Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: 36tLYn+TSy13nXkpikKcuPyH1M44orY9TVZmFPfinK0=
Subject key identifier: 77:69:9B:F0:20:21:CA:C8:BC:42:82:6D:74:FE:D2:C3:D6:ED:38:5C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3FF9C0B24A877748A495F545217C3B40AA227171
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61317.roa
Signing time: Wed 30 Apr 2025 13:58:22 +0000
ROA not before: Wed 30 Apr 2025 13:53:22 +0000
ROA not after: Wed 29 Apr 2026 13:58:22 +0000
asID: 61317
IP address blocks: 143.14.247.0/24 maxlen: 24
147.79.29.0/24 maxlen: 24
148.135.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f9:c0:b2:4a:87:77:48:a4:95:f5:45:21:7c:3b:40:aa:22:71:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 13:53:22 2025 GMT
Not After : Apr 29 13:58:22 2026 GMT
Subject: CN=77699BF02021CAC8BC42826D74FED2C3D6ED385C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:a5:a5:ae:60:31:e5:70:3a:b0:07:4d:23:
3a:d7:e3:03:97:8c:2c:70:16:41:9e:56:4f:34:06:
ab:f0:9d:21:81:7b:a7:8e:75:60:ed:8d:a1:6d:ea:
bf:49:7a:a3:62:e6:61:c7:47:d4:cf:1f:6f:bb:e0:
6f:8b:06:1b:06:76:9e:f8:26:8a:ff:ea:a0:54:0c:
c3:3f:e2:e8:f1:1a:da:a9:63:c1:f2:7f:4f:6e:8c:
fa:e8:08:17:ad:d5:d6:ef:b4:be:64:71:cc:52:c9:
c1:40:5d:04:02:61:80:9d:20:a0:03:e4:b7:89:61:
24:37:5a:11:88:c9:7d:0e:b2:76:e1:ee:e7:fe:66:
4b:26:04:1a:ea:98:93:e7:1b:81:57:a7:f3:aa:99:
7b:09:7e:e0:b4:f3:58:65:67:25:17:52:11:fe:19:
b3:28:02:e1:50:0a:ed:c5:44:d7:92:47:81:58:4a:
ef:eb:b5:3e:e8:07:a7:1a:5f:5f:23:6c:3a:0e:17:
26:fc:51:80:d9:32:96:15:06:f8:6a:1b:55:a5:f5:
cb:4f:22:1b:78:43:40:9b:7f:26:ed:25:d5:35:ee:
0b:bb:8f:94:9d:f4:26:82:fc:e0:8d:d3:a6:61:83:
cf:5d:e8:5b:31:88:f7:25:93:17:70:5a:ba:61:5a:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:9B:F0:20:21:CA:C8:BC:42:82:6D:74:FE:D2:C3:D6:ED:38:5C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.247.0/24
147.79.29.0/24
148.135.162.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ce:b3:9b:42:34:f9:1d:b0:a1:4a:ee:79:13:88:5f:ca:3d:
7c:3c:e5:9f:0e:eb:d4:2a:f1:24:a6:59:52:0c:3a:46:3a:c1:
db:56:08:de:73:19:20:cf:ff:a5:92:80:79:08:33:3f:82:dd:
5b:74:c7:39:11:f2:5e:dd:74:64:72:34:e1:2d:d3:12:c1:88:
f6:bf:a1:2d:5f:fc:23:d6:8d:68:0a:44:87:da:d0:ab:57:c2:
95:00:9e:98:bb:59:ab:29:fc:cf:ff:41:70:95:2a:8d:bc:49:
23:93:fc:d2:95:44:02:f5:3d:5e:ca:ca:30:89:b8:70:e3:81:
78:0c:5a:17:10:22:55:50:5e:56:00:5c:53:ac:38:cb:8d:a6:
6b:d2:9e:a8:ed:80:15:90:91:18:07:74:82:22:1d:02:a6:7d:
95:e9:26:b6:57:1d:c7:78:dd:aa:75:3f:de:f6:87:b7:4b:47:
d4:a0:89:70:eb:c8:50:25:94:a8:cc:13:0f:48:b1:4d:f0:91:
64:60:6e:a8:dc:8b:ba:1e:aa:cc:ab:b2:bf:32:8e:87:79:bc:
89:0d:32:09:de:87:e7:e5:20:d2:04:a5:07:b7:c1:e7:27:3e:
25:6d:d1:a7:6d:98:9f:00:6b:fc:d0:8b:f9:29:ea:3c:be:fe:
b5:c0:21:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 5 13:55:13 2025 by rpki-client