Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
File: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: dMlcET7DG0/2ASrNVCZkRdYW4GhaPbuzcQLK5J1CNrQ=
Subject key identifier: 1B:18:0A:E2:56:EA:0E:1B:5C:9A:67:ED:A1:20:5A:FB:F8:F7:0C:C0
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4103D59150A6E545D5544A73761EEC8014B7730C
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
Signing time: Wed 09 Apr 2025 14:54:01 +0000
ROA not before: Wed 09 Apr 2025 14:49:01 +0000
ROA not after: Wed 08 Apr 2026 14:54:01 +0000
asID: 16509
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:03:d5:91:50:a6:e5:45:d5:54:4a:73:76:1e:ec:80:14:b7:73:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 9 14:49:01 2025 GMT
Not After : Apr 8 14:54:01 2026 GMT
Subject: CN=1B180AE256EA0E1B5C9A67EDA1205AFBF8F70CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:e7:84:7f:86:1d:ed:61:df:6d:37:fe:c0:
ed:80:ba:15:57:5d:c9:8d:98:85:53:e0:ec:c5:5d:
40:ec:87:99:0d:23:db:21:c0:88:3d:08:c9:08:2b:
9c:8d:ca:34:00:6a:40:3a:cd:1d:59:ae:cc:2a:f3:
ea:5a:61:da:40:2e:5f:6d:bd:5c:ad:9c:8d:67:28:
a6:9c:46:d1:5b:91:7b:d5:6d:36:81:db:03:8d:0f:
a0:a7:e2:9c:2c:f1:11:4f:18:6f:14:c6:28:77:dc:
67:00:dd:ca:0a:76:41:92:7e:2e:d4:74:92:82:a1:
8b:1e:fc:a0:69:8e:94:7a:fa:f7:2c:a9:39:61:b9:
16:d6:e6:96:6e:74:25:06:5c:b7:95:bd:2d:49:c9:
f9:9b:11:f0:35:e0:5d:74:e7:2c:2a:56:ea:a0:b2:
7d:e1:37:c0:84:b5:42:60:bd:d6:aa:4b:6c:18:b4:
26:aa:2f:c6:2d:a9:44:21:30:81:b5:e7:c8:a0:38:
1f:03:c0:18:cd:cf:fe:02:d5:41:a2:60:fd:ed:76:
85:82:f1:07:76:2c:12:2a:0e:d2:1a:4b:0f:ed:91:
34:c1:e6:dd:65:df:07:26:00:f0:bd:b2:cf:7e:c3:
da:ad:49:92:68:85:cc:f9:56:64:08:dd:c1:75:88:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:0A:E2:56:EA:0E:1B:5C:9A:67:ED:A1:20:5A:FB:F8:F7:0C:C0
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3f:98:a3:7a:d8:16:b9:98:9e:b0:25:30:95:76:ed:cf:2e:
5b:e6:2e:f3:51:66:dc:58:c0:91:f2:91:56:28:89:a3:92:0f:
ce:26:42:f0:04:39:28:f5:8f:39:18:33:d2:19:f9:6c:5b:d4:
a6:e8:03:28:1f:f0:b2:41:2f:00:de:58:91:eb:95:33:a6:7b:
25:e1:7e:d3:f1:59:38:02:10:d7:2b:9e:27:1b:75:8d:e0:48:
9e:38:b8:0e:8b:9a:b2:11:74:8b:ec:da:81:b4:0c:93:55:d3:
2d:5a:73:99:89:cb:13:48:f5:df:c2:87:60:d2:eb:d9:a5:2d:
97:43:02:47:09:45:b6:e0:3a:fc:18:df:25:c0:b6:45:e4:d0:
dd:88:52:4d:6a:ee:6b:16:71:b0:01:66:5b:60:9f:ee:05:2d:
e2:f7:fa:6e:b7:6c:f0:75:3e:38:e5:09:54:7d:27:71:70:f6:
3e:6c:89:c4:51:db:64:a6:ab:80:2b:9b:e7:83:2b:34:0e:f7:
23:56:60:26:7e:53:e0:75:c7:82:4d:9b:48:4c:e3:fc:c6:c7:
e1:5f:4e:7c:6d:5e:34:5c:34:a7:2a:0f:a7:a1:39:7b:01:28:
9f:73:6c:d7:80:d0:de:2c:21:ff:62:2a:26:6d:00:4a:11:61:
ed:8a:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:32 2025 by rpki-client