Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: lnWteWNvbD+1kf/IdBK6OUIaFnhOoPV8qr1GJHpgCMY=
Subject key identifier: F4:F3:59:6A:FD:D7:3C:81:AC:F6:65:BD:6D:00:80:B9:67:24:CA:1C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0955037B4281417A3DC1C9732788BC060E529E3F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
Signing time: Tue 30 Jul 2024 17:02:23 +0000
ROA not before: Tue 30 Jul 2024 16:57:23 +0000
ROA not after: Tue 29 Jul 2025 17:02:23 +0000
asID: 60117
IP address blocks: 181.215.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:55:03:7b:42:81:41:7a:3d:c1:c9:73:27:88:bc:06:0e:52:9e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 30 16:57:23 2024 GMT
Not After : Jul 29 17:02:23 2025 GMT
Subject: CN=F4F3596AFDD73C81ACF665BD6D0080B96724CA1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:0c:33:67:6d:bf:d0:b4:e1:a5:79:25:45:
ec:27:43:bc:d3:5d:08:c8:8c:be:fe:fa:b4:07:81:
5b:07:bc:2f:9f:31:b4:58:a6:4f:55:ab:ba:43:17:
76:4e:40:80:7e:d0:40:3b:bc:cf:34:3a:c8:80:24:
fe:ee:ed:89:26:e5:23:2c:88:6e:48:43:48:3d:30:
2c:d3:1f:e0:20:33:78:86:42:44:ee:3f:82:84:a2:
57:76:8b:cd:bc:3c:df:16:29:4e:9b:a0:e8:de:38:
26:62:a8:f7:2a:d7:24:d6:94:51:9c:43:33:36:ac:
38:87:21:3d:d1:24:97:19:4c:cd:53:da:95:86:4d:
64:fc:92:f1:7d:0e:a0:37:45:ec:15:1a:58:09:40:
d4:cf:ef:b5:a7:00:6d:08:f0:aa:41:24:b6:88:2d:
aa:78:d4:0a:1d:5a:e2:71:be:20:59:ac:67:d7:30:
12:5d:cd:ea:50:f1:3e:96:5d:b1:85:e7:8d:57:b6:
d7:6f:de:4b:9e:3c:6d:2a:5e:dc:80:30:21:b4:65:
10:80:fa:65:c4:8e:1c:78:3a:48:bc:08:87:1b:80:
0a:e5:5c:f5:db:59:29:a6:92:a8:6e:7a:08:49:f1:
0d:cd:8e:34:10:05:49:a7:e0:b7:a7:ee:d9:1b:3f:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F3:59:6A:FD:D7:3C:81:AC:F6:65:BD:6D:00:80:B9:67:24:CA:1C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:18:48:5e:ea:d4:d1:9c:61:22:59:ac:49:91:30:ca:76:da:
82:4d:30:75:c9:b6:4f:a5:69:99:14:64:61:66:29:da:cd:97:
e5:00:9f:91:5d:02:94:58:8b:49:b8:38:31:fa:b2:c2:75:f9:
5e:d8:2e:98:e4:7c:10:a3:0d:c1:46:f0:af:e6:9d:fc:40:a9:
10:d1:00:b3:2f:fc:b8:ad:c1:78:a2:14:ff:75:26:0a:b1:5f:
85:fc:58:83:a8:c0:b6:bb:7a:02:f3:00:7a:34:48:ad:ec:e2:
ae:4c:5d:da:7b:40:f2:cc:8e:e2:27:bf:30:be:4d:01:66:f5:
c4:f6:cb:66:1d:64:f4:43:ec:45:36:34:ba:b0:80:ce:9f:cf:
db:64:a4:aa:a5:24:b3:dd:e0:a8:b7:5b:14:cb:cf:3f:60:e9:
bf:09:76:a2:2b:df:b4:be:26:68:4a:82:54:f4:11:e9:5a:86:
b5:91:74:f1:90:15:06:15:05:b3:b4:67:10:ba:78:96:23:a5:
25:74:6d:02:78:f4:87:3c:99:93:8b:e2:50:b1:6c:38:b1:79:
f4:00:5c:00:3e:87:5a:86:5e:7f:16:84:54:57:a5:5b:98:db:
ae:73:ac:54:08:b4:38:b8:d3:92:27:af:00:11:9b:c4:8f:dc:
c3:0f:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:39 2024 by rpki-client on console-ams.rpki-client.org