Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: Zg+XUHbKR3zGxsDNOa5R9TQVwGB2gAZiPK5xagt2+lE=
Subject key identifier: 10:89:16:EE:DE:D8:E7:FF:F7:33:60:BD:5C:85:15:A8:8B:57:61:0F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 521BE3D9421A9E126187533A5B2BFDB3B509A18D
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60117.roa
Signing time: Tue 03 Jun 2025 08:24:21 +0000
ROA not before: Tue 03 Jun 2025 08:19:21 +0000
ROA not after: Tue 02 Jun 2026 08:24:21 +0000
asID: 60117
IP address blocks: 45.146.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 02:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1b:e3:d9:42:1a:9e:12:61:87:53:3a:5b:2b:fd:b3:b5:09:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 3 08:19:21 2025 GMT
Not After : Jun 2 08:24:21 2026 GMT
Subject: CN=108916EEDED8E7FFF73360BD5C8515A88B57610F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:7d:77:8c:c2:42:44:ad:a0:bb:ac:24:25:
31:69:65:09:3f:85:4f:76:9b:cb:26:22:96:17:1f:
a1:e8:da:29:63:c0:94:e1:a0:2b:66:df:29:0b:a3:
ff:97:4d:82:14:e6:d3:18:a9:ec:2d:b9:8a:57:d3:
e0:d4:41:0d:39:06:0e:3f:45:90:6a:f9:f9:d9:24:
cb:61:ee:05:3c:d6:f0:85:41:c8:3c:b0:5f:b5:2e:
78:b2:82:8d:6c:bf:9f:ba:4d:b8:b8:a1:bd:82:da:
b9:66:cc:c5:77:06:ae:11:22:a1:a6:2e:f9:bf:97:
7f:ce:00:40:c6:0b:36:35:98:c0:f7:ba:89:eb:98:
61:71:12:c8:67:a2:6b:7e:a1:22:ee:f8:04:48:f2:
ff:30:df:38:b5:c6:15:1e:6b:fd:29:5d:37:04:03:
f3:9f:6c:8e:65:14:93:5d:56:6a:f9:77:b0:35:90:
21:6e:41:86:f4:66:71:56:e2:99:41:e9:e8:7f:4b:
64:e4:c5:df:2b:f9:bd:18:35:a9:a8:1d:63:a0:63:
70:6b:bc:27:3c:ba:ef:1a:ad:86:2c:51:f5:ca:99:
e6:49:f9:96:e6:78:ba:87:ba:97:fb:6f:55:85:e9:
d3:39:d6:68:69:4f:c0:f0:49:b2:3f:f2:00:8b:12:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:16:EE:DE:D8:E7:FF:F7:33:60:BD:5C:85:15:A8:8B:57:61:0F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f9:68:bf:b0:c2:75:56:bf:8c:4a:2f:f3:4f:34:d7:f8:26:
be:5d:d1:ac:97:50:0e:eb:ad:10:e8:fb:89:80:a9:4a:71:ed:
64:27:38:2c:c1:9a:a4:11:d0:f3:0e:f7:19:c6:0e:c7:39:a7:
a0:0b:ef:33:fb:49:8b:9f:a4:5a:c4:43:37:d2:d1:16:9b:5e:
e2:56:17:bb:d4:a2:08:55:55:76:93:b7:60:70:10:b0:66:27:
65:9d:7b:46:26:b9:da:9c:cf:56:0e:f2:82:3b:9f:2c:fa:02:
32:af:d0:89:8d:e0:48:bc:84:60:12:39:13:a7:6c:0b:23:65:
e3:52:bc:2d:bf:2f:c7:b6:c8:3e:99:76:86:46:33:20:87:ce:
42:47:c9:f2:87:5b:d9:dc:f5:bd:da:46:39:7d:14:10:2f:68:
47:e7:54:a3:fa:35:dc:40:c7:68:c5:3e:7c:a4:c0:6e:e4:68:
b9:ab:2d:d7:94:e6:33:57:41:25:a5:b1:9f:f0:83:12:1b:17:
54:d5:81:ee:13:32:70:58:74:bf:bc:7d:90:39:3b:f4:c8:8d:
f6:8d:d0:bd:88:32:28:8d:14:4e:9d:c8:26:cc:88:a7:1c:ab:
29:b4:cd:30:96:be:26:11:c4:dd:e6:a2:60:cd:bc:9f:ef:ac:
92:4a:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:48 2025 by rpki-client