Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa
File: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (raw, json)
Hash identifier: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=
Subject key identifier: 23:69:B9:B1:E0:83:1E:FD:2E:EC:51:28:58:C2:AD:27:CE:D2:1B:40
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 13774F68FED59F5A58AAB98B2EB01544524A4767
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa
Signing time: Tue 17 Jun 2025 14:54:09 +0000
ROA not before: Tue 17 Jun 2025 14:49:09 +0000
ROA not after: Tue 16 Jun 2026 14:54:09 +0000
asID: 210542
IP address blocks: 62.112.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:77:4f:68:fe:d5:9f:5a:58:aa:b9:8b:2e:b0:15:44:52:4a:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 17 14:49:09 2025 GMT
Not After : Jun 16 14:54:09 2026 GMT
Subject: CN=2369B9B1E0831EFD2EEC512858C2AD27CED21B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:a1:8b:d2:88:43:f8:51:4a:5d:43:49:7d:
88:6f:af:8b:3e:cd:06:1c:4a:ed:ea:4e:bf:2c:d4:
25:c1:aa:f0:24:7d:9f:0c:75:61:6d:a8:c4:29:93:
ae:24:b8:dd:af:16:1a:4b:f9:e2:33:a4:17:5f:20:
06:7a:98:61:98:54:77:3f:2f:bd:77:04:4a:76:33:
1f:83:c0:39:59:f5:fa:00:5b:43:13:62:63:66:f5:
a2:6e:50:ec:99:16:bf:2e:19:2c:db:4f:41:e5:65:
c9:1e:7a:b5:8e:7d:2d:9a:25:a5:d4:a3:d1:0d:e4:
50:01:e1:71:b2:98:28:40:5e:72:30:a5:43:3c:31:
bd:06:1a:c0:e5:e0:5c:cc:b0:a3:c5:02:5a:7c:3c:
9d:b4:67:33:22:0d:77:e9:ab:0a:ff:ee:4d:83:72:
d3:f6:a9:38:da:d3:a3:6e:dc:e6:95:65:54:70:23:
06:26:6c:d0:0a:aa:19:84:93:7a:e4:36:d2:1e:fa:
08:d0:e8:6e:fd:3f:8f:ab:b1:8b:f6:e7:64:77:c5:
d7:85:70:4e:2d:71:a0:b1:3b:70:3c:ae:62:6c:f7:
c7:36:28:88:ba:cf:69:fb:eb:c7:11:b9:62:e1:36:
e8:0e:54:cc:5b:a0:89:31:b0:42:ad:6b:f5:4f:fe:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:B9:B1:E0:83:1E:FD:2E:EC:51:28:58:C2:AD:27:CE:D2:1B:40
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/20
Signature Algorithm: sha256WithRSAEncryption
61:f0:70:81:75:95:e6:05:dc:f4:08:21:ed:de:2b:25:01:55:
d5:63:b0:b7:4b:ac:42:5c:70:71:08:a2:87:8f:4d:8d:18:09:
8f:5c:53:bd:52:2a:ab:99:14:ad:18:fa:7b:09:4a:62:0b:66:
67:67:58:5e:04:82:19:b0:8e:af:5c:bb:e9:62:0a:b6:67:b5:
cd:1f:3c:90:d5:ad:58:0c:f8:ca:0d:11:12:75:c7:02:53:b3:
7c:d2:28:da:56:1f:b9:7d:45:09:cf:7b:2d:50:cc:61:d5:4e:
65:6a:34:6d:41:47:c3:10:82:83:56:ec:e4:e8:48:3d:41:0c:
54:64:67:10:76:f6:53:59:37:40:78:2c:47:e5:27:5f:ed:6c:
42:96:48:79:58:9d:0e:d0:c0:93:a9:c6:82:0c:61:b3:dd:ee:
75:f7:9f:3e:ec:2f:2a:f3:25:41:bc:c2:ec:d1:29:a5:68:1e:
d3:de:f3:eb:2b:58:0a:a1:bb:39:6f:f5:99:68:9e:ce:4f:e1:
9d:d1:92:06:c6:ba:24:eb:0a:e2:c8:7b:19:91:18:08:a0:7d:
2e:97:e4:00:40:5d:c6:52:3b:41:24:a1:0d:ec:a3:72:37:53:
23:53:36:9f:58:2c:aa:df:39:98:06:43:38:86:5a:cc:bf:e5:
bf:46:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:20 2025 by rpki-client