Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137322e302f32342d3234203d3e20323134363737.roa
File: 36322e38342e3137322e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier: RwFuQRMEobs4drjPOm2Z8v6I+lTHhurbUBGdlmGY2Jw=
Subject key identifier: E1:C0:81:4E:FA:FA:20:76:8C:21:28:8B:BD:C3:EF:0E:A6:CB:69:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 055AAA3E9EF27D1844A9CBA5D8929A47261C97EA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137322e302f32342d3234203d3e20323134363737.roa
Signing time: Thu 15 May 2025 15:28:53 +0000
ROA not before: Thu 15 May 2025 15:23:53 +0000
ROA not after: Thu 14 May 2026 15:28:53 +0000
asID: 214677
IP address blocks: 62.84.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5a:aa:3e:9e:f2:7d:18:44:a9:cb:a5:d8:92:9a:47:26:1c:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 15:23:53 2025 GMT
Not After : May 14 15:28:53 2026 GMT
Subject: CN=E1C0814EFAFA20768C21288BBDC3EF0EA6CB698D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:ec:7a:a3:d8:1d:fa:b8:fd:42:6e:10:07:
cf:84:a0:03:4d:3f:75:e9:3d:bd:44:8c:15:4a:38:
b7:54:09:46:f5:f7:e5:8b:a6:1a:9c:b2:70:91:42:
e9:54:f8:5b:40:31:2e:ce:c8:7b:20:5f:45:df:9b:
aa:55:9e:c2:c6:00:20:84:ec:c8:86:2f:c7:36:11:
aa:95:c1:4f:c1:79:dd:5c:9f:8d:c0:67:aa:0c:0d:
b3:d9:2c:d5:9d:54:b1:49:a1:f2:a9:b4:80:ae:ba:
1b:dd:ae:e5:64:bc:46:b4:c0:81:e2:36:d7:19:bd:
40:a4:9e:6d:75:87:21:25:cf:e4:cb:85:47:8e:67:
62:ad:72:76:3b:ea:e7:7c:00:15:80:28:5e:07:ae:
b3:a5:7c:58:66:7f:85:9a:ce:ac:48:43:e8:b4:88:
56:65:be:fd:69:ab:e0:ca:54:81:a0:1e:f5:05:d4:
a9:d7:8f:b4:39:44:e1:05:f4:ed:9a:63:30:37:99:
b1:e7:fc:65:e8:99:c9:4e:8a:40:3a:a3:83:30:af:
79:cd:af:c4:55:71:f6:49:55:15:16:de:a4:74:41:
a8:29:d1:9c:a1:af:ce:87:c9:cf:67:d9:10:92:62:
89:c6:72:b8:39:19:7a:ea:26:3d:4f:77:fc:89:e4:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:81:4E:FA:FA:20:76:8C:21:28:8B:BD:C3:EF:0E:A6:CB:69:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137322e302f32342d3234203d3e20323134363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:35:71:f4:46:04:d7:c1:e1:92:1a:93:64:34:7d:91:ae:2a:
a9:b7:10:85:5f:89:eb:2b:c0:17:d4:e7:ae:d2:0c:28:1f:f8:
89:ba:8c:0d:3e:d2:68:9b:20:4f:27:78:c9:10:0b:0b:fd:4e:
74:0a:2a:9d:7b:d6:b4:6b:7d:02:9d:df:cc:0d:4f:82:32:20:
ad:ad:6d:b0:89:80:77:3b:68:8c:59:f8:4e:a8:d4:e9:68:eb:
27:22:31:46:bf:ef:f0:b7:7f:d8:72:2b:d7:fa:3c:31:c8:e7:
ed:8d:2d:7b:67:84:3e:12:fb:1c:b0:54:f1:94:7d:d4:8a:91:
c6:1e:d7:73:92:27:12:e9:d5:ca:d3:ba:ac:83:95:6f:46:ab:
ce:df:21:a0:51:1e:dd:28:3a:eb:36:c2:9a:a8:27:41:51:2a:
8c:98:9a:7d:28:90:cf:b7:96:49:d0:8b:bf:c6:d5:83:46:d7:
41:33:f0:4d:84:f2:e7:bc:71:e8:45:0e:06:ad:77:2c:6e:a0:
80:6a:c1:4f:e7:8d:a6:50:d0:02:7c:e8:78:0a:48:43:d6:85:
7b:6e:bb:0c:d9:23:54:fd:61:b9:ff:a1:cc:2a:a3:fd:a6:fc:
3d:56:92:d1:79:37:a4:55:01:4d:60:39:e6:a2:51:be:b1:3f:
e3:07:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:27:46 2025 by rpki-client