Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e35362e302f32322d3234203d3e203437353833.roa
File: 36322e37322e35362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Hn89bR9Il/Ep8klXExtl1OCwSW22UyfMtbCip9y0Ny4=
Subject key identifier: B7:84:89:15:BF:26:17:AE:4D:A8:93:4B:A9:0F:69:BB:BE:85:88:90
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26C1CD98F63721BBB8CCE043EB95DA0440CC9964
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e35362e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Jun 2025 07:46:40 +0000
ROA not before: Fri 20 Jun 2025 07:41:40 +0000
ROA not after: Fri 19 Jun 2026 07:46:40 +0000
asID: 47583
IP address blocks: 62.72.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c1:cd:98:f6:37:21:bb:b8:cc:e0:43:eb:95:da:04:40:cc:99:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 07:41:40 2025 GMT
Not After : Jun 19 07:46:40 2026 GMT
Subject: CN=B7848915BF2617AE4DA8934BA90F69BBBE858890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:4f:e4:20:45:ed:c5:97:b9:d2:10:dd:09:
db:df:8d:de:59:a1:9d:93:ab:fe:aa:05:c9:3c:2c:
8c:8c:10:d1:c4:2f:92:bc:2a:41:c0:b9:a4:75:ea:
9d:1b:62:f7:41:5f:3f:6f:55:aa:0c:a7:cb:78:b4:
d1:82:a0:a0:9e:f0:02:b3:f0:06:ef:07:18:4b:db:
b9:e5:51:71:54:4c:25:54:6b:c4:c9:e0:ae:62:6c:
ee:a0:cd:5c:7b:11:a1:f2:8c:b6:fd:44:a8:43:45:
08:23:09:c0:3f:82:b4:8c:f6:89:e4:f1:6b:33:c7:
10:5f:e8:e3:04:a4:41:e0:1e:57:1d:f0:0c:b9:04:
05:e6:fb:b0:e0:bc:eb:e3:3a:01:14:d9:39:e9:c0:
5c:38:94:55:6f:58:dc:01:0c:d1:5c:c0:d2:e9:39:
2c:97:2c:4e:f8:fa:5d:59:c7:78:41:19:a8:25:88:
d7:d0:44:6c:d4:8b:63:ea:d9:e4:f8:f7:81:2e:f3:
6c:db:be:18:fc:9d:fb:9a:ba:eb:3f:42:bc:db:cb:
16:6b:3c:1b:7b:44:d5:90:dd:e6:7f:69:6b:a7:f2:
bf:70:0d:84:8e:7c:d8:e9:33:aa:de:ca:82:ee:8e:
53:4e:12:f4:44:e7:d0:d2:62:8c:70:d3:fe:7a:28:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:89:15:BF:26:17:AE:4D:A8:93:4B:A9:0F:69:BB:BE:85:88:90
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e35362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.56.0/22
Signature Algorithm: sha256WithRSAEncryption
56:07:3e:81:0f:81:71:c7:7a:7e:23:e9:c3:4a:ef:34:05:b7:
a1:81:76:4b:b3:8c:aa:fc:dc:2c:fc:91:9c:17:c4:55:1e:cc:
7d:49:51:41:37:ff:39:b4:3c:75:97:fc:76:86:1a:a8:a9:78:
ae:32:29:48:cc:49:e2:4a:0c:4c:1d:cc:7b:dc:29:39:3c:42:
01:0d:60:b2:6c:77:2e:5b:35:ef:ea:38:7d:91:0d:46:7c:a2:
5b:ee:7c:00:8b:7f:8c:3c:7e:38:85:61:45:99:1e:78:35:44:
bb:86:dd:ee:25:3d:93:bd:3f:68:36:6b:8a:82:8c:fb:8b:01:
4b:e7:32:7d:a9:a4:ea:19:d0:77:54:f9:6c:09:a1:b5:77:16:
77:32:a2:3e:eb:0f:7a:07:14:cd:9c:18:7a:27:84:b0:54:0b:
f4:d0:87:d2:98:6b:d8:90:73:68:80:a5:83:70:dc:78:5c:1d:
b7:dd:a5:6e:5d:06:85:0f:8a:5e:91:7f:eb:3f:13:21:39:df:
05:97:94:bb:28:0f:d9:74:94:76:fe:4c:59:30:c1:8a:c3:2e:
a0:be:5c:bd:a2:2f:df:74:d3:4e:66:27:d7:e0:13:04:3d:ef:
e8:33:3e:94:b5:26:0a:2b:53:3f:d3:09:ff:95:df:2e:43:a3:
04:91:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:30:58 2025 by rpki-client