Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS61003.roa
File: AS61003.roa (raw, json)
Hash identifier: Tt0LddUtuuEA8/AJSLRb6BkziYZg4EhAeI5Lo3/ymA8=
Subject key identifier: 89:50:D7:F8:E5:92:3B:24:2A:24:A6:80:4D:77:63:D6:F9:27:91:04
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 50DB6BB2C600C3B87923B3EB8E370F500164E0B8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS61003.roa
Signing time: Thu 24 Jul 2025 00:00:41 +0000
ROA not before: Wed 23 Jul 2025 23:55:41 +0000
ROA not after: Thu 23 Jul 2026 00:00:41 +0000
asID: 61003
IP address blocks: 143.20.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 19:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:db:6b:b2:c6:00:c3:b8:79:23:b3:eb:8e:37:0f:50:01:64:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 23 23:55:41 2025 GMT
Not After : Jul 23 00:00:41 2026 GMT
Subject: CN=8950D7F8E5923B242A24A6804D7763D6F9279104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:93:f5:45:f1:e8:d1:a0:fe:4e:2d:dd:ac:a2:
2b:4e:8f:80:a4:a8:f8:71:ed:58:f6:75:7b:54:d7:
c6:b8:e9:15:9d:dc:1b:b4:32:2d:73:1e:0c:6d:f0:
62:48:a6:72:16:34:c6:2b:84:0f:b2:b8:10:c7:44:
fe:01:2e:cc:5d:7e:18:0f:ef:31:0d:99:38:13:d8:
f2:91:f3:e7:06:7f:29:8e:e4:d5:c5:02:4c:e3:a3:
9a:11:3e:a1:84:8a:96:27:bf:f3:c4:a8:1a:39:34:
62:c2:88:13:b3:49:ce:1f:02:6b:e2:ee:da:d6:fe:
32:f4:1f:de:0c:bb:b0:e4:42:6a:7f:1d:4a:3a:b0:
82:63:4e:dc:66:08:ba:51:4c:24:49:a6:06:91:1a:
3f:52:f0:a4:6a:8f:b6:7f:a4:1a:00:cb:d4:e7:74:
07:47:ed:f4:ef:ff:05:c9:e5:46:32:34:fa:18:cf:
0a:ca:89:36:f4:a8:82:fd:9e:e3:dd:fa:11:f5:0a:
8a:fb:8a:8f:9f:8e:85:76:b5:3e:09:6d:f5:cc:49:
80:59:e4:90:18:34:22:a9:08:cd:d8:bf:af:dc:62:
d0:fd:d9:e5:94:a5:db:f2:b1:0f:39:a7:17:a7:63:
ed:c8:be:78:f0:7e:26:94:73:52:c8:41:51:4e:73:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:D7:F8:E5:92:3B:24:2A:24:A6:80:4D:77:63:D6:F9:27:91:04
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS61003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6b:41:cf:47:59:7f:2b:64:f8:e4:47:1c:61:43:ed:6b:25:
92:fd:a1:70:bb:1f:ad:44:cb:11:b3:43:4e:cd:b8:c8:8d:e5:
d2:c5:b3:f5:c4:74:e7:b0:c1:4f:2b:de:56:65:23:1c:a9:6f:
e3:91:f0:e7:54:89:9b:e6:5f:3e:8d:f0:d3:5c:0a:60:35:72:
7d:05:1e:46:02:8d:23:ff:d1:d1:61:78:e8:b3:a3:c4:50:9a:
6a:33:00:bb:eb:e0:3f:49:5f:63:6f:80:9a:ce:53:fd:5d:5f:
1a:4a:15:eb:2e:e8:be:a7:34:de:65:2b:fd:78:eb:c5:74:3c:
91:a3:68:87:41:3e:2e:8b:36:5c:96:23:62:37:cd:60:a9:41:
b0:1f:cc:cb:33:89:67:51:33:9c:ed:50:0c:eb:58:30:16:57:
8f:73:2c:e4:e7:29:7b:f8:e1:9e:75:2c:1d:01:18:64:a8:f2:
bd:6c:aa:33:88:62:3b:d5:50:c8:2c:cb:3c:4c:6b:76:57:24:
ff:83:b7:d1:ef:48:61:3f:cf:51:68:9d:bb:1a:6d:80:86:0a:
b3:3e:ac:84:0b:7c:8b:40:b7:96:49:86:73:c8:eb:e4:d7:d2:
74:da:ee:f0:80:fc:c2:80:3a:ad:5d:29:b0:58:19:8b:65:35:
c2:84:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:09 2025 by rpki-client