Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61112.roa
File: AS61112.roa (raw, json)
Hash identifier: pohbK6AMxIqmR4WBYCTVCKxHB/slXu+jTHfTbJQQd9U=
Subject key identifier: 11:E2:0C:A3:D9:A3:B3:74:88:77:B3:62:E0:D6:24:C6:80:F1:6D:01
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1079B2A8BD861662E26E3644911503521E46BE94
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61112.roa
Signing time: Mon 04 Aug 2025 13:54:13 +0000
ROA not before: Mon 04 Aug 2025 13:49:13 +0000
ROA not after: Mon 03 Aug 2026 13:54:13 +0000
asID: 61112
IP address blocks: 181.214.136.0/24 maxlen: 24
191.101.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:79:b2:a8:bd:86:16:62:e2:6e:36:44:91:15:03:52:1e:46:be:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 4 13:49:13 2025 GMT
Not After : Aug 3 13:54:13 2026 GMT
Subject: CN=11E20CA3D9A3B3748877B362E0D624C680F16D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:05:60:58:af:fc:ff:87:57:df:b5:a8:25:
4b:6f:89:16:4e:75:24:54:a3:23:49:50:61:46:35:
06:8c:93:1c:eb:18:8a:b1:49:7d:f5:db:f6:d0:88:
e4:87:4f:43:a2:99:1d:f3:75:3a:af:63:40:7d:99:
79:d8:e9:1e:4d:67:de:91:95:3e:cc:18:bd:c6:f7:
1e:be:0b:eb:f2:a5:d3:68:86:fa:d1:24:8a:b8:5d:
ea:3c:71:92:53:0e:e3:39:bc:64:d3:c2:33:cc:ca:
1a:f9:85:a5:89:48:c1:5a:5d:aa:57:7a:62:ca:6f:
97:a7:b3:96:cf:ad:b9:00:b6:6f:ae:d4:a3:0f:a5:
5f:7b:31:06:57:fa:58:ca:aa:ce:3d:61:80:08:77:
ab:5d:ca:7a:94:3a:6a:23:80:76:bc:8b:09:2d:3a:
c1:4f:d1:1e:ea:eb:64:5b:2d:d7:cd:28:2d:b0:b2:
72:a7:2c:1c:7a:f7:a4:61:61:53:b6:3b:16:85:db:
b4:90:59:bc:a3:4c:92:6d:19:57:2c:ca:52:d1:6a:
08:e2:96:60:66:3f:18:52:94:2d:a9:5a:19:74:63:
a1:a8:1c:ad:90:b0:75:07:7e:3b:7e:07:54:33:03:
e0:d3:5e:6c:f0:86:ae:5e:29:be:40:a2:57:21:f7:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:0C:A3:D9:A3:B3:74:88:77:B3:62:E0:D6:24:C6:80:F1:6D:01
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.136.0/24
191.101.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5d:5a:45:72:8b:ef:e6:a1:b2:27:31:07:d5:5f:51:2a:0c:
8f:a6:d9:b8:89:89:99:f5:6f:54:82:fa:76:f5:02:d5:77:8d:
44:5a:11:09:91:e1:df:d6:4f:b0:2a:79:4d:08:51:06:ce:d1:
a4:b3:dd:bf:5e:fa:f6:e6:96:03:da:58:ea:c3:3b:c8:67:0e:
fe:9f:73:ce:8f:88:63:7e:56:d2:5c:e9:59:98:25:5c:5d:f2:
27:53:99:55:3e:c0:bf:cb:b9:6e:51:60:7f:93:48:9c:f2:2b:
50:7a:05:e4:e1:ed:6e:cc:50:0c:f9:ab:d5:25:7b:4a:af:0b:
04:32:ec:11:08:4e:29:c0:01:cf:4a:b5:17:74:51:df:7c:2a:
c0:f8:0a:82:f1:c2:09:6b:45:5c:35:8e:fe:44:d7:63:4c:e6:
49:d1:ce:9c:9c:44:04:23:57:01:2f:97:70:ad:c7:51:2a:e9:
dd:3d:8d:c1:5d:ae:2b:21:3b:fa:ac:02:bd:92:52:35:43:2b:
b9:df:ef:ce:be:f4:53:e2:68:2b:2c:27:26:0c:a4:cc:57:62:
fd:da:af:cc:9e:03:36:7d:3c:56:4d:51:4c:74:2e:da:87:58:
49:16:1b:b4:6d:a3:45:3f:9f:b5:83:d5:44:f6:bf:1d:fd:29:
54:e7:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:26 2025 by rpki-client