Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203134363138.roa
File: 37372e38332e3130372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: zhLOS9e+6y7qGt/FKlY1R6hW3sK8JfM9GdZFMIQGZK0=
Subject key identifier: FA:0F:01:50:A1:E2:9E:87:19:1A:30:9B:CD:17:D0:7F:ED:C2:FA:11
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 71A033C34DECA0488CFF62064DBF049D3B02D6EE
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203134363138.roa
Signing time: Wed 09 Apr 2025 14:54:01 +0000
ROA not before: Wed 09 Apr 2025 14:49:01 +0000
ROA not after: Wed 08 Apr 2026 14:54:01 +0000
asID: 14618
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a0:33:c3:4d:ec:a0:48:8c:ff:62:06:4d:bf:04:9d:3b:02:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 9 14:49:01 2025 GMT
Not After : Apr 8 14:54:01 2026 GMT
Subject: CN=FA0F0150A1E29E87191A309BCD17D07FEDC2FA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:c7:45:f5:90:52:8c:f9:67:67:b0:b1:56:
f1:9b:5a:1f:ee:c3:f6:0d:83:e7:a1:55:51:65:7c:
12:ec:ff:0c:b8:37:a8:f1:0f:ce:7b:06:f2:69:5a:
5b:d8:7f:37:8b:3c:2d:9d:3e:b9:39:3c:87:29:c3:
0a:14:2a:d2:12:31:aa:95:19:13:0f:ef:26:f8:c4:
2b:bd:34:c7:86:87:f1:7d:45:7b:0a:d0:78:02:a6:
b6:4b:fe:34:9e:67:b1:c0:e6:1f:83:44:3e:84:05:
e3:6d:1a:8b:46:93:69:45:31:36:68:aa:c2:91:d1:
4e:ac:0f:b7:9d:95:e2:9a:dc:81:4e:c6:59:73:e7:
82:8c:36:be:b1:1a:bb:34:7c:54:2b:d5:09:53:fa:
ec:ee:1c:4b:e8:24:a9:83:8e:d7:d8:08:87:ab:cc:
c1:72:a0:1b:1d:38:0e:26:60:dd:88:8c:d2:00:7d:
4f:46:91:7c:f5:5b:31:32:00:ba:93:8b:b8:82:2e:
7f:c4:9a:bf:ce:f6:53:c8:60:96:6c:cc:8c:62:06:
fb:01:7b:a3:9b:61:da:26:1a:e4:c2:03:60:73:65:
5c:b2:75:ed:dc:ea:1e:09:be:6c:04:b1:95:07:08:
c2:c6:4e:c6:28:5b:5e:7f:ab:71:8f:3c:de:79:17:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:01:50:A1:E2:9E:87:19:1A:30:9B:CD:17:D0:7F:ED:C2:FA:11
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
47:db:bd:db:ba:71:e1:25:00:a1:64:ec:09:f7:08:c6:eb:b1:
c9:80:b0:df:61:8c:a0:fd:7b:17:86:0e:6b:08:37:7d:78:d0:
d9:e4:d4:b0:fb:84:9c:65:2b:89:8b:e2:56:88:eb:f8:7b:43:
44:a8:7a:8f:8e:81:c7:7c:89:7a:1f:d5:0e:73:fa:98:97:ac:
fc:74:fe:02:08:eb:d2:98:6b:c1:22:c5:b3:5b:4f:77:0d:c5:
f9:8a:da:b6:1e:a5:1a:43:32:40:89:ef:cc:dd:ec:74:48:15:
cb:93:0b:38:15:11:75:15:7e:fc:33:ae:5c:66:0a:84:df:61:
3c:68:a1:05:82:1c:f8:db:46:c2:b1:52:7e:85:95:2c:29:c5:
e0:1d:60:2d:73:d4:65:4b:f9:2c:15:fc:38:dd:ed:ad:55:92:
c2:a4:5d:62:42:be:f2:08:bb:df:b9:46:76:38:08:18:5a:50:
ad:11:d9:de:84:2b:13:2a:70:84:8f:2b:a0:13:08:64:e8:68:
d0:b2:fd:e8:11:50:3f:ac:e0:12:9f:f7:9e:69:6d:81:4e:5c:
13:61:3c:fa:d0:56:22:e6:2b:39:e7:97:b8:bd:6d:ea:78:04:
fd:1c:2a:e1:31:a7:bb:58:14:af:24:22:a3:80:f5:04:c6:b6:
9f:19:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:08 2025 by rpki-client