Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa
File: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (raw, json)
Hash identifier: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=
Subject key identifier: 21:E7:AC:74:01:1B:AF:29:E8:50:87:B2:70:81:4E:47:97:BF:68:E6
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 0B95D3DDFE7E57AA1AA4834D6A2A4B5D91DC3E52
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa
Signing time: Tue 17 Jun 2025 14:54:09 +0000
ROA not before: Tue 17 Jun 2025 14:49:09 +0000
ROA not after: Tue 16 Jun 2026 14:54:09 +0000
asID: 152179
IP address blocks: 62.112.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:95:d3:dd:fe:7e:57:aa:1a:a4:83:4d:6a:2a:4b:5d:91:dc:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 17 14:49:09 2025 GMT
Not After : Jun 16 14:54:09 2026 GMT
Subject: CN=21E7AC74011BAF29E85087B270814E4797BF68E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:ac:05:d3:79:40:1e:97:00:b2:60:06:67:
53:fe:79:aa:69:14:dd:b5:12:0b:9a:d6:44:cf:be:
a0:43:60:84:e3:53:03:3f:30:de:2d:2b:73:fa:d7:
be:84:16:79:10:d6:66:b5:58:aa:41:d1:22:df:82:
f8:7e:7d:ff:41:ac:df:93:47:b9:ec:ea:49:0b:0d:
db:82:b9:bd:1d:ef:b7:9d:9a:cc:5f:fe:be:34:a2:
2d:1f:38:7b:13:33:d6:97:39:a8:60:23:d7:0c:ff:
a2:7c:cf:fb:ca:10:65:16:50:df:c8:81:86:1a:2f:
3c:4d:2e:27:ec:ba:b1:7c:4f:52:7c:ba:43:0b:00:
e9:a2:85:f7:71:5b:b7:0b:31:8a:a1:24:50:69:60:
7d:69:9b:55:78:6e:bb:91:9e:eb:a1:ce:f4:50:2f:
c6:9d:d7:a1:94:0f:f1:d8:d9:d9:5f:9d:15:45:48:
28:a7:87:e0:aa:08:0c:d9:43:67:29:57:cc:10:e7:
46:3d:d9:8c:3b:08:d6:94:66:da:11:e2:b7:57:d0:
47:e7:f3:3e:8a:13:9d:1b:04:c4:b5:fd:aa:ea:c5:
dc:b8:13:83:d1:d0:74:24:6b:89:c6:4c:ec:b9:44:
95:f4:d9:8a:c2:fe:38:47:d9:70:c7:a7:f2:f3:bf:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:AC:74:01:1B:AF:29:E8:50:87:B2:70:81:4E:47:97:BF:68:E6
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/20
Signature Algorithm: sha256WithRSAEncryption
15:4d:2c:c2:84:14:02:24:33:4a:11:1c:59:f3:ed:94:35:70:
f4:a3:01:02:65:4d:4a:23:d5:ba:a0:fd:95:0d:82:84:8b:9c:
fb:06:11:43:eb:d2:64:35:3a:da:b8:92:7c:d4:13:16:b7:27:
93:48:ef:ea:d2:3e:89:e1:d9:f7:1a:c0:57:a9:ac:91:a8:ee:
92:4c:f1:5d:e5:57:66:1a:5f:55:9b:f3:48:05:03:89:1c:63:
22:30:c4:37:63:e0:fa:02:50:58:65:34:25:9f:77:eb:d3:9b:
35:69:36:0d:8b:9a:3d:b6:21:27:ca:43:16:fe:8d:00:21:da:
a2:4d:c4:5c:d7:02:44:dc:8d:b7:ce:73:70:45:e7:fe:1d:47:
4d:90:7e:95:15:41:6d:86:e9:72:7d:d5:c2:05:d7:e7:ae:cd:
1d:35:f7:8a:76:79:01:c0:d0:b2:a5:e3:43:74:15:ae:21:28:
64:ed:65:d0:65:27:1a:e4:ae:82:31:89:e6:d3:c1:39:f4:73:
2c:a4:a4:a8:f7:c7:f6:fc:16:6a:4a:87:84:1d:86:62:20:8f:
f9:10:35:fa:61:77:7a:45:ff:5e:20:e0:2a:ea:83:16:c7:6e:
81:a2:fa:8e:d8:f3:19:d1:4b:fa:45:ed:5b:8f:aa:41:44:9a:
07:fc:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:46 2025 by rpki-client