Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: xu3ZIpClxQNJtF+h374fgCRhrczmTy5uN5SVT8lhTZ4=
Subject key identifier: 98:8C:C9:97:AB:AD:07:0F:0E:30:2D:A1:69:EC:B0:CD:C1:0E:8B:65
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7B5491DAB2693237C8F0BAF1E0DDF764FD0FE6DF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
Signing time: Sun 13 Jul 2025 05:40:06 +0000
ROA not before: Sun 13 Jul 2025 05:35:06 +0000
ROA not after: Sun 12 Jul 2026 05:40:06 +0000
asID: 60117
IP address blocks: 167.148.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:54:91:da:b2:69:32:37:c8:f0:ba:f1:e0:dd:f7:64:fd:0f:e6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 05:35:06 2025 GMT
Not After : Jul 12 05:40:06 2026 GMT
Subject: CN=988CC997ABAD070F0E302DA169ECB0CDC10E8B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:80:27:75:06:de:7e:db:29:57:5d:34:4d:
8e:9d:d1:f7:01:96:34:4d:3b:2c:96:07:c8:cc:e1:
2f:43:18:c9:6d:7b:3a:5b:0a:73:8c:5a:4e:3d:ec:
ab:21:94:48:b8:e3:a8:76:83:fa:34:4a:7f:1c:fa:
0b:76:04:40:b4:73:87:25:a7:db:b4:95:d3:af:0a:
0c:8f:bf:60:ac:ee:e9:f0:88:79:da:57:c5:6a:8e:
32:8a:ea:79:6b:5b:d7:6e:43:d2:e2:9a:1a:cc:ef:
24:d2:3f:e5:1d:2d:f9:cd:bc:3a:75:83:b7:13:1e:
18:59:d8:7e:c4:a4:79:33:d7:49:e0:11:55:bf:6d:
3f:f8:c9:f0:a9:23:23:d1:d4:f3:b6:55:49:1b:16:
bf:07:00:04:9e:0b:c3:1e:bb:01:9b:85:e6:77:00:
69:e5:2c:fc:cf:c5:12:da:3f:b3:48:3e:a0:b2:05:
79:c5:ba:ea:98:a4:45:82:26:df:fb:ed:c7:2d:e0:
f2:d8:a4:a9:ef:5f:0b:83:de:14:ac:fa:ed:72:2a:
c3:09:c0:00:73:a6:b7:60:57:8a:26:cd:59:7f:b3:
9b:73:74:d7:4c:f0:2e:17:40:71:02:a6:cd:69:7b:
42:63:e3:04:12:4d:6f:72:be:b7:1d:f3:fe:4b:9e:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:C9:97:AB:AD:07:0F:0E:30:2D:A1:69:EC:B0:CD:C1:0E:8B:65
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.211.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cf:c2:a2:54:f1:de:5f:4b:0b:a9:66:94:86:bb:fd:9b:c1:
69:69:f2:fe:95:ad:2c:57:78:b8:15:9b:d4:7e:33:46:c8:5d:
c0:00:c8:2e:ab:d5:76:0a:fd:89:96:ad:81:04:35:3b:ba:ed:
84:ca:39:ab:4c:6b:c9:f7:30:b6:6c:f1:62:bb:a5:fa:88:53:
0a:d4:35:5d:99:d1:ee:18:57:e2:b2:cb:e0:9a:ed:ca:1b:e6:
ab:eb:c9:4e:d1:45:bc:87:60:8c:ce:6f:9a:8d:72:f1:84:d1:
54:42:d6:5d:40:83:e3:fd:74:e3:65:0d:ca:2a:10:c5:6a:8a:
94:24:dc:43:8b:27:10:c9:89:95:6c:6f:6f:74:6f:11:8b:af:
c6:f9:d8:13:ff:f5:5b:23:cc:9f:ca:3d:6d:66:3a:ce:be:13:
35:77:82:80:f1:ef:05:d7:18:c7:4b:9a:0f:06:ec:e0:72:e0:
06:cd:07:64:b7:af:5e:02:02:e3:fd:4b:23:d2:00:ce:44:29:
0b:0f:d7:0c:33:4e:a7:e9:aa:6c:db:99:6b:2d:d1:37:1a:94:
22:d6:39:53:f8:7d:04:7b:2b:9e:e2:87:94:ef:5e:a9:e8:0a:
e1:5a:70:3a:b9:d4:d4:d3:d6:d9:d2:75:5c:48:63:92:28:a4:
a7:e4:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:51 2025 by rpki-client