Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e34302e302f32322d3332203d3e20313431393935.roa
File: 36322e37322e34302e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 8hKVyDq6LO2htpiSxR2p9mcUhcq/U2b3m/p8lu+3EYU=
Subject key identifier: 2D:1E:5B:5C:11:9A:FC:FC:1C:C5:46:0E:E0:7B:D9:4F:89:27:49:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 064EA5538FC55D1E59395A96EB201EEA5DF3CFF0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e34302e302f32322d3332203d3e20313431393935.roa
Signing time: Thu 20 Jun 2024 10:03:58 +0000
ROA not before: Thu 20 Jun 2024 09:58:58 +0000
ROA not after: Thu 19 Jun 2025 10:03:58 +0000
asID: 141995
IP address blocks: 62.72.40.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4e:a5:53:8f:c5:5d:1e:59:39:5a:96:eb:20:1e:ea:5d:f3:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 09:58:58 2024 GMT
Not After : Jun 19 10:03:58 2025 GMT
Subject: CN=2D1E5B5C119AFCFC1CC5460EE07BD94F89274907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:95:5b:52:dc:74:f8:a7:2a:10:ea:79:b5:
be:0c:0f:4e:d8:bb:c1:06:23:99:f6:7c:b6:c1:9f:
00:41:11:0a:e7:dc:c1:1e:60:cb:f5:b4:cc:bb:02:
2d:09:a2:f8:b4:bc:c6:14:24:c6:d9:1a:19:2b:f6:
94:54:24:dd:67:95:b4:77:31:04:43:38:a7:e4:67:
af:d9:26:3d:dd:8e:5b:1a:2e:72:47:f1:4c:27:59:
da:f0:9b:62:eb:8c:03:92:31:55:07:01:45:fa:63:
8a:5a:a2:74:70:d6:7d:cc:18:1a:94:fc:fb:7a:2a:
a3:8f:82:e4:5f:2d:24:0e:f5:cf:c4:49:21:9f:44:
aa:e4:4a:47:99:18:ab:f4:21:b1:97:3c:ee:a6:7e:
cc:6c:60:c3:6a:9c:e9:9c:69:24:0e:f7:cd:52:95:
0a:f8:d7:cf:ac:91:a1:61:ed:4c:c5:9f:ea:fd:ba:
fa:a5:b0:f1:db:ab:81:61:88:ae:1b:d9:01:3b:84:
28:25:f0:8a:26:88:67:68:dd:d2:c3:15:49:1b:f4:
de:4c:ab:1c:82:55:4b:43:1a:2c:a2:7a:f1:bd:c2:
01:6a:e8:dc:90:c7:7f:33:b9:40:b5:e6:89:43:81:
96:a1:5c:46:1a:53:02:36:ac:5b:79:aa:9d:12:45:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:5B:5C:11:9A:FC:FC:1C:C5:46:0E:E0:7B:D9:4F:89:27:49:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e34302e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.40.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a4:8c:7b:05:65:49:a3:89:10:79:3a:74:a9:f9:1e:66:83:
a2:8e:9d:9b:2d:3d:70:15:34:38:4e:18:db:c3:cf:88:fb:0f:
a7:cb:88:69:41:a6:d5:a8:d9:5e:ff:c9:c5:a3:b3:47:95:63:
22:88:51:4e:2b:c8:c4:98:5f:4d:53:26:a6:8c:18:f6:3e:ec:
85:d2:49:35:ef:7c:37:5c:d7:d2:b6:97:76:54:e3:a8:cb:de:
c0:1e:9f:cb:f8:d6:80:1e:ce:b6:2c:4b:a3:74:c6:8a:6a:ce:
32:f9:b3:73:77:18:1c:7d:fa:d8:15:64:a2:96:ba:4d:84:f0:
20:ba:0e:d5:77:5b:60:8e:e0:96:9e:67:b8:d0:d9:8e:f9:fb:
75:af:20:fd:98:48:f3:d8:0d:be:69:98:9a:4f:a3:e7:fb:4c:
c4:21:85:f9:15:0b:e3:3c:6d:1b:4f:00:04:a3:95:84:2f:cd:
39:28:e2:61:4d:25:80:6c:ff:2f:81:be:32:ab:0f:46:a4:1b:
96:e2:81:98:fa:73:14:27:b5:a7:5d:d6:11:db:55:13:1b:08:
9e:cd:86:a9:5d:28:78:ad:33:21:62:01:34:56:1a:9a:e9:ca:
b9:ee:b1:e4:2f:01:a4:16:a2:b8:de:2e:fc:43:3c:36:56:bf:
f8:a8:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org