Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137332e302f32342d3234203d3e20323134313433.roa
File: 36322e38342e3137332e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: 6vRrvLN+f8leKxcyU6/jfJN8vVV4vBRkwk3I04W82HA=
Subject key identifier: FA:7A:48:72:00:C1:B1:32:5E:AB:E8:91:19:EF:A7:63:74:17:7C:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10F5DF1045EFACB4E082ED6E4267C759EEE983EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137332e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 15 May 2025 14:14:47 +0000
ROA not before: Thu 15 May 2025 14:09:47 +0000
ROA not after: Thu 14 May 2026 14:14:47 +0000
asID: 214143
IP address blocks: 62.84.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f5:df:10:45:ef:ac:b4:e0:82:ed:6e:42:67:c7:59:ee:e9:83:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 14:09:47 2025 GMT
Not After : May 14 14:14:47 2026 GMT
Subject: CN=FA7A487200C1B1325EABE89119EFA76374177CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:ac:fb:5d:eb:ac:89:02:63:d3:5f:22:fb:
fe:e3:9f:2f:0f:a0:c4:0d:06:9e:c7:55:8b:21:e5:
06:1f:ca:aa:2c:aa:ff:cc:e4:7f:ef:ca:26:6c:60:
35:07:e3:14:88:fe:83:79:f5:90:fb:94:2d:c1:40:
8e:0c:db:c7:11:24:3a:85:89:63:16:94:1b:5d:e5:
1c:26:87:f8:82:b0:70:e8:33:62:23:03:b5:8c:19:
0d:65:08:da:3f:c8:fa:de:d4:55:6f:2d:54:6f:05:
67:da:76:5a:ab:03:9c:b5:0f:84:16:83:c9:d4:90:
cc:95:e7:98:0b:33:1f:2b:90:80:6d:d7:9f:b1:fb:
9a:92:26:c3:a9:83:2a:67:e9:e4:0c:b7:7d:33:27:
2b:b3:c8:ef:3b:04:23:92:95:65:f0:1c:8c:82:ac:
d8:8c:28:f6:be:86:81:55:88:ad:78:2b:1e:4d:26:
71:7b:e2:95:68:a8:a5:ac:61:e8:04:67:f4:cb:10:
1c:28:93:ce:cf:13:68:28:f4:44:be:90:4c:71:9e:
df:d4:8b:72:57:d3:9f:2e:04:c3:64:3c:2f:c7:85:
8d:3f:20:55:b8:f8:8f:e8:81:7c:44:f5:dc:ef:44:
3d:39:61:e8:57:15:16:ca:1d:56:81:18:6c:08:84:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7A:48:72:00:C1:B1:32:5E:AB:E8:91:19:EF:A7:63:74:17:7C:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137332e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:db:3c:23:d6:ab:f5:43:9c:85:58:ee:e8:d2:25:0c:c1:ae:
8a:e5:03:36:db:c3:b7:54:bd:6c:95:23:9d:da:0c:9e:17:96:
16:2e:6a:2e:3a:37:dd:3f:36:83:5c:1a:42:80:91:88:8c:a8:
d1:6e:36:1a:22:2a:4d:19:66:69:dc:40:55:63:e6:8c:64:9c:
f9:1e:4d:6e:cc:7f:6e:f3:4e:66:1b:22:57:a9:81:b5:80:b9:
ea:2c:a2:08:36:b3:41:60:10:e5:94:34:47:ec:6b:1d:34:79:
14:0f:fa:fa:3b:24:9e:6e:6e:0b:b4:35:a8:20:01:db:f2:16:
43:33:32:a3:75:8e:a3:9e:e7:b7:1d:a4:af:07:a6:a6:36:7e:
f0:d6:58:f6:b0:e5:0b:d3:68:89:1e:65:80:a4:5e:0f:88:98:
c4:3a:bb:18:27:00:55:e7:19:2e:4f:59:44:1c:2a:bf:e7:50:
79:9b:6a:97:1f:5d:42:b8:ae:cc:29:d4:b6:91:50:af:b3:ad:
b2:a8:84:f6:7d:21:3f:9d:03:51:37:ac:d3:e3:c3:9c:37:dd:
96:9c:e9:e9:9a:5b:4c:f0:2d:c8:56:63:0e:b9:31:db:36:12:
e6:05:55:80:77:44:5a:f9:3d:ed:60:91:b6:35:52:bc:dc:7e:
7f:bb:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:18 2025 by rpki-client