Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: RUfTfeK+5KQ3mGNnZQ1/W7pqCV/vfHwqFsu4w1z16lM=
Subject key identifier: C8:31:A2:01:BD:17:73:44:C1:A4:D5:7A:EB:B2:95:86:7A:2C:30:76
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 63645C71A26CEE320343CF1D5F3787BB9AB7F781
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
Signing time: Tue 15 Apr 2025 06:25:17 +0000
ROA not before: Tue 15 Apr 2025 06:20:17 +0000
ROA not after: Tue 14 Apr 2026 06:25:17 +0000
asID: 60117
IP address blocks: 181.215.55.0/24 maxlen: 24
181.215.84.0/24 maxlen: 24
191.96.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:64:5c:71:a2:6c:ee:32:03:43:cf:1d:5f:37:87:bb:9a:b7:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 15 06:20:17 2025 GMT
Not After : Apr 14 06:25:17 2026 GMT
Subject: CN=C831A201BD177344C1A4D57AEBB295867A2C3076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:af:e9:96:69:e0:91:f9:b8:7c:a0:68:a6:
38:c2:b5:76:37:c6:97:00:95:f0:f3:c8:f2:cc:9b:
47:cc:3d:62:8a:6c:f8:ca:be:3b:ee:ed:2c:bd:b9:
49:82:9f:0c:58:99:e8:62:e4:c5:18:fa:4a:a4:06:
8f:a2:54:81:d4:58:65:2b:8c:53:b7:ee:54:cd:31:
fc:b4:1d:18:9f:7b:17:21:45:33:2c:dc:a2:fa:8e:
35:49:27:f1:3b:a4:a0:f6:91:6c:51:d8:4e:1c:a0:
ed:bf:28:2b:a0:07:a2:8c:68:26:3c:a2:04:10:56:
4b:29:ef:ff:bb:9e:57:c5:0e:4b:a3:de:3b:8f:b9:
0e:f6:5f:22:bd:5e:bb:9e:33:ca:bb:20:bf:b2:fb:
55:56:0c:46:af:55:29:53:72:77:8e:b3:d6:c3:7f:
e4:8c:0d:c9:17:b1:ac:a9:f6:bd:92:a7:99:73:8f:
ec:37:29:b5:dc:6f:ca:7b:82:d0:dc:ff:a0:dd:3d:
65:da:89:6a:b8:48:8e:ce:21:0c:fc:0d:e4:46:57:
58:85:ff:37:d6:47:fa:1d:35:b7:db:64:7a:35:77:
54:7d:3d:d8:9b:ba:e9:29:7d:8f:0e:ef:f7:dd:68:
c8:6a:a4:d6:be:19:69:d1:99:f3:10:cb:d9:e5:22:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:A2:01:BD:17:73:44:C1:A4:D5:7A:EB:B2:95:86:7A:2C:30:76
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.55.0/24
181.215.84.0/24
191.96.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ff:9f:78:82:2c:73:98:24:2f:89:44:a4:86:69:87:eb:50:
2a:82:01:2d:7c:ad:1c:2d:a1:03:71:ec:da:30:62:44:c9:98:
dd:15:21:82:2e:9c:43:26:3b:3c:e6:91:f0:52:f0:3c:f2:18:
b3:1e:43:9f:35:b2:1a:36:b6:91:52:58:3a:bf:79:b2:c4:28:
bf:55:80:c2:07:46:e2:7c:2b:e1:d8:73:ec:d3:a3:c5:db:22:
60:49:6a:c0:19:ea:b2:56:8e:1e:22:1c:df:76:73:6f:bf:71:
cb:7f:b5:8b:a7:05:09:bb:68:3b:42:95:6f:6e:7d:d6:00:fb:
1f:fb:e2:5b:1e:1d:d2:9a:bb:af:0e:8e:ea:fa:0c:71:f5:d6:
36:24:67:94:85:1b:24:7a:99:e8:5d:33:64:ea:da:0e:fe:c8:
f5:b7:4d:52:9a:ff:48:52:a3:19:48:9d:bc:de:09:71:b3:a7:
b0:78:59:79:3c:e7:3a:28:6a:34:b4:3b:ff:42:64:02:76:8c:
7a:78:c9:fe:6f:7c:d6:f4:eb:0f:71:ca:27:b2:78:aa:67:d8:
7d:a5:48:09:20:f1:78:40:4d:48:9c:3b:21:12:fe:c2:4f:d1:
ce:55:f1:af:e9:ef:c2:af:e2:fa:f1:6e:22:e8:4d:13:d2:41:
7c:c8:d0:bf
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUY2RccaJs7jIDQ88dXzeHu5q394EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA0MTUwNjIwMTdaFw0yNjA0MTQwNjI1MTdaMDMxMTAvBgNV
BAMTKEM4MzFBMjAxQkQxNzczNDRDMUE0RDU3QUVCQjI5NTg2N0EyQzMwNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGPq/plmngkfm4fKBopjjCtXY3
xpcAlfDzyPLMm0fMPWKKbPjKvjvu7Sy9uUmCnwxYmehi5MUY+kqkBo+iVIHUWGUr
jFO37lTNMfy0HRifexchRTMs3KL6jjVJJ/E7pKD2kWxR2E4coO2/KCugB6KMaCY8
ogQQVksp7/+7nlfFDkuj3juPuQ72XyK9XrueM8q7IL+y+1VWDEavVSlTcneOs9bD
f+SMDckXsayp9r2Sp5lzj+w3KbXcb8p7gtDc/6DdPWXaiWq4SI7OIQz8DeRGV1iF
/zfWR/odNbfbZHo1d1R9PdibuukpfY8O7/fdaMhqpNa+GWnRmfMQy9nlIuL/AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUyDGiAb0Xc0TBpNV667KVhnosMHYwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjAxMTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAC11zcD
BAC111QDBAC/YI0wDQYJKoZIhvcNAQELBQADggEBALL/n3iCLHOYJC+JRKSGaYfr
UCqCAS18rRwtoQNx7NowYkTJmN0VIYIunEMmOzzmkfBS8DzyGLMeQ581sho2tpFS
WDq/ebLEKL9VgMIHRuJ8K+HYc+zTo8XbImBJasAZ6rJWjh4iHN92c2+/cct/tYun
BQm7aDtClW9ufdYA+x/74lseHdKau68Ojur6DHH11jYkZ5SFGyR6mehdM2Tq2g7+
yPW3TVKa/0hSoxlInbzeCXGzp7B4WXk85zooajS0O/9CZAJ2jHp4yf5vfNb06w9x
yieyeKpn2H2lSAkg8XhATUicOyES/sJP0c5V8a/p78Kv4vrxbiLoTRPSQXzI0L8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:08 2025 by rpki-client