Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: dF9PbI7jxrKx4xsQQicOUuhcAposZwRxUS5dOuIV8W8=
Subject key identifier: ED:02:FA:F7:BB:97:F0:D2:07:B4:57:99:AF:16:76:BE:00:CB:44:A7
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 09606BC23970C5DA74C5344BE99C4C5868D49C16
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS60117.roa
Signing time: Tue 03 Jun 2025 15:04:43 +0000
ROA not before: Tue 03 Jun 2025 14:59:43 +0000
ROA not after: Tue 02 Jun 2026 15:04:43 +0000
asID: 60117
IP address blocks: 188.119.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 05:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:60:6b:c2:39:70:c5:da:74:c5:34:4b:e9:9c:4c:58:68:d4:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 3 14:59:43 2025 GMT
Not After : Jun 2 15:04:43 2026 GMT
Subject: CN=ED02FAF7BB97F0D207B45799AF1676BE00CB44A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f0:dc:50:6f:60:16:ca:ed:a5:80:ad:29:4c:
86:8e:2e:28:64:b0:da:9e:c8:07:b8:10:36:26:37:
ba:17:e9:33:a8:9d:e2:00:03:5a:ae:1b:c2:75:b8:
3a:80:cd:97:12:5e:1b:3b:3a:97:39:c4:79:a1:fa:
da:97:55:e2:3c:a7:63:db:c7:22:d5:38:77:60:2a:
cf:4a:fa:0c:63:89:94:5d:47:24:15:11:25:e8:d4:
3c:69:e8:b4:01:98:da:d3:c7:87:d0:c7:7d:66:82:
96:88:76:da:47:f8:64:4c:2c:16:c7:51:96:1a:a1:
e4:46:e4:4d:d7:26:62:14:bb:13:f3:8e:75:15:8d:
95:dc:a9:92:86:69:f7:0a:13:83:63:5c:db:eb:ff:
83:83:ac:71:f6:d2:b3:a9:70:c3:fa:d5:d9:d0:69:
27:53:93:56:0a:fc:07:63:78:fc:e0:a1:db:1c:34:
b4:30:d9:1e:ef:05:27:b6:e2:55:db:85:43:95:75:
ed:bf:c5:63:e4:1a:34:ac:bc:e3:0c:a5:54:8e:6f:
cf:8a:29:83:0b:e5:01:7d:d0:72:31:56:d9:f5:11:
31:1e:6a:4e:9f:2f:e5:cb:e4:18:7d:12:3c:cb:a0:
dc:11:15:eb:ee:71:dd:08:83:63:0b:47:ce:5a:b4:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:02:FA:F7:BB:97:F0:D2:07:B4:57:99:AF:16:76:BE:00:CB:44:A7
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5d:3f:18:77:7d:a6:ee:5e:65:c3:0d:38:88:d5:37:63:73:
50:ff:a0:6a:dc:40:c9:85:c7:df:aa:dc:32:c9:d2:6a:7a:1d:
3d:ec:d4:4e:a0:11:14:da:73:9b:a6:91:e4:de:e9:08:d2:94:
04:73:b0:be:d5:38:3f:a5:0b:18:e3:99:2b:04:a2:14:a7:27:
74:a5:64:ce:33:cc:3f:f3:48:06:44:a7:a2:d8:58:c3:64:6b:
5f:48:5c:5b:da:39:a2:28:72:60:51:9b:4a:ab:fd:89:ff:ef:
02:64:54:58:1b:27:a7:66:43:58:d3:27:3e:59:c8:52:34:a7:
f9:59:93:b1:be:b2:a1:68:b5:08:e4:f1:00:f9:0d:70:f0:80:
2e:85:d7:22:00:55:16:9c:08:fa:db:1c:2a:ff:b7:85:1f:65:
ad:bc:83:61:84:98:14:1d:5e:2f:6a:46:c2:a6:72:37:73:d6:
a2:16:dd:9a:f8:9b:bb:3e:93:fb:e5:c7:98:b8:a7:a6:2b:ca:
62:15:97:00:19:fe:d7:f7:fa:c2:f3:4f:7c:2a:a0:f1:d0:a5:
9f:fc:52:26:d0:32:62:38:c4:e1:6b:92:d4:c9:df:83:b3:80:
54:3e:f2:aa:32:34:a5:b3:6e:14:24:09:46:37:e4:4d:8b:ad:
11:49:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:55 2025 by rpki-client