Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
File: AS62610.roa (raw, json)
Hash identifier: BIk8EdAhJrp2aYB+YxQJfArWhlhGziYn47zANe+Rqpw=
Subject key identifier: FF:95:E6:8A:77:01:75:B8:A9:39:C4:B7:89:49:6C:D5:D7:54:86:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E480FB80471FF096DCD5875ACD39F651F826BD6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
Signing time: Mon 12 May 2025 02:47:53 +0000
ROA not before: Mon 12 May 2025 02:42:53 +0000
ROA not after: Mon 11 May 2026 02:47:53 +0000
asID: 62610
IP address blocks: 143.14.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:48:0f:b8:04:71:ff:09:6d:cd:58:75:ac:d3:9f:65:1f:82:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 12 02:42:53 2025 GMT
Not After : May 11 02:47:53 2026 GMT
Subject: CN=FF95E68A770175B8A939C4B789496CD5D7548613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:12:71:51:94:75:b9:97:e4:ed:75:ed:39:
d7:de:85:45:ea:9c:19:55:4d:63:7d:de:2c:af:8f:
8e:84:59:b4:da:c6:2e:36:ab:0d:d9:14:dd:47:cc:
1c:62:d1:59:c6:60:a4:4b:7a:57:f8:99:e2:2d:7b:
3a:af:74:3c:fc:aa:1e:af:d7:98:dd:47:06:4f:4a:
8e:9a:99:28:46:44:16:40:23:fc:6d:92:9c:c9:38:
a9:73:b3:66:ba:5b:34:4c:79:36:fe:83:07:b3:23:
c5:c9:73:2f:e8:3e:77:76:98:d7:1d:bc:fc:59:aa:
8a:44:36:af:16:36:08:e1:a9:f7:28:59:5a:a1:31:
03:e2:11:f4:38:c2:97:f1:19:73:9f:d0:7a:46:7f:
b9:3a:37:bf:b6:db:5b:7b:5e:8e:22:8e:b4:f8:f9:
90:46:6d:d6:02:c1:89:00:a3:73:8b:0a:cb:da:ab:
d2:c0:8e:74:29:8b:d8:83:8e:6a:10:4c:59:d6:6a:
f7:7c:eb:11:62:d7:e8:36:64:41:0a:fa:40:3a:b3:
c2:5b:d9:70:4b:72:73:55:90:50:14:01:a7:88:5d:
dc:82:1b:3d:64:46:0c:be:3f:19:d5:a0:3b:ae:a1:
87:04:3d:84:e7:7c:15:74:49:e2:75:ae:0f:71:1e:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:E6:8A:77:01:75:B8:A9:39:C4:B7:89:49:6C:D5:D7:54:86:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9e:5d:f4:71:6b:ee:ec:8e:75:6e:15:c1:b2:49:00:08:0c:
56:ed:89:82:e9:0d:e3:15:ef:85:77:d1:8d:18:a2:1d:8e:10:
55:42:8e:81:0e:a1:ab:ca:53:84:28:13:c7:8f:40:7f:94:f3:
ee:d7:98:fd:c1:cf:af:40:e8:f4:f1:27:f1:e5:a8:12:20:97:
2c:aa:0d:a1:a3:29:00:1c:70:44:31:c5:5a:05:fe:72:83:57:
eb:08:ca:23:98:83:b4:5d:fb:93:b8:77:59:96:db:87:89:42:
0e:86:8a:e9:d5:b6:c7:22:c8:3e:bc:95:2b:a4:31:90:a8:43:
67:27:33:f5:47:16:cb:3d:b9:cf:27:38:30:df:a6:c6:54:d2:
72:12:70:6d:8d:5f:24:6c:2c:94:36:54:ba:c7:00:86:db:0a:
b2:18:95:f4:bb:28:f9:fb:02:e3:1e:2f:5d:c8:64:af:a4:fe:
af:4c:a0:55:16:7a:67:0e:6e:df:d6:d5:24:ff:93:62:8d:1a:
4d:96:cd:4a:ac:c4:7e:61:27:3a:43:13:b2:d1:64:ef:46:9d:
95:a2:a5:da:17:14:80:a6:3a:6e:68:1a:4f:bc:e9:c4:11:fb:
dd:93:87:b6:b7:62:27:9e:99:aa:58:29:ab:74:13:91:e5:8e:
1a:cb:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:29:06 2025 by rpki-client