Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32312d3231203d3e203230333236.roa
File: 36322e38342e3136302e302f32312d3231203d3e203230333236.roa (raw, json)
Hash identifier: qYT6V26y9pfehxKhGpnVP+zeUiujmqlKiiEeyJaNpf0=
Subject key identifier: 4C:60:2D:CC:48:C2:C2:BA:DE:67:DA:A5:B1:37:B3:C3:E9:91:3A:F1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 157F8E576DBB1A03EB313ABDE4F60A492528DFD5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32312d3231203d3e203230333236.roa
Signing time: Fri 16 May 2025 05:35:24 +0000
ROA not before: Fri 16 May 2025 05:30:24 +0000
ROA not after: Fri 15 May 2026 05:35:24 +0000
asID: 20326
IP address blocks: 62.84.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7f:8e:57:6d:bb:1a:03:eb:31:3a:bd:e4:f6:0a:49:25:28:df:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 16 05:30:24 2025 GMT
Not After : May 15 05:35:24 2026 GMT
Subject: CN=4C602DCC48C2C2BADE67DAA5B137B3C3E9913AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:5a:8f:a0:fe:2b:14:f3:0b:3b:72:09:64:
da:fa:b2:0c:03:68:ca:ab:f6:8c:f2:9b:e2:c8:2f:
2a:2e:02:d6:90:2c:42:ec:cc:d4:ee:d2:fd:76:96:
d3:5d:ed:5c:0b:32:98:c2:22:93:7e:7f:2e:4c:72:
29:f9:4f:dd:bd:96:ae:43:52:85:3a:5b:18:ef:2e:
a8:8d:5e:1f:d5:68:40:87:2c:5f:7d:4e:dd:96:79:
cd:e1:a4:41:9f:8e:32:11:c1:27:ba:b4:8d:ac:30:
a1:4a:b9:49:5c:e1:0f:30:b4:f6:c8:98:ea:dd:a1:
33:7a:3d:50:f0:e8:53:ef:fc:f6:fb:cd:30:72:71:
1a:0e:9a:b9:36:81:f2:31:70:a4:e4:bc:82:19:22:
9d:2d:5e:f4:d4:4d:85:59:9b:bf:a0:54:25:80:a7:
e6:6e:26:a9:3b:09:b3:8d:69:16:b8:45:5a:a5:de:
97:d5:aa:ab:bf:95:aa:71:fd:40:11:09:aa:46:66:
fc:ab:be:50:ba:c3:18:a8:7e:a5:85:e7:0f:b6:1d:
99:ef:57:cd:80:5d:0d:e7:1e:b2:82:72:4d:2b:bf:
19:66:ac:40:c5:f5:3a:90:17:31:df:71:79:48:80:
37:3e:33:f4:a4:bd:1f:bf:fd:97:56:f9:20:ff:0a:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:60:2D:CC:48:C2:C2:BA:DE:67:DA:A5:B1:37:B3:C3:E9:91:3A:F1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32312d3231203d3e203230333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.160.0/21
Signature Algorithm: sha256WithRSAEncryption
72:34:1c:24:89:16:40:c9:eb:ac:27:a0:fd:3c:7e:d4:6e:80:
2c:ec:e4:0f:1b:28:5f:60:4d:fa:67:77:14:e6:87:3b:9d:da:
62:78:a7:21:28:7b:3b:d0:2d:71:74:8d:89:66:b0:dc:c5:bd:
c0:e3:c5:34:d5:24:d7:6b:5f:f3:5e:5d:c5:80:80:21:ff:f2:
91:74:95:8a:a3:72:a8:c7:41:a5:5e:00:26:19:78:d4:6e:8c:
b9:bc:46:dc:72:4f:16:70:c8:21:d0:4f:63:40:b9:e0:78:a8:
fc:8f:3c:75:cf:4c:a6:2a:f2:13:86:bc:a1:d8:6f:24:65:0f:
8b:55:69:ed:be:00:00:40:82:e0:df:55:52:76:12:fc:6a:a9:
6f:e1:71:69:2d:d4:ca:91:e0:8b:7f:44:0d:c2:81:c2:53:28:
7b:23:73:37:cb:a8:7a:be:a2:98:52:8b:32:1d:42:68:38:5f:
97:7f:df:e6:c0:48:25:86:17:5a:a7:71:09:72:7b:7a:84:a7:
76:00:d8:f7:1d:03:14:13:a7:f6:bd:aa:c8:e1:9d:27:62:6b:
39:28:81:94:b8:58:5b:64:90:1b:58:40:e1:3d:78:5e:01:ad:
5b:22:a1:0d:25:b7:70:db:25:57:48:c7:bb:8b:14:13:e9:0e:
87:d2:f6:82
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFX+OV227GgPrMTq95PYKSSUo39UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MTYwNTMwMjRaFw0yNjA1MTUwNTM1MjRaMDMxMTAvBgNV
BAMTKDRDNjAyRENDNDhDMkMyQkFERTY3REFBNUIxMzdCM0MzRTk5MTNBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F1qPoP4rFPMLO3IJZNr6sgwD
aMqr9ozym+LILyouAtaQLELszNTu0v12ltNd7VwLMpjCIpN+fy5Mcin5T929lq5D
UoU6WxjvLqiNXh/VaECHLF99Tt2Wec3hpEGfjjIRwSe6tI2sMKFKuUlc4Q8wtPbI
mOrdoTN6PVDw6FPv/Pb7zTBycRoOmrk2gfIxcKTkvIIZIp0tXvTUTYVZm7+gVCWA
p+ZuJqk7CbONaRa4RVql3pfVqqu/lapx/UARCapGZvyrvlC6wxiofqWF5w+2HZnv
V82AXQ3nHrKCck0rvxlmrEDF9TqQFzHfcXlIgDc+M/SkvR+//ZdW+SD/CsNJAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUTGAtzEjCwrreZ9qlsTezw+mROvEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjMw
MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMDMzMzIzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAz5U
oDANBgkqhkiG9w0BAQsFAAOCAQEAcjQcJIkWQMnrrCeg/Tx+1G6ALOzkDxsoX2BN
+md3FOaHO53aYninISh7O9AtcXSNiWaw3MW9wOPFNNUk12tf815dxYCAIf/ykXSV
iqNyqMdBpV4AJhl41G6MubxG3HJPFnDIIdBPY0C54Hio/I88dc9MpiryE4a8odhv
JGUPi1Vp7b4AAECC4N9VUnYS/Gqpb+FxaS3UypHgi39EDcKBwlMoeyNzN8uoer6i
mFKLMh1CaDhfl3/f5sBIJYYXWqdxCXJ7eoSndgDY9x0DFBOn9r2qyOGdJ2JrOSiB
lLhYW2SQG1hA4T14XgGtWyKhDSW3cNslV0jHu4sUE+kOh9L2gg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:28 2025 by rpki-client