Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa
File: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (raw, json)
Hash identifier: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=
Subject key identifier: 19:5A:37:09:D2:A7:AE:4A:2D:76:85:A5:92:83:92:C4:C2:47:89:67
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 1924FE27830BCA76B302011783EF1139C3DB87E9
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa
Signing time: Tue 17 Jun 2025 14:54:09 +0000
ROA not before: Tue 17 Jun 2025 14:49:09 +0000
ROA not after: Tue 16 Jun 2026 14:54:09 +0000
asID: 138997
IP address blocks: 62.112.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:24:fe:27:83:0b:ca:76:b3:02:01:17:83:ef:11:39:c3:db:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 17 14:49:09 2025 GMT
Not After : Jun 16 14:54:09 2026 GMT
Subject: CN=195A3709D2A7AE4A2D7685A5928392C4C2478967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:fc:55:c9:6a:f4:e2:d1:29:53:98:05:b9:
98:58:1b:e6:49:0d:6b:e0:aa:59:df:a7:c3:cc:e8:
30:5c:2e:08:b2:11:ee:03:30:9d:ad:44:d8:a9:b0:
e5:b3:a8:fd:d3:25:1a:a4:5d:f2:2f:ca:6c:5f:59:
34:20:f7:6a:f1:74:ed:d8:b2:da:8f:fd:90:e5:27:
7a:b5:d2:7c:44:58:f4:ee:82:68:91:94:24:cf:46:
df:4b:25:e5:35:e8:03:0e:ca:c1:2b:ef:06:2f:75:
9f:83:80:e9:a0:80:2d:3a:16:8a:84:90:ee:63:62:
2e:b8:09:c6:7e:53:66:b7:c1:b7:6a:33:a1:92:0b:
73:db:e3:3a:2b:e3:0e:77:7f:a6:d8:46:2b:cd:57:
64:46:a8:2e:e9:86:7b:4e:36:d2:89:3b:33:fb:3c:
cf:d5:22:a2:c8:c3:82:53:7d:78:1a:6b:d8:18:53:
c7:a0:12:de:2b:42:55:c9:77:84:b7:b1:8d:96:bd:
36:55:b7:15:07:98:71:59:31:ac:9c:45:78:c9:5d:
7d:e0:40:fe:23:8f:6a:14:a1:d1:67:06:04:21:46:
cd:57:c0:e8:fa:0f:09:64:05:91:18:62:7c:c7:eb:
32:d4:c0:ce:ca:ef:6f:00:23:bd:f2:d3:77:7e:e1:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5A:37:09:D2:A7:AE:4A:2D:76:85:A5:92:83:92:C4:C2:47:89:67
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/20
Signature Algorithm: sha256WithRSAEncryption
73:87:2f:13:e6:48:a4:d1:90:7d:de:a5:2c:74:77:b8:d6:b0:
a2:bd:ba:f8:7b:df:66:01:fc:4c:09:4a:5c:72:1b:90:51:9a:
ea:c9:f9:ce:1c:dc:b0:5f:b6:6e:88:72:87:c3:23:8f:06:16:
de:e7:2e:57:9a:7b:6d:77:20:1a:33:94:46:17:84:cb:bf:3c:
f1:75:a9:a9:f5:c1:00:b2:2c:83:a0:94:da:d3:66:eb:7c:76:
b9:58:b4:d7:f9:67:65:37:23:7a:d3:8e:48:df:4b:fd:f6:a0:
f7:2d:3e:f6:d1:6b:68:e7:0e:ff:06:d0:0b:e2:b7:61:e8:fa:
88:6b:80:3b:6a:36:c7:d4:53:0c:95:39:10:30:3c:27:b3:fd:
82:03:1f:d1:d4:14:af:48:66:fb:11:c7:7b:29:d4:93:bd:77:
f5:16:3b:08:73:ba:eb:c8:aa:5b:a1:23:4f:4c:1a:30:ee:76:
54:64:17:fd:6e:c4:7e:ae:3a:1d:73:f4:3f:93:f5:b2:e3:ff:
e8:cf:cc:ca:4a:dc:48:bd:92:54:9b:29:0a:c8:d1:26:28:72:
90:f1:af:91:ff:e4:3f:dd:4b:34:64:b6:b8:4f:dd:8f:c0:a5:
d5:9e:68:22:8d:f3:07:ee:64:06:10:15:cb:9b:9a:37:b3:09:
99:7e:e0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:10 2025 by rpki-client