Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: bwdEsiVsRPAJFVJyrfkHWOOBGFgkws53GeTj8q2qZiU=
Subject key identifier: C4:94:6A:56:E8:03:DA:DB:71:20:0A:45:0F:27:93:6D:D0:58:76:41
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 16E6700328CDE9B307E3CBBCC267B22D6F9BDC6E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61317.roa
Signing time: Tue 08 Jul 2025 18:09:14 +0000
ROA not before: Tue 08 Jul 2025 18:04:14 +0000
ROA not after: Tue 07 Jul 2026 18:09:14 +0000
asID: 61317
IP address blocks: 141.11.10.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.44.0/22 maxlen: 24
141.11.82.0/23 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e6:70:03:28:cd:e9:b3:07:e3:cb:bc:c2:67:b2:2d:6f:9b:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 8 18:04:14 2025 GMT
Not After : Jul 7 18:09:14 2026 GMT
Subject: CN=C4946A56E803DADB71200A450F27936DD0587641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:66:c4:b8:04:c0:ca:a1:85:07:15:d7:0e:
4a:54:f7:79:8b:2a:c3:30:a7:95:db:47:3e:5b:22:
c4:0c:26:5a:73:18:b9:b5:4a:c2:98:2e:4e:6b:89:
13:6e:43:15:8f:76:98:3f:31:8b:8f:c0:6e:34:b4:
b9:76:b5:97:37:44:28:cd:9d:9c:93:74:c2:17:78:
fe:d3:05:83:e8:a8:b0:ae:e6:f5:15:6e:e3:27:61:
57:b5:f9:00:33:93:a7:fe:72:cc:d1:66:b2:82:80:
49:8c:a5:6b:37:a9:ea:9e:5d:2d:59:08:9d:c1:98:
72:5c:dc:a0:67:c1:0d:d3:7d:d7:1b:3e:de:63:fe:
9e:0b:8e:5e:a0:3d:51:a7:2e:19:74:20:dc:55:a4:
a4:d0:2a:c0:0d:6b:fb:fd:21:8e:76:82:74:68:fc:
7e:e3:13:0c:c7:69:88:50:0d:46:48:0e:49:ff:1c:
df:18:4b:19:53:91:bd:3e:56:1f:14:60:b9:8b:bf:
79:e4:c8:53:d8:3a:6d:ca:f8:51:86:10:54:a8:e5:
fa:88:f5:89:65:e5:84:11:11:c9:63:a8:35:1e:08:
f6:10:28:22:8c:c1:0b:06:36:88:85:c1:8e:cb:1a:
c1:00:b0:65:12:6c:94:c5:05:da:9c:ee:2f:ad:65:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:6A:56:E8:03:DA:DB:71:20:0A:45:0F:27:93:6D:D0:58:76:41
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.10.0/23
141.11.26.0/24
141.11.35.0/24
141.11.44.0/22
141.11.82.0/23
141.11.121.0/24
141.11.182.0/23
141.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
52:67:81:39:6b:52:56:42:5e:66:8f:66:1d:3d:f9:8f:27:f0:
ad:26:81:f6:25:47:da:f7:85:90:ba:fd:13:b2:57:ea:f1:b4:
30:6e:d1:a3:78:e9:43:4d:c1:09:a7:5c:f8:a3:4d:b9:67:56:
78:93:91:46:a5:0c:74:48:35:f8:e9:bb:af:b9:be:99:2d:12:
2e:25:b5:a2:92:8d:8f:c3:e2:e6:b1:81:a1:48:d5:93:69:dd:
7e:f5:ab:09:c1:ab:fa:81:67:f7:2d:39:e8:e6:e9:ca:04:94:
ce:e5:f9:14:84:f3:36:2c:45:4b:39:af:bc:6a:a5:c2:04:fe:
40:f5:2a:f4:9e:6d:ff:2b:21:aa:48:6c:2c:a5:cc:48:87:a5:
31:5f:c5:36:df:d7:ee:04:6d:4c:42:8f:bf:0f:01:f8:c1:81:
96:88:8e:ff:cc:88:86:65:88:f0:9e:e9:06:73:66:06:b2:94:
8d:55:15:9e:30:3d:cc:b9:66:1c:cb:59:13:fa:eb:8b:c8:c1:
43:88:79:f7:e3:8d:74:b5:24:00:f2:76:33:14:d8:5e:5d:44:
e9:a9:1c:be:62:a7:b0:25:f7:16:30:f8:6d:aa:b9:a1:22:89:
37:0e:e2:62:73:08:02:40:2c:e0:56:06:ba:cb:f7:60:66:72:
58:32:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:34 2025 by rpki-client