Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: ef90OCLrt4FNy8tD49FXNKX6fDUwTcAW6KCQtyeJAI8=
Subject key identifier: 1D:EC:C4:69:A6:85:5E:A6:25:25:59:12:CE:9A:1B:DB:58:E6:15:96
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6AB656AE42A7C93E8E245D1D95AFA78EBB855374
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
Signing time: Fri 01 Aug 2025 19:12:29 +0000
ROA not before: Fri 01 Aug 2025 19:07:29 +0000
ROA not after: Fri 31 Jul 2026 19:12:29 +0000
asID: 60117
IP address blocks: 167.148.115.0/24 maxlen: 24
167.148.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b6:56:ae:42:a7:c9:3e:8e:24:5d:1d:95:af:a7:8e:bb:85:53:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 1 19:07:29 2025 GMT
Not After : Jul 31 19:12:29 2026 GMT
Subject: CN=1DECC469A6855EA625255912CE9A1BDB58E61596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:01:3a:93:24:dd:67:25:74:06:2a:a4:3b:
81:39:b0:00:90:eb:e3:cd:0d:d1:cb:93:89:39:26:
c1:55:8c:33:5a:bf:c1:37:74:15:5a:6b:39:4a:21:
33:ef:41:19:11:7c:bc:7d:71:c6:2b:e1:ec:5d:5c:
9b:6f:c5:7d:43:b1:f4:5c:5a:90:93:0d:6e:f1:ed:
ba:ca:92:61:66:be:da:bf:48:a1:76:94:94:30:a5:
a5:10:c2:77:75:73:68:41:94:68:68:57:c2:38:c4:
3e:07:3a:10:56:35:5d:d2:94:a2:2f:43:56:d5:f5:
9f:35:ef:98:a5:41:c4:71:25:66:90:5e:3b:fc:93:
75:f3:41:ca:92:05:bf:01:9d:d5:3a:08:db:6c:5d:
f6:3b:83:de:be:af:29:16:94:7b:ca:1e:8f:f3:87:
89:a3:ba:42:01:9b:13:2e:b6:fe:a3:5e:cc:78:55:
1d:ed:18:73:56:ab:e8:c6:5a:6b:4b:ee:f3:09:bb:
9a:e3:ed:c1:fa:c0:22:3d:4a:72:17:a5:41:3c:19:
46:d5:35:05:4b:a6:f3:b0:fc:de:51:0e:da:71:99:
dd:37:10:25:84:de:ef:28:04:50:44:79:24:f0:7d:
0e:10:65:db:7b:00:6f:14:dc:90:f5:71:58:27:75:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:C4:69:A6:85:5E:A6:25:25:59:12:CE:9A:1B:DB:58:E6:15:96
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.115.0/24
167.148.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:ad:91:dc:16:4e:da:a3:c3:a2:04:7e:51:fe:b8:19:fe:
b9:0a:1b:b3:59:5b:85:7b:6b:a0:ff:80:7a:96:8c:0d:ab:1a:
e0:c0:82:8b:34:72:be:3c:b4:b4:42:10:45:88:a4:85:62:6c:
d8:e7:2d:d5:63:94:2d:44:21:43:3a:88:ee:7a:ae:5b:d1:e2:
98:1d:4e:85:b6:50:b9:b4:fd:1b:bc:a3:71:aa:75:fe:01:0b:
28:a1:4f:72:0c:f0:67:27:6b:87:73:16:42:be:b1:b2:e1:8e:
88:5f:00:06:2c:b4:d6:02:62:53:2d:6c:25:a3:95:9a:d5:1b:
70:13:c3:41:63:73:fc:fa:16:11:6f:65:f9:15:72:19:a9:56:
db:39:d9:99:95:30:cf:34:a9:70:ea:df:6b:8a:8c:c2:b6:fe:
7d:2f:75:27:f5:b4:35:86:09:3f:a5:fc:d1:64:41:d7:33:e7:
d4:dd:58:7c:99:df:ca:82:82:97:8d:34:91:f7:83:29:28:16:
39:32:dd:65:2c:02:a6:b0:e5:21:2c:97:a2:1a:d1:ac:5a:02:
ba:46:dc:50:9e:5a:7c:89:41:45:2c:77:d3:09:44:07:9a:d0:
1a:56:ad:52:4f:0e:5f:82:2d:be:88:3f:13:53:c7:10:ed:d3:
6d:ec:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:36 2025 by rpki-client