Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
File: 36322e37322e31322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: vX48u0hWnskEAaMK8ZyDat+VYhcVmPO0Y45Z+/7jvaE=
Subject key identifier: 1D:45:30:02:F0:85:17:D5:3B:C0:FF:6E:3C:51:48:AE:56:FF:2E:EA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69DDA3D49A0152054D04470026CCC33BC1D31F16
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:18 +0000
ROA not before: Thu 15 May 2025 10:41:18 +0000
ROA not after: Thu 14 May 2026 10:46:18 +0000
asID: 47583
IP address blocks: 62.72.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:dd:a3:d4:9a:01:52:05:4d:04:47:00:26:cc:c3:3b:c1:d3:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:18 2025 GMT
Not After : May 14 10:46:18 2026 GMT
Subject: CN=1D453002F08517D53BC0FF6E3C5148AE56FF2EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:96:17:b7:20:12:89:bb:b9:e4:c4:7f:fc:
b4:23:ad:86:7c:42:96:1a:9c:98:4d:a2:50:3f:b0:
7d:1c:d6:82:6b:9f:93:8b:76:37:14:7a:72:a2:b2:
9c:0a:37:d6:8b:53:5e:60:cd:fa:79:a1:ed:69:6e:
98:69:3b:4f:60:7b:a4:ab:8e:58:26:70:99:f9:98:
db:f3:a7:ec:64:63:a7:52:24:3b:ac:d1:bb:b6:88:
40:8c:e8:36:12:d0:80:05:5e:75:08:2a:fa:14:28:
1c:01:ff:14:63:e3:83:e0:f7:d7:fe:69:00:fd:b6:
04:05:db:14:99:8b:4d:7e:a5:e3:6d:69:88:5e:73:
c5:03:f6:24:81:7b:f2:08:99:13:23:aa:0f:50:91:
f9:51:9a:da:b8:2a:99:87:9d:09:e3:a9:6e:d5:d7:
25:64:74:cb:be:30:cf:17:f2:3d:e4:61:a8:96:62:
34:0d:31:fe:98:99:35:66:89:c8:d1:80:21:15:77:
35:b4:a7:13:fb:9f:7b:a4:ac:d9:74:02:0b:4a:24:
ea:de:74:05:67:3b:ff:4b:67:26:f4:df:6c:9e:ab:
1d:6b:d8:2e:d8:06:ad:8a:92:6a:0e:2a:c8:32:71:
45:b0:2d:12:ee:1d:61:c0:7f:89:ed:be:f5:0f:e3:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:30:02:F0:85:17:D5:3B:C0:FF:6E:3C:51:48:AE:56:FF:2E:EA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ae:e9:df:7f:95:96:0a:ed:26:39:c5:d3:ad:83:ef:d5:71:
2b:d1:a9:5e:17:48:89:61:2d:9f:7b:f1:29:0d:83:23:7e:7a:
28:a6:dd:ef:3b:65:4a:2d:e5:29:a2:8c:95:d1:62:28:e1:9f:
f4:64:7c:47:fe:ac:ae:25:24:0f:e9:50:75:f3:19:18:92:f6:
4e:3e:fe:a1:b9:c5:e9:66:6d:0c:b9:ab:df:27:9f:98:bf:3a:
3f:76:a9:b6:6a:7d:74:18:ad:9d:e0:d3:74:a3:05:08:ae:4b:
cc:b2:df:73:dd:ae:da:3c:44:11:48:12:21:29:97:68:06:70:
51:7b:b7:df:09:61:c7:43:90:72:ce:05:00:a6:4a:e9:0c:65:
64:3d:73:d8:47:fc:77:f0:77:e0:82:eb:ae:0c:d2:82:de:92:
6f:54:27:9b:52:8d:aa:62:a8:25:3e:a8:6f:54:e0:80:80:8b:
64:0a:bb:51:cb:65:54:a2:d2:3f:df:a6:d6:c6:a8:28:fc:0f:
35:53:87:41:de:2c:36:e1:69:ba:0b:45:28:d3:e8:7c:07:bf:
6c:90:79:01:1f:ab:b2:99:b6:87:d9:17:9e:44:0e:f3:3e:f1:
34:80:8b:fa:23:7a:55:75:53:71:eb:fb:2e:55:ff:c0:39:46:
61:87:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:01 2025 by rpki-client