Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: 3TicKICg0C9afykjUd8e5fvBnLu1vS2BZbsfuGV9kC0=
Subject key identifier: FA:17:8F:F8:FB:9F:A3:AB:30:62:DC:DD:B3:03:E1:A2:BC:25:42:92
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 116A724369E0C6BC3081ACA72970F67FA4417159
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
Signing time: Mon 02 Jun 2025 00:02:03 +0000
ROA not before: Sun 01 Jun 2025 23:57:03 +0000
ROA not after: Mon 01 Jun 2026 00:02:03 +0000
asID: 60117
IP address blocks: 181.215.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6a:72:43:69:e0:c6:bc:30:81:ac:a7:29:70:f6:7f:a4:41:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 1 23:57:03 2025 GMT
Not After : Jun 1 00:02:03 2026 GMT
Subject: CN=FA178FF8FB9FA3AB3062DCDDB303E1A2BC254292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:62:13:b7:02:bb:ef:7d:08:10:81:e8:9d:
91:51:15:ad:94:86:e9:7c:1a:38:78:61:e3:a8:b4:
84:a1:49:06:ea:3a:e5:94:46:9d:5d:80:1e:9b:e1:
d4:87:8a:72:e1:14:b4:86:87:d7:5c:03:08:dd:42:
e9:16:77:f5:86:0e:13:31:08:0d:14:9d:48:99:6f:
99:da:8a:27:ce:6e:17:a5:a2:68:72:69:e6:c3:8a:
f4:96:07:3b:98:c2:cc:26:5c:f2:04:42:b0:3b:36:
ad:db:bd:c7:3a:da:86:67:93:ec:f5:8b:18:f5:59:
57:78:28:05:b5:8b:3d:7d:2e:78:3f:27:0c:91:7b:
4a:1e:a1:cf:7e:ab:51:aa:10:4d:ed:23:d5:80:98:
af:72:e0:74:01:37:08:54:94:e9:5d:1c:c3:df:23:
32:fa:b2:d4:a3:3f:a0:00:10:a5:92:6b:c8:b5:96:
cd:a8:16:43:8d:0e:0a:ab:37:25:6c:e2:9c:01:19:
89:8d:5c:49:a8:49:82:2a:e1:e3:fa:bc:2e:52:f1:
7c:a5:c6:96:33:31:1c:ac:73:3e:8e:13:7e:22:ee:
ee:3c:32:50:c4:b3:38:2f:3e:f6:cb:f3:60:2e:5f:
9c:67:c5:40:fb:92:6d:ea:3a:4d:d3:86:97:1f:b8:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:8F:F8:FB:9F:A3:AB:30:62:DC:DD:B3:03:E1:A2:BC:25:42:92
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.84.0/24
Signature Algorithm: sha256WithRSAEncryption
04:51:97:1c:62:5f:5f:f8:8a:3f:2c:0e:2c:a4:31:0a:c0:70:
0f:2e:ff:94:fe:ff:60:1e:6d:3a:5e:0f:85:4e:fa:eb:88:93:
63:20:5f:0d:a8:0d:64:e2:cc:33:38:2e:ee:a6:50:e6:81:e9:
12:03:fc:d0:a9:12:cb:fd:4e:0d:a2:d5:c2:36:7b:49:b4:00:
e0:23:51:50:bd:3d:bf:f4:6f:03:b9:f7:7e:c7:09:f6:d0:85:
7c:ea:9e:a5:88:54:9f:a5:d5:e7:1e:1c:b0:91:02:7f:61:9b:
b6:ee:8f:f1:6d:f4:32:c6:5e:70:a0:2e:e4:06:5f:6c:12:4b:
26:8a:2d:ff:45:e9:59:bb:b9:c8:18:b1:22:ee:27:55:99:f4:
6e:4c:89:7a:8a:2a:54:91:ab:4e:2c:b8:4b:4e:1f:3e:c1:8a:
d8:fd:ee:f3:5e:c1:10:e4:3c:72:59:f4:df:18:89:db:09:16:
ba:3f:80:66:1b:8c:d7:88:10:b2:34:4a:7c:08:ab:e7:48:e0:
b1:6d:86:65:c9:77:f6:e3:64:06:35:cb:7b:94:3c:ff:9f:64:
00:43:e5:28:bd:5a:19:36:79:f1:d8:34:ef:53:65:d1:d8:43:
f1:4b:00:97:ec:3b:3c:67:51:5a:44:1c:b6:a3:3e:07:3d:07:
85:f0:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:22 2025 by rpki-client