Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: 3pZ9NZfMWPXx4wiI8XxxfdQGLoBUjgsBdfhq4c/0mfQ=
Subject key identifier: 42:56:F1:FE:23:C5:6F:DE:46:12:C5:F1:DD:03:5C:A6:E6:3B:22:95
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4EFF4DEF9FF67E53E943F412C17B5BF083D397EE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
Signing time: Tue 03 Jun 2025 15:04:41 +0000
ROA not before: Tue 03 Jun 2025 14:59:41 +0000
ROA not after: Tue 02 Jun 2026 15:04:41 +0000
asID: 60117
IP address blocks: 147.79.1.0/24 maxlen: 24
167.148.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ff:4d:ef:9f:f6:7e:53:e9:43:f4:12:c1:7b:5b:f0:83:d3:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 3 14:59:41 2025 GMT
Not After : Jun 2 15:04:41 2026 GMT
Subject: CN=4256F1FE23C56FDE4612C5F1DD035CA6E63B2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:ca:19:a3:f2:cc:5f:dd:d4:99:29:6b:7d:
ae:3d:ed:dd:03:3b:ba:9f:96:32:f0:6e:7f:98:81:
60:67:54:f1:04:f2:b2:fc:c2:13:be:f2:f8:10:78:
4d:c2:af:cd:7b:35:a4:9c:51:49:f8:ca:14:64:9b:
fb:5c:39:df:5d:60:5b:dc:00:e7:8c:1e:4b:c3:9e:
d0:de:42:a2:3d:79:89:9a:d6:c1:53:b5:bd:c7:33:
7b:7e:82:95:19:d3:dd:3b:bd:a1:8a:2e:6e:2c:12:
4e:34:92:70:9a:ed:7d:2e:83:2d:49:47:b2:ff:e9:
e1:46:66:70:8d:e3:c3:b5:01:1b:ad:6c:5a:3f:e8:
18:2d:61:f2:6f:d7:59:33:c2:20:c6:97:b3:76:8f:
af:18:65:ea:5d:28:68:53:d7:df:82:5a:97:86:82:
99:d6:25:88:ee:b1:cf:ee:e3:20:b0:03:31:ac:4b:
6e:42:97:d2:26:78:c1:70:91:73:03:42:c2:8f:59:
49:70:3a:74:be:0f:77:19:e2:e1:ac:17:00:0b:66:
81:01:4c:f4:c0:20:cc:d4:de:96:1e:4e:7f:83:2a:
7b:64:ce:56:ea:df:4a:e9:97:7a:3e:71:ec:f9:c4:
79:6d:2c:a3:aa:c5:ac:24:41:61:bb:f3:16:3d:59:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:F1:FE:23:C5:6F:DE:46:12:C5:F1:DD:03:5C:A6:E6:3B:22:95
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.1.0/24
167.148.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:46:a9:07:e8:ad:9b:04:86:16:80:fd:00:3f:ee:bf:d0:64:
29:c1:d5:6e:c1:36:34:76:7f:d2:c2:c6:82:2a:89:a5:bb:46:
60:9f:b8:ae:b1:35:da:26:9f:00:88:f5:91:bc:92:03:2c:88:
20:cf:24:84:0b:75:3b:98:e0:ab:b6:10:86:e4:ea:3a:e7:4c:
d2:18:82:bb:95:c5:a9:25:f9:5c:91:d7:c8:8e:97:07:83:70:
4f:c0:59:ab:8e:b0:7e:a0:da:88:cb:87:95:2a:f9:ed:f4:03:
36:63:bb:2e:30:81:79:72:e0:64:df:b6:a1:d3:74:a0:6d:0e:
6c:c0:ba:c8:c8:28:9f:51:96:66:e2:4a:56:e2:da:72:fb:c9:
ec:db:89:e3:00:49:c8:df:36:81:a0:ee:94:98:82:03:e6:89:
c9:47:73:c5:1a:77:03:4f:2d:2f:1d:fd:e2:b0:c2:22:d2:fa:
db:c6:9c:f1:9c:16:cd:1d:c9:03:d2:7c:9e:75:b1:7e:62:79:
97:53:b9:6f:36:e7:bf:5c:77:88:ef:ee:d7:c3:f5:09:ad:a1:
58:83:67:47:fb:da:38:b7:34:a2:34:8e:a8:ee:aa:4b:b5:ea:
eb:33:88:ed:fb:7a:a4:b1:95:6b:5e:8b:7e:da:2e:86:bb:1d:
69:ce:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:15 2025 by rpki-client