Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60458.roa
File: AS60458.roa (raw, json)
Hash identifier: 8k2FeJjlPAshoXlGOebyxhs3BnmhMmXQA9YePd9EuOA=
Subject key identifier: 2D:A3:DE:E5:E5:B5:42:43:7A:3C:DF:D2:20:D5:6E:75:57:10:80:3D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 52F8468E80FAA5B8932350A340A0D126AA798585
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60458.roa
Signing time: Sat 28 Jun 2025 00:54:11 +0000
ROA not before: Sat 28 Jun 2025 00:49:11 +0000
ROA not after: Sat 27 Jun 2026 00:54:11 +0000
asID: 60458
IP address blocks: 191.101.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 01:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f8:46:8e:80:fa:a5:b8:93:23:50:a3:40:a0:d1:26:aa:79:85:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 28 00:49:11 2025 GMT
Not After : Jun 27 00:54:11 2026 GMT
Subject: CN=2DA3DEE5E5B542437A3CDFD220D56E755710803D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:2c:0b:59:b6:bf:47:1a:8f:5e:de:57:0f:
2a:df:51:4d:a5:bc:d1:7f:a9:8f:81:b2:92:a3:37:
21:44:24:66:9c:1f:f8:24:bf:d1:f7:f9:af:7b:69:
34:f4:62:28:c0:ea:a3:bb:e5:97:48:fa:0c:1f:e8:
93:ba:36:cd:ab:3b:03:ef:0e:1d:57:1d:13:f5:3a:
57:be:88:7a:ee:36:39:a2:3e:75:36:c0:24:3f:6a:
e1:83:ff:ec:2b:e8:52:77:56:e4:1a:04:84:08:12:
11:cc:70:66:7d:99:2a:8f:ab:fa:b1:60:af:0b:54:
bf:68:2e:30:bc:cf:90:53:19:92:ba:64:0d:d9:99:
f2:11:ab:c7:2c:79:ca:d5:26:71:81:2c:04:b4:7a:
13:a6:d9:51:26:fe:6b:27:44:86:b2:4c:30:11:72:
8f:42:88:64:b9:8f:1a:80:06:cc:54:24:aa:5e:73:
fd:b1:82:6d:47:d7:c3:bc:44:21:72:b1:79:0a:a8:
e0:3e:e4:98:26:ca:16:e7:e8:b2:c1:be:ac:41:23:
ac:3e:6f:0b:a2:47:66:f7:17:d8:71:ee:e4:16:df:
6a:49:38:13:f9:25:e4:98:7e:bb:10:e4:dc:48:f7:
96:1d:42:70:00:c2:86:5b:51:3e:a5:18:f6:ed:93:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:DE:E5:E5:B5:42:43:7A:3C:DF:D2:20:D5:6E:75:57:10:80:3D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.151.0/24
Signature Algorithm: sha256WithRSAEncryption
07:53:30:95:25:4c:fc:fb:6a:da:96:81:4f:74:23:6b:90:9f:
b3:83:28:c3:35:65:b6:2f:f4:1f:2a:40:39:dc:5d:f9:15:83:
58:36:c9:2b:cf:4f:f9:20:d8:1a:8d:cd:07:cb:fe:13:81:90:
cc:18:87:7a:f9:38:6c:7c:94:6c:93:29:e6:dd:e0:f6:90:6b:
90:e9:90:c5:35:f2:60:7c:92:48:af:68:c8:a8:a7:8d:86:5f:
8b:04:64:ac:3b:60:4e:1f:75:9d:56:b0:b4:6d:22:36:f8:a6:
81:d7:e0:d8:f4:86:54:aa:82:07:af:7c:58:8c:46:2f:d4:ac:
20:93:d2:1b:54:b4:61:2c:be:a4:9b:9b:7e:3e:06:6b:55:14:
6f:66:dd:97:24:52:14:64:3b:af:f0:7a:21:ed:01:c4:02:ac:
b9:38:05:07:f7:ed:79:0e:74:b9:a8:82:d2:50:8e:6a:59:a5:
a6:b6:d1:be:f0:24:4f:ce:bb:b5:3b:a2:dd:41:ee:8b:b0:f4:
b9:fd:52:ab:9c:b3:84:e8:bd:f3:14:0b:9c:a0:30:76:57:1c:
8c:db:05:1e:ad:99:5e:16:9a:be:1a:25:9c:f4:fa:e7:8e:50:
61:db:f8:3c:6f:be:eb:ba:04:a4:f8:cb:89:c2:d0:01:52:f0:
87:bf:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 14:04:16 2025 by rpki-client