Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60647.roa
File: AS60647.roa (raw, json)
Hash identifier: lXmXzmjzlGZTlxA90y6VuTR/Ey3izTTJe7+6xRABJ6U=
Subject key identifier: 00:33:77:50:91:CB:2C:B7:23:C9:50:54:1F:BC:04:FF:FF:9E:6D:4A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0492524E884150A0BFAC04A6032BDCE0CCD959
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60647.roa
Signing time: Fri 31 Jan 2025 02:44:59 +0000
ROA not before: Fri 31 Jan 2025 02:39:59 +0000
ROA not after: Fri 30 Jan 2026 02:44:59 +0000
asID: 60647
IP address blocks: 46.203.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:92:52:4e:88:41:50:a0:bf:ac:04:a6:03:2b:dc:e0:cc:d9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 31 02:39:59 2025 GMT
Not After : Jan 30 02:44:59 2026 GMT
Subject: CN=0033775091CB2CB723C950541FBC04FFFF9E6D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:8f:70:a1:35:d8:52:de:9b:a7:87:3e:1b:
0c:b6:c7:a6:48:4d:16:2c:2d:19:cb:53:ef:9f:a6:
a2:c5:e2:84:ba:76:93:25:18:11:e0:48:4c:19:3c:
2a:1b:1d:0f:c8:82:a2:03:53:88:5a:a6:02:bb:91:
b6:07:08:58:90:fe:32:3e:d0:5d:d7:88:5b:03:3c:
bb:6c:d3:2e:22:f3:a9:5c:5d:29:0c:c6:e8:75:8c:
9f:91:40:c2:a6:a0:a3:2e:34:2a:8f:46:52:a5:4f:
21:10:ea:8b:d0:3a:38:52:f9:07:3e:1b:44:0b:56:
b0:9f:49:2e:08:46:94:49:25:fd:f7:60:88:bb:e8:
19:23:98:c4:2a:1f:3d:77:99:06:49:33:18:67:b7:
38:ca:ae:d1:06:43:46:b7:31:2d:bd:68:a8:d3:a9:
17:c8:4c:5d:ba:b2:04:27:f7:43:89:17:1f:5d:7a:
3d:2d:27:a8:ac:9a:c0:e4:0f:2a:10:15:3e:3a:8c:
51:02:c4:81:62:60:e5:fb:b7:5c:aa:3c:ab:c2:ef:
59:6f:bb:f5:00:d9:e8:ac:33:57:b6:ff:19:eb:33:
09:fe:a7:cb:7e:d0:a3:42:50:5b:0f:c3:9b:cd:98:
d1:cd:1f:9a:52:7f:7a:4a:3a:08:e2:36:df:4f:52:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:77:50:91:CB:2C:B7:23:C9:50:54:1F:BC:04:FF:FF:9E:6D:4A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.248.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6b:4c:9c:f8:f4:32:76:b0:b1:7d:8a:b9:cd:8a:79:82:80:
08:4a:bb:a1:de:20:49:11:5f:3e:5a:bc:81:f2:02:15:af:7d:
ff:1b:0c:ae:45:8e:6e:cf:ef:9a:84:d3:3c:e1:88:dd:4e:0b:
6c:67:00:03:9d:00:b4:67:a2:52:da:56:06:34:d7:c5:9d:46:
c1:f4:97:e5:0e:f2:80:81:3e:6e:6c:ed:a7:50:00:35:c4:0c:
b6:37:8b:5a:5a:8a:3f:d5:a4:3a:dd:7a:42:0f:19:30:29:80:
4e:6d:32:60:7b:cc:1a:97:9d:3f:c5:37:69:61:1f:d9:67:d2:
ff:61:69:64:40:4b:ee:a8:59:c5:7a:be:55:f8:cd:92:ec:4c:
c1:05:44:d6:3d:e8:55:3e:77:fe:62:3c:b5:e5:67:fc:e7:dc:
36:06:96:ad:4d:e1:0a:72:c8:20:e8:32:71:b3:c0:5e:2f:45:
63:7c:6c:ca:61:d0:67:a8:80:90:f4:e9:64:4b:8a:a9:a5:39:
36:6d:ea:9a:f2:f2:cc:db:ac:ab:97:90:5c:98:6f:79:21:81:
8a:f4:0f:41:6d:c3:a2:fc:cb:14:3a:aa:58:c9:56:6d:7c:cf:
c5:21:c0:1e:07:e0:a1:b5:23:0a:71:12:a4:ed:bd:d0:20:51:
f6:38:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:05 2025 by rpki-client