Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6461.roa
File: AS6461.roa (raw, json)
Hash identifier: gvQ3nGv1eMdEOXxATXixsFFGy0FpvXu84ZgJTuv24xI=
Subject key identifier: 94:E3:73:A9:F3:8D:60:C9:B0:91:96:86:52:80:3B:42:9B:B5:98:90
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1EE787AB1A708E830C9D4C726D3D6554CAC12562
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6461.roa
Signing time: Wed 16 Jul 2025 14:54:13 +0000
ROA not before: Wed 16 Jul 2025 14:49:13 +0000
ROA not after: Wed 15 Jul 2026 14:54:13 +0000
asID: 6461
IP address blocks: 181.214.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e7:87:ab:1a:70:8e:83:0c:9d:4c:72:6d:3d:65:54:ca:c1:25:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 16 14:49:13 2025 GMT
Not After : Jul 15 14:54:13 2026 GMT
Subject: CN=94E373A9F38D60C9B091968652803B429BB59890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:e0:ac:43:1f:6b:a6:95:6a:70:0b:e1:ce:
fa:ec:62:a5:34:e9:31:64:c0:9a:d7:e7:b3:ce:6f:
63:6c:20:62:19:ce:7c:58:10:52:30:d1:30:0f:ce:
99:31:ca:6f:8f:34:df:04:f5:f6:42:e4:b4:95:73:
70:16:6b:0c:07:f2:a8:ac:83:04:37:43:40:ab:d5:
b4:77:86:5d:e2:c4:cb:f7:5f:ca:8f:45:86:1e:86:
e3:02:46:bd:4e:4b:b9:13:95:d4:67:cf:75:49:24:
56:0d:c0:bb:5c:35:e9:b7:7b:bb:70:b3:42:21:3b:
cd:c8:63:ed:73:74:7c:47:cc:78:9c:de:6d:cb:25:
e0:74:83:20:01:67:6f:b3:5b:af:8a:e0:ba:37:09:
52:6b:43:f1:de:e9:1e:39:6c:a9:f5:03:90:9f:b5:
65:2c:fd:46:89:6e:ac:1c:f8:62:39:cb:57:d7:42:
ba:d0:b0:1d:36:3d:c9:98:c0:4b:bb:d0:a7:7a:5a:
bb:47:10:d7:c0:53:6e:af:0a:0d:5c:6f:16:17:63:
60:b4:c0:2f:6f:fb:22:af:8d:ce:a0:33:48:75:20:
ef:2f:58:80:17:0f:91:2a:b8:4c:75:df:e9:e2:e4:
fd:0d:44:e6:de:d5:49:00:dc:f2:2d:d5:58:f0:50:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:73:A9:F3:8D:60:C9:B0:91:96:86:52:80:3B:42:9B:B5:98:90
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.13.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:cb:b5:cd:34:29:5a:18:2f:ba:05:ed:2e:0a:a6:d4:c9:
d1:97:8f:9a:fe:90:0a:1b:3a:d1:8d:eb:15:f7:ba:9c:e2:63:
a2:dc:ab:6c:af:7d:6d:46:f9:64:e7:10:36:f8:87:75:5e:65:
c4:88:b5:28:36:6c:3f:d2:94:46:4c:86:4e:90:ca:5e:e8:b9:
29:97:a5:62:2d:28:3d:86:3d:43:fe:8a:ff:9d:81:cb:49:84:
1c:e0:fe:b3:4e:c3:af:f7:47:71:cd:e9:40:2c:f4:d7:0a:d9:
b8:9f:3b:39:cb:22:c9:63:4a:fe:47:af:3b:d8:d6:f2:98:b2:
ce:77:09:10:ca:99:c2:29:b1:8f:ae:45:fc:8c:a4:6a:29:d7:
95:52:43:2e:2e:50:2b:44:d1:07:bd:01:a4:9e:be:77:28:98:
3b:59:8f:94:e2:32:8d:e0:62:3b:7b:78:03:30:84:e2:df:54:
eb:d5:aa:1f:ce:70:ec:e0:24:9a:76:e8:a4:4b:b6:b1:a9:23:
07:12:af:da:d3:a9:60:b5:f2:26:50:77:fe:60:46:9e:58:98:
11:1d:e7:61:01:20:43:8e:fc:82:6c:e6:2c:b1:98:47:19:7e:
06:35:81:c6:e9:21:a1:1a:89:1e:e3:95:bc:cb:0d:35:c4:7a:
a4:82:d5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:52:06 2025 by rpki-client