Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203539363432.roa
File: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (raw, json)
Hash identifier: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=
Subject key identifier: 90:AE:99:0E:1D:9C:CD:BD:FD:43:D7:A7:59:8D:8A:F4:A0:D9:28:3A
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 468D61DFE5D357B8A686C352A71BC082D81C1E8A
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203539363432.roa
Signing time: Tue 24 Jun 2025 17:12:26 +0000
ROA not before: Tue 24 Jun 2025 17:07:26 +0000
ROA not after: Tue 23 Jun 2026 17:12:26 +0000
asID: 59642
IP address blocks: 62.112.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8d:61:df:e5:d3:57:b8:a6:86:c3:52:a7:1b:c0:82:d8:1c:1e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 24 17:07:26 2025 GMT
Not After : Jun 23 17:12:26 2026 GMT
Subject: CN=90AE990E1D9CCDBDFD43D7A7598D8AF4A0D9283A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:5d:39:62:61:23:6e:6e:01:32:3e:12:23:
3c:24:b1:84:0c:73:91:ca:8c:ec:b7:a9:41:16:86:
55:10:ba:d5:04:25:8f:2a:b9:83:65:ee:9b:b9:95:
95:c5:46:59:2c:e9:a8:2f:2e:9f:fc:2e:ec:34:3d:
7b:61:68:8c:08:c9:a2:f3:04:0c:e5:d4:97:e1:a1:
5c:b7:34:c7:a8:d6:eb:fe:a5:dc:31:67:1d:7e:75:
0c:16:5f:12:05:74:06:29:e5:fc:98:b3:db:52:30:
77:46:b7:7a:27:e9:29:17:c6:f1:a3:ff:b6:e9:53:
9d:f6:dc:14:d5:1f:75:4d:0d:a3:ad:35:c4:1d:7f:
b1:48:d2:55:e6:f6:15:58:1d:03:22:94:ca:42:96:
7d:00:59:60:9f:7c:25:d0:a9:f2:69:02:f1:ee:79:
c7:a4:5e:b5:a1:9c:e9:a0:82:25:78:b4:c0:66:ff:
0a:7e:c5:b0:93:47:38:07:fc:b8:39:f4:05:b1:01:
dd:da:8f:8a:db:1b:67:d1:cc:31:a6:fd:b2:ec:df:
fc:dd:be:2b:db:d7:d1:83:7a:d6:ca:96:3f:1f:9c:
5e:22:ed:cb:a7:5d:bf:60:4c:9c:f7:ea:4e:92:49:
89:bb:5b:79:50:76:20:a2:c8:1e:a3:8a:00:ce:38:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:99:0E:1D:9C:CD:BD:FD:43:D7:A7:59:8D:8A:F4:A0:D9:28:3A
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203539363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:0f:f9:02:98:8f:ff:8e:d1:f3:62:38:e7:0d:5a:01:05:6e:
82:bc:2b:ad:d1:a3:91:cc:c0:a5:22:50:df:86:d8:3c:cf:8a:
8e:ad:1d:d3:a1:68:ad:da:1f:5b:ca:2d:a5:06:66:8c:08:a0:
74:f2:cc:eb:9c:b1:b6:54:14:51:27:bb:61:1f:d2:df:77:44:
1c:28:03:f4:63:3f:40:59:21:81:12:00:48:c0:99:8c:9f:7e:
26:59:da:98:15:59:ac:d7:c2:fe:09:83:69:74:b7:2d:6a:44:
3e:ff:dc:5b:52:35:65:fc:89:19:35:7d:cc:9e:a7:bb:ea:de:
a5:53:63:36:e2:be:f9:9c:7c:3f:8a:19:41:9f:47:71:f3:f2:
cc:5b:e5:f9:9c:1f:94:63:e3:09:00:6c:4c:db:7a:70:33:3b:
18:8e:a3:70:86:12:06:26:f7:70:b6:ee:28:db:fc:d0:14:68:
d4:66:74:0d:4b:5c:c1:f9:85:42:bb:bd:4f:40:97:40:df:64:
61:49:b5:69:9b:83:34:c4:6f:d9:7b:ed:07:28:dc:d4:ec:37:
28:27:3f:93:53:5e:a5:57:ff:42:3d:11:ff:84:0c:49:59:27:
68:f3:fe:e6:59:79:fc:e4:8b:22:04:0a:e7:e0:8e:52:d6:49:
a2:ef:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:47:41 2025 by rpki-client