Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS61142.roa
File: AS61142.roa (raw, json)
Hash identifier: 605mhG3oWTs8ZioNHo0IvkGk/TnUfIpE/aJBaIlLiug=
Subject key identifier: B7:A8:BD:E2:49:8D:9D:57:A6:34:7B:4C:89:52:80:3E:BE:D0:0B:C5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3B89E6972C5F75EEC6139D3822D0AB31DDBF5116
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS61142.roa
Signing time: Thu 07 Aug 2025 10:10:13 +0000
ROA not before: Thu 07 Aug 2025 10:05:13 +0000
ROA not after: Thu 06 Aug 2026 10:10:13 +0000
asID: 61142
IP address blocks: 2a0f:85c1:850::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:89:e6:97:2c:5f:75:ee:c6:13:9d:38:22:d0:ab:31:dd:bf:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 7 10:05:13 2025 GMT
Not After : Aug 6 10:10:13 2026 GMT
Subject: CN=B7A8BDE2498D9D57A6347B4C8952803EBED00BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0b:41:cf:60:ec:2d:89:28:cc:36:7e:27:07:
8f:15:cd:42:dc:de:ae:ce:fb:aa:73:96:04:04:c1:
78:a6:44:32:a0:e5:cb:75:90:94:19:a8:c6:0c:2c:
8c:bb:8e:35:be:19:bf:69:70:c5:d3:e8:3b:59:9d:
87:c7:30:a0:1c:b7:28:f7:21:e5:33:83:17:c4:c9:
b6:dd:e9:1b:b8:12:5a:44:fc:9c:3b:6e:1f:70:2c:
2e:48:a2:7b:85:1c:61:96:30:e1:d2:c3:06:41:e2:
5d:c1:17:02:f2:db:c2:49:eb:1c:73:e0:ab:54:96:
0d:46:e6:4c:33:c4:a3:15:b4:5a:c9:1e:79:ef:62:
e7:5a:92:ae:c7:0f:be:d0:de:61:24:9f:95:a0:c5:
3e:1f:c7:64:59:b0:37:03:50:af:f2:be:59:5e:99:
3a:54:fc:13:01:ad:96:30:26:33:8c:cc:19:fe:a7:
14:1c:23:c3:62:68:cd:5f:f4:f5:af:fd:87:52:04:
a0:43:76:82:54:e4:ec:b6:76:60:64:a8:6b:25:75:
ca:2c:a1:7a:ff:3a:b2:60:72:a4:1b:9e:8c:0a:4b:
c9:5f:f1:97:50:ce:d0:d0:5a:5f:55:e5:f8:64:29:
4c:64:3d:47:a4:4f:1f:ee:ab:db:ca:84:d5:1e:65:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:BD:E2:49:8D:9D:57:A6:34:7B:4C:89:52:80:3E:BE:D0:0B:C5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS61142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:850::/44
Signature Algorithm: sha256WithRSAEncryption
52:d1:9a:52:ae:cf:5e:df:85:ae:ab:6d:b7:fb:e0:e2:25:d2:
f0:d9:c8:75:8a:03:a0:40:24:8c:f6:6a:fc:c1:d0:46:41:ce:
94:bc:88:93:87:2e:9b:4c:11:17:f6:8c:5e:d7:8f:48:4d:f7:
a4:8a:9e:96:f0:84:a0:c1:9f:88:39:e2:9c:06:b7:f2:7a:ee:
8e:5b:fc:38:4e:8a:0f:d5:b1:47:dd:d6:95:82:1c:d3:97:97:
3f:95:d8:6f:e8:d0:a4:86:92:70:e2:9e:b5:15:d3:8e:97:03:
0b:7b:39:5e:c3:a7:5a:ea:41:9f:6c:ee:12:31:99:f2:79:61:
db:22:e9:51:ef:ff:36:db:21:36:84:64:16:ab:32:5c:85:a6:
aa:b1:8f:d6:2d:24:ab:97:28:a7:59:93:98:31:75:d5:6e:ad:
59:d7:72:7e:d7:5d:78:37:9b:c3:c1:01:fc:08:e8:24:22:15:
93:5e:c8:f1:6e:06:28:63:21:ab:8d:84:9f:98:0a:bc:9f:a7:
e1:c2:ef:6c:41:78:60:e2:d8:90:10:7a:b7:1d:c3:af:bb:2f:
ba:7c:c9:86:df:4b:97:3c:09:1d:bc:94:94:a1:81:7e:37:04:
f6:d7:1d:e4:82:19:63:73:8b:c1:7d:51:76:aa:5e:be:97:96:
69:bd:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:23 2025 by rpki-client