Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS60614.roa
File: AS60614.roa (raw, json)
Hash identifier: 35SWuMUdCHMGrGrv1YbgCcWuXEbcANAgi5NKB36qrHo=
Subject key identifier: 83:AD:20:94:2A:7A:52:DF:B7:8B:E4:78:1C:9E:97:2C:B4:07:DF:99
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 48656DCCC765E3A343A476D5D1E7046E67CF3E8D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS60614.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 60614
IP address blocks: 2a14:7580:f000::/40 maxlen: 48
2a14:7581:9d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:65:6d:cc:c7:65:e3:a3:43:a4:76:d5:d1:e7:04:6e:67:cf:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=83AD20942A7A52DFB78BE4781C9E972CB407DF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:91:cc:60:07:49:5b:3b:0e:0e:8f:26:86:
5f:2d:8a:d9:52:6e:72:a6:54:ed:1e:3a:8b:1a:51:
2f:53:89:61:48:2a:e0:8a:1b:2b:f7:39:1d:6b:29:
c7:06:1f:80:89:eb:97:7b:dd:5e:b7:69:95:f8:c2:
22:da:45:ae:b2:ca:d9:0d:23:1f:06:1b:2d:08:1c:
20:52:6d:bd:a6:f7:09:3c:bc:bb:fb:59:41:81:19:
af:fb:06:9c:4b:72:6c:ff:8a:72:9a:0f:f9:43:71:
11:ad:84:53:46:e7:81:62:75:0b:08:bc:27:fa:91:
58:b4:61:d9:74:bc:58:88:18:5a:26:14:34:4e:07:
0f:a2:39:75:e4:fc:d9:30:16:47:7f:49:c9:cc:3f:
62:d6:06:b9:8b:41:63:78:4f:e3:0c:4b:42:98:28:
40:ff:94:ac:c6:d4:b6:9c:28:79:02:00:f8:5e:48:
a1:36:f9:4e:96:37:25:40:8a:98:0a:18:26:19:81:
a0:31:85:42:db:8a:44:4d:48:c6:79:ce:8f:34:a6:
f5:09:a7:25:08:0e:4f:c7:2b:f0:e1:e4:bb:dc:a1:
7f:42:a1:7e:28:d3:8f:ba:86:15:ef:f9:5f:67:8d:
22:54:6a:5f:b2:64:48:59:82:96:db:68:5d:b1:4b:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AD:20:94:2A:7A:52:DF:B7:8B:E4:78:1C:9E:97:2C:B4:07:DF:99
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS60614.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f000::/40
2a14:7581:9d00::/40
Signature Algorithm: sha256WithRSAEncryption
89:a1:fa:51:88:6e:52:83:f4:43:4a:0f:7c:2d:07:d0:41:35:
d2:3e:c9:21:70:e3:7c:14:44:94:56:3e:2a:ec:77:00:8e:c3:
fa:63:59:cd:81:79:8b:59:40:d1:6a:5b:99:85:1d:d2:57:b7:
6e:51:44:d7:67:a0:21:0c:34:7d:56:4a:86:3c:eb:f2:f9:80:
54:e1:a0:72:60:8e:50:59:45:4a:8d:34:91:0b:e7:3a:3e:61:
e1:81:57:5a:24:ae:a5:41:8f:93:e4:40:d0:cc:6c:38:8b:4c:
c9:02:b5:98:b9:cb:59:cb:67:9c:d9:03:49:0a:d3:b7:83:66:
fb:b8:1d:e7:61:f6:5e:27:11:00:f4:e1:0a:dd:74:c7:7e:78:
73:e4:a2:10:f0:67:25:26:6e:a8:b1:89:05:a3:49:dc:1f:4d:
42:26:91:9e:ca:37:9b:42:4b:c9:0d:58:1d:78:fd:2f:b2:f3:
7f:b7:a9:39:d8:3c:0a:14:f6:bd:f2:56:54:bc:c1:29:4e:e4:
f8:14:76:70:11:99:c4:c6:d6:73:0e:a3:34:06:80:4e:0e:1a:
aa:77:24:fd:29:a4:78:46:23:31:5f:d3:da:43:e5:c6:07:f8:
b2:af:0e:8d:e5:14:52:f3:1d:ee:ec:3b:fa:d8:b6:dc:21:c2:
f4:4f:e4:8d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUSGVtzMdl46NDpHbV0ecEbmfPPo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAyMDQwMDEyMDlaFw0yNjAyMDMwMDE3MDlaMDMxMTAvBgNV
BAMTKDgzQUQyMDk0MkE3QTUyREZCNzhCRTQ3ODFDOUU5NzJDQjQwN0RGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIQZHMYAdJWzsODo8mhl8titlS
bnKmVO0eOosaUS9TiWFIKuCKGyv3OR1rKccGH4CJ65d73V63aZX4wiLaRa6yytkN
Ix8GGy0IHCBSbb2m9wk8vLv7WUGBGa/7BpxLcmz/inKaD/lDcRGthFNG54FidQsI
vCf6kVi0Ydl0vFiIGFomFDROBw+iOXXk/NkwFkd/ScnMP2LWBrmLQWN4T+MMS0KY
KED/lKzG1LacKHkCAPheSKE2+U6WNyVAipgKGCYZgaAxhULbikRNSMZ5zo80pvUJ
pyUIDk/HK/Dh5LvcoX9CoX4o04+6hhXv+V9njSJUal+yZEhZgpbbaF2xSw0VAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUg60glCp6Ut+3i+R4HJ6XLLQH35kwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNjA2MTQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqFHWA
8AMGACoUdYGdMA0GCSqGSIb3DQEBCwUAA4IBAQCJofpRiG5Sg/RDSg98LQfQQTXS
PskhcON8FESUVj4q7HcAjsP6Y1nNgXmLWUDRaluZhR3SV7duUUTXZ6AhDDR9VkqG
POvy+YBU4aByYI5QWUVKjTSRC+c6PmHhgVdaJK6lQY+T5EDQzGw4i0zJArWYuctZ
y2ec2QNJCtO3g2b7uB3nYfZeJxEA9OEK3XTHfnhz5KIQ8GclJm6osYkFo0ncH01C
JpGeyjebQkvJDVgdeP0vsvN/t6k52DwKFPa98lZUvMEpTuT4FHZwEZnExtZzDqM0
BoBODhqqdyT9KaR4RiMxX9PaQ+XGB/iyrw6N5RRS8x3u7Dv62LbcIcL0T+SN
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:03 2025 by rpki-client