Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33342e302f32332d3234203d3e203437353833.roa
File: 36322e37322e33342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: MeoNNcgwHs/12ZD644ww0su+DsKcelDxnD4kUX/Lf9c=
Subject key identifier: C9:F7:F1:EE:BF:F4:C1:30:0B:B2:D7:45:0D:0B:2D:23:B2:CE:AB:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B64318B7D3CB2A11DB167E9453D8AB4AD6962BD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33342e302f32332d3234203d3e203437353833.roa
Signing time: Thu 26 Jun 2025 12:46:45 +0000
ROA not before: Thu 26 Jun 2025 12:41:45 +0000
ROA not after: Thu 25 Jun 2026 12:46:45 +0000
asID: 47583
IP address blocks: 62.72.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:64:31:8b:7d:3c:b2:a1:1d:b1:67:e9:45:3d:8a:b4:ad:69:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 26 12:41:45 2025 GMT
Not After : Jun 25 12:46:45 2026 GMT
Subject: CN=C9F7F1EEBFF4C1300BB2D7450D0B2D23B2CEABDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:23:c7:42:ba:9a:6c:37:c5:fc:c4:d5:05:
d0:da:f7:d9:ee:07:10:24:2f:94:da:f6:52:28:cd:
0a:20:54:12:b9:2b:05:43:18:b3:29:54:20:c9:cd:
5c:eb:27:cc:82:0f:fe:42:43:d8:96:95:be:51:b6:
b4:10:56:c7:67:0f:41:20:9e:65:a6:77:4a:88:a8:
15:8b:94:ad:b2:de:58:31:31:82:a7:6b:1a:cb:41:
a4:71:1e:6a:4d:0d:5f:47:b4:5c:d4:d0:01:bb:9e:
98:ad:a0:1e:92:da:37:dc:09:11:db:15:89:67:f7:
97:78:18:20:0f:d0:dd:ae:6b:3a:11:6a:d5:98:49:
99:5f:91:47:24:8d:9a:ee:72:e8:06:c6:50:ae:95:
78:49:1e:88:01:b4:1c:91:f4:b0:4a:8d:9d:c3:7a:
2f:67:9a:be:e9:0b:2f:a1:07:9c:c9:bb:c0:f6:72:
39:55:ce:71:36:21:cf:ec:78:e4:d2:77:f2:71:e4:
f4:c5:87:5f:d9:c2:c0:7e:b3:e9:96:4a:f5:a8:a1:
8d:9d:5d:e1:e3:b1:b9:dc:88:7a:3c:48:40:17:11:
55:fd:06:5d:88:43:3c:6e:bc:3b:a9:2a:dc:b5:b9:
da:41:d1:a8:c9:01:49:65:78:d2:fd:bf:86:2d:d1:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:F1:EE:BF:F4:C1:30:0B:B2:D7:45:0D:0B:2D:23:B2:CE:AB:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.34.0/23
Signature Algorithm: sha256WithRSAEncryption
20:9e:4a:d9:3e:23:ee:aa:81:69:19:f7:bf:3d:ff:04:b4:66:
c5:ad:76:89:6e:01:3f:c9:3b:c7:63:1c:3c:2b:3e:df:57:1e:
65:25:13:cf:54:83:9f:a5:d1:f3:42:79:0b:19:3e:c6:24:ce:
61:2e:58:5e:b0:48:f8:06:37:9a:d9:8d:3f:e7:ef:b8:b5:f4:
5f:24:a0:70:03:f9:8a:bd:ec:26:bc:31:ce:3f:db:2c:8a:ed:
12:2b:b1:af:ad:d8:72:2c:a6:c1:05:0f:dd:55:e3:45:2c:da:
af:bc:2e:5e:26:fc:35:75:a9:19:03:26:16:90:01:63:2e:44:
04:16:46:23:ff:3d:f2:35:72:21:8e:ee:dc:05:76:42:c0:f3:
19:16:03:26:dc:b5:60:b6:d2:fe:e8:2d:69:23:bd:04:14:96:
ef:90:d3:30:92:79:d2:51:ee:ab:c6:82:25:0a:ac:35:7f:6d:
87:0e:f5:d9:a8:ec:ad:c6:38:3f:1d:54:55:2f:a2:81:0b:33:
ad:f9:51:cc:aa:5c:c1:c5:87:5b:e9:7c:41:f8:9e:2c:40:cf:
90:26:0f:54:35:fd:fc:24:ae:07:49:c7:83:6d:fb:a5:c3:a4:
0a:c4:ea:2a:94:2e:00:92:a9:8c:e0:d1:ec:03:68:56:65:5c:
75:01:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:06:42 2025 by rpki-client