Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61617.roa
File: AS61617.roa (raw, json)
Hash identifier: bXo3Ylm//mUt0wjieQ5aNVRuTH0XltdGGj0Ut53CsYM=
Subject key identifier: 09:38:2E:EE:EB:F5:D3:51:F2:EC:F3:4D:A2:57:8E:F0:51:C4:C9:C3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 06D4A231C2EA0BD998A0052567BA224CFB8365BA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61617.roa
Signing time: Thu 03 Oct 2024 02:09:35 +0000
ROA not before: Thu 03 Oct 2024 02:04:35 +0000
ROA not after: Thu 02 Oct 2025 02:09:35 +0000
asID: 61617
IP address blocks: 191.101.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d4:a2:31:c2:ea:0b:d9:98:a0:05:25:67:ba:22:4c:fb:83:65:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 3 02:04:35 2024 GMT
Not After : Oct 2 02:09:35 2025 GMT
Subject: CN=09382EEEEBF5D351F2ECF34DA2578EF051C4C9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:f8:47:c1:6e:5d:ac:10:e5:4a:39:ec:59:
88:b0:f8:39:46:ad:32:ef:f3:f7:13:df:f7:1c:cb:
04:e0:be:4b:5f:16:71:1c:c2:a3:b0:e5:e4:ab:79:
bf:a6:7b:61:ab:aa:92:5a:55:91:1c:10:d3:d7:20:
d8:3e:d4:04:a1:30:a1:f2:21:f2:2a:3f:cc:4b:6d:
e7:86:fe:6a:b6:0a:ab:21:e3:6e:0f:00:30:5d:ea:
6b:b5:16:16:e7:18:de:fa:a5:46:a2:97:22:de:1a:
62:f1:d1:30:19:64:f8:3d:e3:43:a3:02:8c:a3:79:
0b:33:06:3c:17:7b:75:14:da:6e:98:c5:b7:03:a9:
d0:13:21:ac:ec:a2:e0:96:4b:af:53:af:37:2a:b0:
08:fe:d7:95:2a:a0:d9:0f:71:48:df:f9:6c:1b:61:
fb:1b:a5:d9:2b:18:0f:d7:fe:bd:f4:92:db:73:c4:
4b:06:a8:8f:cd:23:35:23:b7:35:ce:23:cf:e5:68:
dc:34:5f:44:00:3a:c5:e2:9e:ba:8c:a8:09:fc:36:
f8:09:75:10:33:fb:4e:e6:5d:7f:43:e0:f9:b1:5b:
79:6a:46:c7:34:68:90:a6:b1:a4:1c:dc:fa:14:94:
b3:42:f3:88:b1:d5:e4:5e:cf:bf:c2:96:be:33:f2:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:2E:EE:EB:F5:D3:51:F2:EC:F3:4D:A2:57:8E:F0:51:C4:C9:C3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:33:cd:3b:3a:f8:04:fe:18:43:e1:d6:11:1c:9a:a3:55:36:
2e:ab:6a:05:b6:21:ee:f0:c2:3c:56:df:e5:04:da:a8:ce:08:
e9:f4:4a:cc:82:de:d6:bf:ca:fd:ea:b5:49:23:34:76:43:09:
4c:7f:b2:21:b1:3d:da:39:0c:6d:31:06:e6:56:84:56:89:a5:
51:39:cb:c3:16:76:6b:63:31:c3:a6:d0:d9:0d:ec:68:cd:2a:
50:af:2c:e5:92:60:63:d7:ae:fc:91:72:dd:42:5e:09:3e:cc:
08:fe:6c:09:b9:5d:eb:7f:00:c9:2d:04:f8:3d:6c:8f:13:7a:
12:c6:dc:3d:09:a3:77:63:76:3b:e3:8d:a0:79:ec:91:da:bf:
7e:39:26:67:b9:c5:84:1a:91:b5:64:82:28:34:08:8c:86:12:
f3:48:82:24:46:ec:40:ce:f9:86:f8:aa:e3:1c:05:db:9c:b2:
01:a7:b7:c1:fb:57:fa:1e:21:60:29:2c:e4:c1:42:54:14:c7:
0c:ed:c1:ab:26:14:3b:27:2e:cc:18:93:12:26:a8:18:7b:e4:
a8:32:a8:b5:c4:27:f6:21:4b:f1:f6:38:78:91:1e:11:9f:a1:
d6:56:58:58:fa:fc:59:ba:4d:d2:b4:20:1a:28:88:67:82:45:
89:73:b7:7b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUBtSiMcLqC9mYoAUlZ7oiTPuDZbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDEwMDMwMjA0MzVaFw0yNTEwMDIwMjA5MzVaMDMxMTAvBgNV
BAMTKDA5MzgyRUVFRUJGNUQzNTFGMkVDRjM0REEyNTc4RUYwNTFDNEM5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMPhHwW5drBDlSjnsWYiw+DlG
rTLv8/cT3/ccywTgvktfFnEcwqOw5eSreb+me2GrqpJaVZEcENPXINg+1AShMKHy
IfIqP8xLbeeG/mq2Cqsh424PADBd6mu1FhbnGN76pUailyLeGmLx0TAZZPg940Oj
AoyjeQszBjwXe3UU2m6YxbcDqdATIazsouCWS69TrzcqsAj+15UqoNkPcUjf+Wwb
YfsbpdkrGA/X/r30kttzxEsGqI/NIzUjtzXOI8/laNw0X0QAOsXinrqMqAn8NvgJ
dRAz+07mXX9D4PmxW3lqRsc0aJCmsaQc3PoUlLNC84ix1eRez7/Clr4z8oVtAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUCTgu7uv101Hy7PNNoleO8FHEycMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjE2MTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZZAw
DQYJKoZIhvcNAQELBQADggEBAKUzzTs6+AT+GEPh1hEcmqNVNi6ragW2Ie7wwjxW
3+UE2qjOCOn0SsyC3ta/yv3qtUkjNHZDCUx/siGxPdo5DG0xBuZWhFaJpVE5y8MW
dmtjMcOm0NkN7GjNKlCvLOWSYGPXrvyRct1CXgk+zAj+bAm5Xet/AMktBPg9bI8T
ehLG3D0Jo3djdjvjjaB57JHav345Jme5xYQakbVkgig0CIyGEvNIgiRG7EDO+Yb4
quMcBducsgGnt8H7V/oeIWApLOTBQlQUxwztwasmFDsnLswYkxImqBh75KgyqLXE
J/YhS/H2OHiRHhGfodZWWFj6/Fm6TdK0IBooiGeCRYlzt3s=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:49 2024 by rpki-client on console-fra.rpki-client.org