Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: NUSfG9NTtvrL6RFvJZ8gz1vrkQPxMLSgHz+lzcF6Yco=
Subject key identifier: 26:F1:C2:F4:D4:90:6D:46:8C:98:64:30:8F:D5:15:D4:A6:57:5A:A8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C046E63ECA2730F2B34687DA53F3BCF3316E5B0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
Signing time: Fri 24 Jan 2025 15:04:44 +0000
ROA not before: Fri 24 Jan 2025 14:59:44 +0000
ROA not after: Fri 23 Jan 2026 15:04:44 +0000
asID: 61317
IP address blocks: 82.23.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:04:6e:63:ec:a2:73:0f:2b:34:68:7d:a5:3f:3b:cf:33:16:e5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 24 14:59:44 2025 GMT
Not After : Jan 23 15:04:44 2026 GMT
Subject: CN=26F1C2F4D4906D468C9864308FD515D4A6575AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:d5:27:2f:13:97:63:b1:b4:d1:69:8a:38:
81:8d:24:e6:a7:1d:6b:55:68:9a:f9:dc:a4:43:6c:
4e:42:2b:f3:b7:87:14:0b:f0:51:2e:bb:1f:c7:c2:
41:cb:5b:48:63:bc:3b:b1:20:ba:8d:4d:f1:c5:26:
67:fd:b3:08:04:e4:11:cd:26:b9:cd:36:05:21:79:
9c:95:44:a1:38:62:be:27:34:7c:e6:76:29:01:ec:
62:b2:8c:df:98:76:66:16:98:1f:31:68:33:f4:11:
e2:f9:72:41:1f:5e:47:4f:a7:68:79:b9:2d:45:01:
ae:44:2a:2d:db:fc:8c:42:1b:ba:88:0e:54:21:62:
c3:52:fd:75:59:4c:be:27:57:35:94:aa:fa:d5:5b:
b6:90:35:9a:dc:d5:4f:2b:cc:3f:f3:d4:d9:3b:03:
8a:6d:ab:a9:68:81:85:86:e3:b8:8e:5c:1a:61:5a:
6c:2c:65:77:bb:c4:fc:57:5c:f8:df:b2:2b:80:aa:
37:0e:8d:44:96:75:14:7f:68:18:a2:7a:60:41:bc:
87:c3:34:c6:6d:0d:73:ea:91:36:e4:1f:e0:21:d3:
31:d2:f6:9b:17:aa:4d:35:5d:c0:a9:aa:18:c2:2c:
fd:14:f4:41:ca:26:18:c1:b9:0c:de:a2:fb:11:85:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:C2:F4:D4:90:6D:46:8C:98:64:30:8F:D5:15:D4:A6:57:5A:A8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.195.0/24
Signature Algorithm: sha256WithRSAEncryption
50:82:b3:9a:fb:0f:92:12:e4:c0:05:bf:3e:8b:87:25:40:26:
48:da:28:ae:2e:86:98:a9:54:24:79:8f:a2:8f:05:53:f7:36:
bb:61:cc:7c:b8:b8:50:fd:a2:74:fa:d0:2a:cc:ef:cf:a5:56:
f2:fa:29:9d:55:ca:4e:5d:f3:4b:66:a0:2b:be:75:ab:cd:dd:
24:00:7d:2e:64:b0:01:63:30:ea:1b:aa:48:70:bf:41:66:92:
51:85:5e:6e:9c:c7:8e:a6:07:ff:b9:58:8a:1e:6c:18:41:2f:
73:47:fa:28:33:4e:d6:8b:77:b6:ce:99:f6:b1:47:2c:ca:2e:
95:62:f8:0e:50:26:ef:e2:ed:b9:fb:9e:10:e2:34:0e:e6:14:
fa:4c:83:9e:b5:96:4b:f5:70:9c:bd:55:a3:78:74:1a:17:2f:
fa:13:8f:d7:db:9a:ec:ce:b6:16:43:6d:e7:b8:69:8f:69:8b:
05:e7:a1:07:32:dd:cd:76:d7:fd:35:69:b7:26:f9:ce:81:f4:
ad:54:7c:97:1e:18:ea:80:c9:f0:22:51:9a:60:ad:13:c8:fe:
d7:32:f8:46:de:15:36:33:cd:ed:eb:b5:f8:a9:0d:79:b0:c6:
12:65:5e:b5:a5:2c:9f:fd:28:b8:14:08:86:d3:76:63:b1:eb:
2e:b8:70:78
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUbARuY+yicw8rNGh9pT87zzMW5bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAxMjQxNDU5NDRaFw0yNjAxMjMxNTA0NDRaMDMxMTAvBgNV
BAMTKDI2RjFDMkY0RDQ5MDZENDY4Qzk4NjQzMDhGRDUxNUQ0QTY1NzVBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8o9UnLxOXY7G00WmKOIGNJOan
HWtVaJr53KRDbE5CK/O3hxQL8FEuux/HwkHLW0hjvDuxILqNTfHFJmf9swgE5BHN
JrnNNgUheZyVRKE4Yr4nNHzmdikB7GKyjN+YdmYWmB8xaDP0EeL5ckEfXkdPp2h5
uS1FAa5EKi3b/IxCG7qIDlQhYsNS/XVZTL4nVzWUqvrVW7aQNZrc1U8rzD/z1Nk7
A4ptq6logYWG47iOXBphWmwsZXe7xPxXXPjfsiuAqjcOjUSWdRR/aBiiemBBvIfD
NMZtDXPqkTbkH+Ah0zHS9psXqk01XcCpqhjCLP0U9EHKJhjBuQzeovsRhSvFAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUJvHC9NSQbUaMmGQwj9UV1KZXWqgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjEzMTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSF8Mw
DQYJKoZIhvcNAQELBQADggEBAFCCs5r7D5IS5MAFvz6LhyVAJkjaKK4uhpipVCR5
j6KPBVP3NrthzHy4uFD9onT60CrM78+lVvL6KZ1Vyk5d80tmoCu+davN3SQAfS5k
sAFjMOobqkhwv0FmklGFXm6cx46mB/+5WIoebBhBL3NH+igzTtaLd7bOmfaxRyzK
LpVi+A5QJu/i7bn7nhDiNA7mFPpMg561lkv1cJy9VaN4dBoXL/oTj9fbmuzOthZD
bee4aY9piwXnoQcy3c121/01abcm+c6B9K1UfJceGOqAyfAiUZpgrRPI/tcy+Ebe
FTYzze3rtfipDXmwxhJlXrWlLJ/9KLgUCIbTdmOx6y64cHg=
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:44 2025 by rpki-client