Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: Hp/9PduTUmeWyscGa3w3UN4St+1Jrx7dFSwQoogIVqg=
Subject key identifier: 41:5D:32:86:5A:C9:12:B1:7D:F3:9D:4B:73:CC:63:99:78:EA:63:B4
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 583D36B74F60514F91F9824C1093CFAC8D4BEC97
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61317.roa
Signing time: Mon 09 Jun 2025 00:01:58 +0000
ROA not before: Sun 08 Jun 2025 23:56:58 +0000
ROA not after: Mon 08 Jun 2026 00:01:58 +0000
asID: 61317
IP address blocks: 45.135.248.0/24 maxlen: 24
45.135.251.0/24 maxlen: 24
45.155.16.0/24 maxlen: 24
193.29.99.0/24 maxlen: 24
193.151.180.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3d:36:b7:4f:60:51:4f:91:f9:82:4c:10:93:cf:ac:8d:4b:ec:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 8 23:56:58 2025 GMT
Not After : Jun 8 00:01:58 2026 GMT
Subject: CN=415D32865AC912B17DF39D4B73CC639978EA63B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:85:85:52:e6:1e:d6:97:62:3c:cd:5a:13:
8c:39:f8:1e:26:37:c2:3a:06:5c:93:10:88:16:4e:
1e:21:f4:78:c4:e5:d2:6a:b1:f3:b9:8e:32:51:34:
54:0e:07:08:0d:26:15:a5:cb:be:ea:e5:2d:8f:44:
72:5e:6f:47:3f:ee:8b:dd:52:66:0c:48:ec:83:85:
ac:3a:6e:ae:23:5d:e1:bf:4e:1f:0f:9d:87:32:92:
d3:e8:94:30:12:de:56:3e:ba:50:bf:6c:8f:f1:4c:
e3:18:bf:e1:41:4a:ba:9d:32:2e:c5:7e:2b:0c:47:
27:f9:c7:7f:27:ad:f5:a6:e6:6b:96:eb:6a:df:55:
15:34:bd:6b:20:67:63:27:92:d7:48:b7:20:94:91:
5c:8f:ec:79:fe:40:50:c2:ed:06:be:dc:9c:11:5e:
ba:33:83:c9:95:e3:d9:ce:09:58:12:8e:ef:5f:29:
b5:f6:50:35:da:ed:a6:91:75:b2:dc:d9:44:1a:1b:
0d:9b:01:86:ba:cd:77:a8:15:a8:4d:e7:a0:79:18:
10:7a:64:3a:82:5e:93:8c:56:52:3f:bf:4d:b8:db:
b2:0b:db:0d:1d:23:40:62:e0:e4:38:ec:b9:d2:67:
e1:fc:f9:7a:8d:19:f1:80:55:b0:c1:26:88:0f:9d:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:32:86:5A:C9:12:B1:7D:F3:9D:4B:73:CC:63:99:78:EA:63:B4
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.248.0/24
45.135.251.0/24
45.155.16.0/24
193.29.99.0/24
193.151.180.0/24
194.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d3:5e:50:3a:28:85:be:2c:df:d6:16:36:c9:b7:6b:12:43:
4a:28:f3:fc:f6:87:28:35:14:9b:d0:be:74:83:f1:0e:8d:f3:
76:26:62:3b:4e:d0:c1:58:8a:e6:da:0f:2f:89:e7:5c:c1:f2:
74:58:e0:fb:39:c7:85:e6:ab:c2:1a:33:9c:12:d9:a3:8b:ae:
95:2e:5c:44:ad:e9:1d:08:5c:05:57:0c:3b:2a:e9:6d:49:39:
11:d9:a3:a7:df:67:d2:ff:34:ab:76:8b:cf:a3:96:f7:84:c9:
43:01:3b:09:f6:a5:31:73:61:60:08:7d:d3:b7:80:db:ca:00:
94:5c:eb:ae:0f:79:24:08:ce:fc:d0:33:15:20:38:49:cc:67:
97:53:be:ba:d2:2a:25:92:ac:2b:43:7c:fe:9a:a0:23:31:54:
c9:8a:d2:b4:7d:76:58:8e:ef:d4:7d:6f:ff:58:fb:0d:25:69:
99:b3:02:9a:fb:2c:04:aa:12:a7:23:8c:02:13:06:e6:aa:21:
0c:26:c1:cc:e3:99:5d:94:c9:f7:fe:4f:ea:e0:82:e9:2d:52:
e2:1f:66:63:d5:39:11:c8:03:c8:45:2c:29:95:93:59:c3:cc:
59:84:f5:88:65:30:95:95:2d:26:91:81:3e:09:76:e9:37:5a:
82:be:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:14 2025 by rpki-client