Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
File: 36322e37322e382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: gkmO2C7vTZB79sS8CmdpyyFKg8knsg65XblRHASDHTE=
Subject key identifier: 19:68:97:48:C6:DF:39:9F:52:E4:D4:DD:F7:46:8E:06:BB:2B:50:5A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 626D723C547DC6176B907D3419647B10D938ACBA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:17 +0000
ROA not before: Thu 15 May 2025 10:41:17 +0000
ROA not after: Thu 14 May 2026 10:46:17 +0000
asID: 47583
IP address blocks: 62.72.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6d:72:3c:54:7d:c6:17:6b:90:7d:34:19:64:7b:10:d9:38:ac:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:17 2025 GMT
Not After : May 14 10:46:17 2026 GMT
Subject: CN=19689748C6DF399F52E4D4DDF7468E06BB2B505A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:24:b7:00:16:6c:5b:81:6e:16:34:77:43:20:
71:1f:db:5d:85:4a:a5:f9:4b:98:39:ec:96:2e:b5:
51:a0:6c:74:60:af:bf:cc:90:44:80:5e:99:c1:fd:
9b:c5:91:66:5e:f0:db:ed:0f:22:b5:9d:43:e6:04:
77:83:f0:b0:9c:d3:51:ea:34:1e:d4:31:4d:ef:41:
88:5d:be:95:12:59:0f:8d:96:0d:30:bf:51:76:e8:
67:32:ef:bd:ca:bf:d9:bf:23:c3:ba:71:28:d9:00:
13:55:69:0d:e0:a3:74:f0:a8:a4:1f:bb:56:23:6c:
86:7b:47:49:21:de:fe:bb:4d:5f:09:c8:bc:31:cf:
ba:f1:b6:60:f1:19:07:33:4f:ed:3b:f6:e9:2b:f1:
e4:40:90:e3:3c:ea:2c:ef:5f:2f:7b:08:9e:08:37:
07:b7:0b:27:7c:55:3e:63:15:a1:57:89:5c:ce:aa:
e2:9b:bf:c2:2d:5f:1c:6c:32:95:f4:72:92:3f:b4:
d2:58:a2:19:3e:6f:75:08:e0:19:34:9f:99:80:1c:
e7:07:e3:89:90:44:03:ea:9a:fa:2b:ab:3a:f6:19:
c0:8d:79:3b:25:8b:df:2f:b4:33:34:6f:63:3c:62:
52:de:e3:f7:96:41:f7:51:95:e2:be:dd:20:da:dc:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:68:97:48:C6:DF:39:9F:52:E4:D4:DD:F7:46:8E:06:BB:2B:50:5A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.8.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f1:80:e0:a1:46:74:aa:20:d3:46:5c:2d:d9:80:0b:dd:78:
30:15:bb:a0:a1:76:24:b4:13:1b:b5:5c:54:ca:fd:15:74:00:
34:3a:47:54:da:b3:ec:84:62:7a:3a:9f:cf:87:56:55:e9:3f:
f3:bb:76:7a:da:7a:c3:df:6d:b6:10:8e:79:63:5e:1f:3c:de:
6d:fd:d2:80:05:0c:e0:5d:86:bc:e7:ea:a2:c2:ff:56:9e:5c:
d0:fa:37:2c:4c:ab:0d:2b:ae:23:f5:c1:fd:2e:8e:51:ce:6d:
3f:40:cd:3b:31:b7:4a:cb:44:78:e4:bf:8b:fb:34:c7:c0:95:
23:67:53:1e:79:39:d5:c6:3d:f5:b2:c2:09:63:29:83:01:85:
b0:01:73:86:72:ec:6a:6c:ea:6b:a7:aa:2a:3f:fd:11:dc:cc:
24:01:fa:49:60:ff:5d:19:62:99:f2:43:42:30:d9:64:ec:8f:
dd:e8:22:4d:84:95:46:99:62:08:a3:e5:bc:5c:4f:be:07:d0:
24:0c:16:56:87:5c:8b:19:c8:dd:79:fa:90:32:c1:93:23:fa:
f6:98:55:0f:0d:01:df:e2:ae:04:d6:a1:24:c8:8d:16:ce:93:
00:23:79:2c:da:84:ff:54:ef:60:7a:d7:18:f9:3c:45:1f:65:
76:ea:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:13:33 2025 by rpki-client