Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
File: 36322e37322e382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: vEhUqH1Zx/7hsulp7DTz19c1xoWp2Q7BkbonftxUwZI=
Subject key identifier: 99:99:64:D9:70:9D:C5:48:93:7F:85:83:30:64:BA:DF:66:A4:FA:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6BA7DE03A25C08989E438A8FF6422A667132B0DC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:20 +0000
ROA not before: Thu 13 Jun 2024 10:36:20 +0000
ROA not after: Thu 12 Jun 2025 10:41:20 +0000
asID: 47583
IP address blocks: 62.72.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a7:de:03:a2:5c:08:98:9e:43:8a:8f:f6:42:2a:66:71:32:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:36:20 2024 GMT
Not After : Jun 12 10:41:20 2025 GMT
Subject: CN=999964D9709DC548937F85833064BADF66A4FAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:1b:d4:90:ae:2c:6a:33:cf:98:c1:68:c3:
c5:30:fb:88:03:d4:e6:c3:c1:23:05:61:74:e6:f5:
0b:60:e6:90:e6:8a:31:80:c3:a1:91:1e:08:ba:87:
c6:2b:64:83:57:c4:57:a5:37:af:9a:ea:ce:c8:a4:
d4:32:5f:d2:36:da:68:a9:03:e8:e0:f9:8a:b7:b3:
d8:5f:0e:29:14:79:38:20:30:43:58:f5:5b:af:a5:
f4:37:f1:2d:b5:88:eb:96:7f:6c:18:7a:ae:ce:70:
6a:23:51:f6:b8:32:2e:95:b7:be:5c:28:98:fd:76:
55:d8:a7:de:0b:99:ad:0e:49:07:f1:56:08:21:f1:
30:bd:f9:77:f5:64:e1:a5:f6:4b:a1:73:f9:45:3f:
78:e4:66:5f:04:39:30:e4:ad:14:cc:5a:4c:95:7e:
25:54:88:15:a4:76:97:cb:f6:3a:7a:e6:b8:59:10:
76:48:df:53:90:7d:18:bd:84:49:c9:6b:75:d6:5f:
8a:b1:12:c0:aa:93:e3:78:71:41:c7:d2:cf:8a:65:
79:6c:f2:58:8c:65:da:2c:5c:19:3e:f1:b9:46:e1:
2f:5f:a2:df:ce:ca:93:10:5b:49:0e:9d:68:7c:25:
58:47:0e:61:47:11:aa:ac:4c:a5:6e:c7:43:3b:de:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:99:64:D9:70:9D:C5:48:93:7F:85:83:30:64:BA:DF:66:A4:FA:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:9f:bb:33:8c:50:4c:6d:4c:50:97:51:2c:d0:cb:b9:ea:1e:
29:45:70:24:3d:7a:d4:94:37:fe:6e:8f:36:34:c1:c4:9f:29:
9a:2a:51:e4:3f:a1:72:67:af:3e:d1:f7:cb:cc:3c:aa:52:d1:
5b:a0:da:ae:df:1f:55:ac:67:bf:d5:d4:17:d9:c8:e8:90:2b:
5e:39:e3:cf:05:6f:08:23:fe:9b:c1:db:4e:2e:a1:58:97:87:
b0:16:ec:d5:48:c8:99:1b:dd:d4:09:db:d2:a7:6b:c9:ba:6f:
1e:5c:8c:45:01:73:fd:0a:ba:62:17:36:96:a2:02:72:fc:c6:
06:25:63:9a:98:2c:24:98:d4:61:27:8f:06:6e:7f:35:67:14:
0e:78:48:a0:fb:14:25:88:ad:c8:7d:b3:24:ad:a8:5a:4c:6f:
31:04:3d:0f:e6:f4:60:6a:14:f1:67:ed:6c:57:ce:0d:c3:a3:
e5:13:ec:09:7e:99:b5:b4:27:76:89:8f:9d:b5:5a:1d:a7:03:
5d:69:4a:d1:f2:3e:8f:40:ac:7f:ae:af:de:30:96:8e:c6:05:
69:77:34:9f:72:f9:cd:ef:d7:68:6a:76:e0:d5:44:b5:45:d4:
31:ed:c9:03:53:bf:cc:1c:37:ed:67:e8:fe:d2:49:80:8c:1f:
c7:54:15:8e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUa6feA6JcCJieQ4qP9kIqZnEysNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA2MTMxMDM2MjBaFw0yNTA2MTIxMDQxMjBaMDMxMTAvBgNV
BAMTKDk5OTk2NEQ5NzA5REM1NDg5MzdGODU4MzMwNjRCQURGNjZBNEZBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KRvUkK4sajPPmMFow8Uw+4gD
1ObDwSMFYXTm9Qtg5pDmijGAw6GRHgi6h8YrZINXxFelN6+a6s7IpNQyX9I22mip
A+jg+Yq3s9hfDikUeTggMENY9VuvpfQ38S21iOuWf2wYeq7OcGojUfa4Mi6Vt75c
KJj9dlXYp94Lma0OSQfxVggh8TC9+Xf1ZOGl9kuhc/lFP3jkZl8EOTDkrRTMWkyV
fiVUiBWkdpfL9jp65rhZEHZI31OQfRi9hEnJa3XWX4qxEsCqk+N4cUHH0s+KZXls
8liMZdosXBk+8blG4S9fot/OypMQW0kOnWh8JVhHDmFHEaqsTKVux0M73qQHAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUmZlk2XCdxUiTf4WDMGS632ak+qswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzczMjJlMzgyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPkgIMA0G
CSqGSIb3DQEBCwUAA4IBAQAtn7szjFBMbUxQl1Es0Mu56h4pRXAkPXrUlDf+bo82
NMHEnymaKlHkP6FyZ68+0ffLzDyqUtFboNqu3x9VrGe/1dQX2cjokCteOePPBW8I
I/6bwdtOLqFYl4ewFuzVSMiZG93UCdvSp2vJum8eXIxFAXP9CrpiFzaWogJy/MYG
JWOamCwkmNRhJ48Gbn81ZxQOeEig+xQliK3IfbMkrahaTG8xBD0P5vRgahTxZ+1s
V84Nw6PlE+wJfpm1tCd2iY+dtVodpwNdaUrR8j6PQKx/rq/eMJaOxgVpdzSfcvnN
79doanbg1US1RdQx7ckDU7/MHDftZ+j+0kmAjB/HVBWO
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:16 2024 by rpki-client on console-fra.rpki-client.org