Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
File: 36322e37322e31322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: gF+ZYLW+bfowk7nhpBK0B8qouTKNvZrI+l+AEqvHVtI=
Subject key identifier: EA:42:89:65:19:89:A5:1F:AE:4C:61:CC:05:71:86:D8:03:76:85:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78993D8E610D33ECC4C1BE3F719D6FB21729C29C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:15 +0000
ROA not before: Thu 13 Jun 2024 10:36:15 +0000
ROA not after: Thu 12 Jun 2025 10:41:15 +0000
asID: 47583
IP address blocks: 62.72.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:99:3d:8e:61:0d:33:ec:c4:c1:be:3f:71:9d:6f:b2:17:29:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:36:15 2024 GMT
Not After : Jun 12 10:41:15 2025 GMT
Subject: CN=EA4289651989A51FAE4C61CC057186D80376850F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:16:5b:24:c1:28:d4:72:8e:4c:5b:fc:1c:
92:8a:9a:68:7f:ff:35:7d:fc:7c:4d:58:f9:59:da:
04:b9:45:b0:f4:fd:6a:42:41:65:a7:cd:de:f1:9b:
86:1a:14:ad:eb:eb:76:53:48:a7:9f:b2:3b:e1:00:
16:90:d7:46:ae:95:68:e4:9a:bc:dd:33:08:ee:83:
5a:fa:aa:f4:19:8d:1e:08:89:da:eb:82:29:4e:8b:
11:d1:42:24:ea:db:01:ff:75:e7:41:52:14:3f:be:
f0:f6:ca:59:0c:dd:78:dd:91:d9:3d:c2:4b:ed:73:
ef:ca:40:a8:9f:85:4b:02:cf:82:28:9c:92:07:38:
b6:57:2e:9d:c8:bf:d6:59:5f:d9:50:ea:55:2a:7f:
ef:2c:84:f5:73:0f:82:07:29:c1:32:d6:26:4b:da:
2d:c5:9d:41:fa:98:b2:66:1f:55:02:7c:eb:85:b8:
e4:49:46:f1:28:f6:cf:6d:11:7b:4f:1e:72:82:87:
da:fd:56:e7:bb:5b:e0:09:ab:02:aa:6c:81:76:8f:
eb:e9:b6:fa:47:92:58:09:88:e2:7a:1c:b7:64:ef:
3a:60:03:5f:61:fc:76:39:05:cf:15:30:13:68:8b:
51:46:14:10:48:b2:ea:ef:ab:d0:ee:8e:e4:f4:74:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:89:65:19:89:A5:1F:AE:4C:61:CC:05:71:86:D8:03:76:85:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.12.0/22
Signature Algorithm: sha256WithRSAEncryption
28:58:1e:f9:61:27:28:ba:7f:80:1c:0b:58:53:2d:cf:be:aa:
b9:5d:2a:37:3f:21:01:45:2c:64:6b:3b:20:d0:7a:6b:29:56:
ac:51:32:59:77:c8:8a:5e:b0:33:88:e4:6d:60:6a:e4:06:3d:
66:11:ad:72:b5:ec:26:bd:71:38:17:ed:93:85:fa:d9:e4:24:
c0:ee:ce:20:94:d3:1c:c5:8c:a9:80:c1:b9:2e:a7:d7:d2:21:
ae:76:0d:2a:04:34:f5:84:52:4d:37:b9:3d:ab:3e:97:c3:4b:
1e:11:c9:47:4d:d3:ac:59:04:02:e1:02:62:ed:b5:ed:c2:05:
44:de:47:36:94:30:7a:c2:f2:83:9c:f7:86:40:55:07:6a:48:
8a:f6:3d:b4:72:c1:e7:ee:cd:20:1b:96:f5:7b:36:3f:17:83:
08:60:2c:ad:43:46:31:7a:8e:53:d6:06:4a:53:94:48:f6:b5:
fe:e1:54:04:18:91:a4:62:68:94:b0:17:e0:dd:54:c2:f1:bc:
b9:40:a2:4c:4e:64:79:bd:a4:f1:4f:e6:bc:bd:a9:3b:a7:3a:
4f:eb:90:5c:b0:e0:a0:98:5d:ee:b5:56:05:b9:9a:97:94:58:
92:c9:30:01:5b:6d:61:da:97:fd:0c:fc:ab:07:e1:ee:f5:c3:
58:e1:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org