Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e34382e302f32302d3234203d3e203331313033.roa
File: 36322e3134312e34382e302f32302d3234203d3e203331313033.roa (raw, json)
Hash identifier: kI08g/QLoCp18PxH4fUh+9ALiDw587OyL8nVwq6p1ks=
Subject key identifier: 9F:0D:58:0B:EE:A1:A4:89:4F:D4:BC:4A:8D:88:0C:77:FD:ED:82:3E
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 272833BC62329B49B07851406CFEE34196C6E502
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e34382e302f32302d3234203d3e203331313033.roa
Signing time: Fri 02 May 2025 13:54:05 +0000
ROA not before: Fri 02 May 2025 13:49:05 +0000
ROA not after: Fri 01 May 2026 13:54:05 +0000
asID: 31103
IP address blocks: 62.141.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:28:33:bc:62:32:9b:49:b0:78:51:40:6c:fe:e3:41:96:c6:e5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 2 13:49:05 2025 GMT
Not After : May 1 13:54:05 2026 GMT
Subject: CN=9F0D580BEEA1A4894FD4BC4A8D880C77FDED823E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:92:a6:c8:00:60:9d:be:d2:01:4c:da:49:
7c:62:fd:3f:a7:ca:e1:51:0b:cd:4d:35:03:67:98:
8a:00:50:d3:82:bf:0c:38:db:ca:86:cd:c7:d5:d9:
b1:41:fe:5a:c6:20:1a:fe:1a:7d:d6:71:a6:66:ba:
32:a9:4f:8a:7a:17:5e:2a:4d:5b:f3:31:50:c5:b1:
00:7f:94:53:bf:60:6d:b2:57:6f:45:99:57:4e:6e:
57:1a:cc:f5:f2:20:5f:1e:ab:da:da:23:33:2e:18:
3e:a2:2c:49:72:1f:ac:3f:fc:e1:23:92:3b:68:b8:
56:bc:bc:6f:43:d2:4e:3b:66:d7:02:4c:63:e9:35:
8f:0e:75:38:ca:41:dc:24:05:ab:ed:bc:4e:c9:f0:
10:79:d4:5a:9f:01:03:a5:01:d9:fb:c2:18:99:1d:
a0:d9:60:41:fa:e6:9f:c6:1e:01:34:40:1e:cd:92:
bc:0b:6e:a2:62:0a:ba:e4:aa:06:8f:cf:e8:13:68:
e2:13:75:21:10:9c:8c:e6:b9:da:a4:ef:75:bb:f6:
28:66:56:af:af:0b:77:d5:3d:14:97:2d:50:e3:9e:
99:f0:c6:ab:72:44:95:9c:8d:1a:56:23:63:24:47:
be:da:18:ba:ae:8c:fd:50:68:b8:6d:c5:a7:f3:29:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:58:0B:EE:A1:A4:89:4F:D4:BC:4A:8D:88:0C:77:FD:ED:82:3E
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e34382e302f32302d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:f6:75:b4:9a:91:0f:6a:43:45:0e:31:73:57:fa:e8:c8:c2:
03:07:77:57:4b:49:d8:26:ea:08:ba:eb:f4:ff:64:3a:10:a5:
4f:8d:5e:3c:22:26:90:36:44:84:77:18:cd:26:73:51:d4:3e:
20:d9:cf:23:f7:95:04:f4:c3:f9:80:43:bf:1b:6e:8d:ac:bd:
bd:35:20:66:e1:b9:7f:f0:03:e4:45:be:80:88:75:d8:75:72:
5a:a8:84:ee:5d:f3:5a:11:bb:ec:ef:c3:13:d0:ba:4e:99:87:
1e:b4:22:62:0c:92:51:d8:52:87:30:dd:a8:dc:ce:06:11:d0:
b9:e0:2e:d8:94:e6:b8:4b:28:5a:08:8d:95:72:af:03:a2:07:
d4:b6:e9:77:c0:03:25:3d:f0:6e:a4:a8:81:bf:8e:35:e3:0f:
fe:43:17:8c:52:4c:4c:65:26:5a:09:c1:8e:e7:6b:d0:a6:6c:
98:0f:a1:be:48:62:12:a2:81:8a:50:b6:ac:5f:9c:a3:05:18:
cd:31:8a:dd:78:7c:de:f0:af:3b:f2:f0:23:1a:77:aa:f5:db:
7a:e4:81:ee:39:e9:8c:f7:89:95:d2:b6:45:a4:38:2a:64:0b:
57:d5:10:c5:69:69:55:5f:b0:2d:b0:26:db:72:9a:e7:44:a8:
b0:90:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:04:42 2025 by rpki-client