0:f6:be:c3:89:50:1f:ec:64:
2e:fb:05:1f:93:2b:f7:7a:ff:3c:33:b0:d2:fd:13:67:61:51:
0d:41:3a:bb:3c:d3:98:89:b9:2b:2e:3c:f8:37:91:fc:70:19:
12:ca:09:e6:a6:92:03:67:02:07:a8:75:c3:64:f3:06:94:e8:
cf:e7:fb:88:93:ae:4c:2b:09:47:9d:d9:a2:fa:ac:0e:a9:67:
92:ef:b8:a0:55:75:b1:69:20:e4:a2:3f:5e:54:e7:f8:14:9d:
f2:ff:a1:34:97:02:ba:f7:11:6b:c7:cf:14:bc:85:57:cb:ab:
f2:bc:91:69:18:29:0a:3e:b4:47:8e:f9:6d:7a:79:23:60:11:
82:fb:3a:4f:7f:44:7d:79:d7:6a:60:7b:a5:8f:11:2b:b8:5e:
16:a8:70:67:9a:6c:1c:97:df:0e:7e:17:8f:ea:00:3c:19:68:
8f:43:2b:08:56:f3:a9:05:42:28:f6:9d:60:70:82:f4:a4:39:
57:0c:bc:30:4b:2d:7c:3e:df:94:68:be:b4:2e:dd:2b:c1:6e:
09:1b:bb:5e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUKFeBUqQXSCtE30hXhdQb47xLz+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDlaFw0yNjAxMjYwOTQ1MDlaMDMxMTAvBgNV
BAMTKEU1MTUyNEY5M0YyMjYzMEFBNUY0MEE2OEM0ODFBOTM2NUNCMUFFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYyfz/8Ru0IQazu1Mv4JyyCl/
DPCBSRgnWhlJgG3/gAncMMu0HLG96q6gfG+UAnPhKZ+BCx/TSdV10YWgQav2H2hm
Oo3Y2dYPZAEvhSNwjBVeehAHJmP4hsx5niuW49DdkPmn36XvH7tLSKox+8N/iLHj
LNE0Rvsdt1uveuKremuryH7WDlswiM05L++Cr+6dNjI649AKFpYIQaaa8j0vWmjD
8gDpK2A+MH/fsinET2QBQR/AsHO4u+s8Y7dXA7OdijYa4tS73qSa7jIUY0+KSaio
XnQnTbyA/PzYzuXo6GauQAkK1bS+Er88cX31sGiPL7TEPfCr2LHHUT+RtLmPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU5RUk+T8iYwql9ApoxIGpNlyxrgowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzEzNDM2MmUzMTM2
MzgyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
PpKoMA0GCSqGSIb3DQEBCwUAA4IBAQBwNJkC3KKONI77UVbvs6lHPCvkUBPfspP/
zZWlLOEmXhAlbzrvun4G4AzAqPTw9r7DiVAf7GQu+wUfkyv3ev88M7DS/RNnYVEN
QTq7PNOYibkrLjz4N5H8cBkSygnmppIDZwIHqHXDZPMGlOjP5/uIk65MKwlHndmi
+qwOqWeS77igVXWxaSDkoj9eVOf4FJ3y/6E0lwK69xFrx88UvIVXy6vyvJFpGCkK
PrRHjvltenkjYBGC+zpPf0R9eddqYHuljxEruF4WqHBnmmwcl98OfheP6gA8GWiP
QysIVvOpBUIo9p1gcIL0pDlXDLwwSy18Pt+UaL60Lt0rwW4JG7te
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:25 2025 by rpki-client