Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: bQSAV9KsoFJircGmNycqJRafOdyTuGTbQJHGmqzK0/o=
Subject key identifier: D2:76:14:F0:85:3A:97:08:DF:3F:67:0B:B9:EA:2A:06:EC:41:56:AF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 317BA2A59B7A1770F9506A281B323F159A59024C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60117.roa
Signing time: Wed 02 Jul 2025 15:39:58 +0000
ROA not before: Wed 02 Jul 2025 15:34:58 +0000
ROA not after: Wed 01 Jul 2026 15:39:58 +0000
asID: 60117
IP address blocks: 91.124.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 02:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:7b:a2:a5:9b:7a:17:70:f9:50:6a:28:1b:32:3f:15:9a:59:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 2 15:34:58 2025 GMT
Not After : Jul 1 15:39:58 2026 GMT
Subject: CN=D27614F0853A9708DF3F670BB9EA2A06EC4156AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:a3:a1:81:53:48:75:59:d9:cb:7b:75:95:
ab:b8:9c:89:26:39:36:5d:a1:76:8b:cd:23:f8:bc:
0a:6c:de:f1:d3:37:0a:78:93:e3:38:d6:ac:e8:72:
f6:35:68:90:70:c0:ff:46:6a:5f:96:ad:9e:39:88:
14:d6:78:a0:47:96:87:08:9d:72:ba:8f:1f:1d:a4:
b9:bd:e6:4e:a1:be:c7:af:67:6a:59:80:59:60:6a:
d7:6a:b2:5e:30:2f:bc:7a:94:8d:6f:ac:4d:1f:9e:
1d:53:33:f6:4e:ea:52:a8:77:bf:06:3a:f6:25:87:
ba:62:98:35:1b:ec:17:ed:66:bc:73:b7:29:1d:e5:
6f:60:f4:cf:98:4b:ac:e8:a2:d4:21:38:a4:7d:7c:
1a:b4:1c:1d:5a:4f:f9:2f:f5:8a:c0:53:25:d5:8f:
aa:46:d4:35:4b:2e:bc:87:bc:48:8b:b0:b9:26:26:
bc:52:94:4e:53:45:1b:3b:d4:15:15:59:34:24:0d:
75:83:27:c3:d1:c8:0a:37:3a:d6:88:43:d1:87:76:
23:d7:b6:07:b4:7c:dd:57:e0:6f:de:68:ea:0a:aa:
1e:d5:94:26:68:f4:ba:ce:ec:93:53:b0:f7:b2:0a:
ae:41:f8:e7:0d:b8:f1:1c:b7:f3:78:87:23:c2:7b:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:14:F0:85:3A:97:08:DF:3F:67:0B:B9:EA:2A:06:EC:41:56:AF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6f:4f:85:f8:2f:78:65:af:84:83:fd:a1:77:6b:fc:7b:92:
da:1e:7c:20:1e:17:90:75:44:33:8b:ee:1c:9e:44:38:45:f7:
66:60:d1:83:c8:1b:82:e7:0f:74:9e:1b:ce:87:ca:db:fe:df:
f7:99:3c:71:f6:fc:51:6e:a7:6a:ae:0b:66:66:f8:d4:35:cf:
ee:1a:2f:44:e0:44:57:58:4e:1f:04:a7:ac:38:27:db:b8:80:
6c:ef:85:ee:9c:6d:05:51:05:18:91:f6:64:46:05:1c:5f:a9:
1b:9c:8e:22:27:11:28:8e:af:2e:9e:f0:e7:af:59:76:06:ab:
86:60:f2:89:b6:b1:32:48:93:7f:25:7a:10:a8:68:ea:b4:b9:
d7:a7:83:24:eb:64:17:af:8f:5d:ad:27:60:0a:68:05:ba:32:
35:a2:c5:00:d2:19:a0:6a:b4:a9:b4:08:8e:55:65:72:d0:b1:
b5:f1:5e:e8:45:92:65:74:79:7a:31:c5:6b:37:af:a6:65:56:
1a:d4:1a:1e:fa:5d:42:fc:c5:6c:65:b7:09:f8:75:f0:6d:1c:
55:8c:80:e9:67:a9:b6:15:9a:28:11:6c:71:aa:4c:1d:e1:15:
14:97:8c:8b:de:45:e9:34:87:63:04:cd:d5:46:69:ff:4f:f9:
c4:0e:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:03:18 2025 by rpki-client