Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
File: 36322e37322e31362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: otdRO+GdQFJa9P0gGADyUtYbeQtZ0AG7JfYkfTPIyKM=
Subject key identifier: 70:6E:D1:D3:95:C3:46:7E:03:DC:6E:C1:47:AF:10:0A:06:C0:51:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47B557FC806703F65B724C9E4E4E77129643A9AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:17 +0000
ROA not before: Thu 15 May 2025 10:41:17 +0000
ROA not after: Thu 14 May 2026 10:46:17 +0000
asID: 47583
IP address blocks: 62.72.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b5:57:fc:80:67:03:f6:5b:72:4c:9e:4e:4e:77:12:96:43:a9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:17 2025 GMT
Not After : May 14 10:46:17 2026 GMT
Subject: CN=706ED1D395C3467E03DC6EC147AF100A06C05183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:d8:de:78:04:57:7b:00:44:11:05:6a:02:
87:08:b0:0f:8b:fb:a4:7f:59:92:77:0a:7c:be:14:
34:8a:7d:7f:a1:52:06:28:7b:46:65:21:e6:d0:46:
37:d7:f7:4f:94:47:80:1d:64:95:74:3c:e3:46:dd:
02:18:8f:9b:ad:10:91:33:10:13:92:a9:a0:01:b3:
52:37:34:86:5a:61:ec:84:5a:4a:e9:e2:e1:6f:2e:
52:4d:fc:1f:d2:6c:69:cb:9b:c4:9b:14:1a:51:02:
14:63:f1:ee:62:60:d4:21:da:e7:b8:2a:89:c9:51:
fd:28:49:db:e1:ef:78:35:88:0e:7f:62:bb:5f:68:
b0:e2:19:28:65:da:5b:2f:c4:80:bf:ed:4b:d3:c7:
5f:54:f3:7a:1a:e8:fc:2c:c7:df:1e:b8:84:93:4d:
e2:46:06:f0:38:d7:93:66:f3:84:a2:2e:0a:4a:f2:
ae:01:59:2e:be:72:a6:1f:54:0a:91:90:d5:87:4e:
c0:85:64:76:43:dd:09:78:20:a9:1b:68:b4:c4:f6:
9c:39:eb:23:4b:d7:ec:a1:5b:c3:e0:53:a6:62:85:
df:6c:f6:d9:0e:38:6c:c4:01:73:aa:83:b0:a0:db:
fb:11:5c:1b:f2:db:2e:7d:2c:6d:9b:1e:e4:82:01:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6E:D1:D3:95:C3:46:7E:03:DC:6E:C1:47:AF:10:0A:06:C0:51:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.16.0/22
Signature Algorithm: sha256WithRSAEncryption
66:e5:28:48:b3:6a:1b:7a:78:ba:9e:0b:51:56:8b:77:98:e2:
b1:ea:f2:2b:cb:a3:29:db:1e:60:77:db:fa:18:7f:23:a5:b1:
35:90:0c:6e:63:32:6d:42:e2:c6:e6:05:52:f2:78:e2:f7:22:
4c:69:76:2c:fd:bb:22:fd:fe:86:bc:fd:62:b5:37:38:e5:4b:
93:9f:0d:28:ee:f6:49:a0:e9:de:aa:39:b9:b8:3f:a5:f8:7f:
b2:2b:14:7d:83:8f:53:b7:54:2f:22:3a:f8:c3:13:af:76:64:
d2:3b:15:89:44:0b:f0:d8:85:b8:af:8b:81:8a:a8:bd:f8:26:
dc:b9:ab:b6:d2:18:ea:27:3d:66:4b:fd:9b:09:d6:49:1e:12:
05:07:ff:6e:b1:8c:2e:94:88:3b:7d:6e:34:e1:9e:bd:58:cc:
a4:36:a1:f2:d9:1e:6e:1d:a3:63:79:de:da:1e:eb:0a:9b:74:
90:05:71:8e:f6:95:4a:a9:69:65:ff:61:a1:02:88:c3:b6:9a:
1c:ce:5b:f8:30:46:f2:5a:bb:0f:ec:82:42:94:3e:cc:4e:12:
18:c5:05:71:3f:9f:d1:42:c1:73:fb:33:c6:57:95:a4:9a:f6:
b0:fd:d2:c6:fe:7d:73:b0:1d:bc:ce:18:49:17:71:39:df:81:
52:e3:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:49 2025 by rpki-client