Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60894.roa
File: AS60894.roa (raw, json)
Hash identifier: vlRI+hJUaSbAPY8/23SLxdJW88nN03GoujEULhBvPG4=
Subject key identifier: 7D:C4:74:32:74:BE:2E:7B:51:8E:5F:75:56:A3:49:46:D3:4F:85:7A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5A524EB329372BD52F0396B89D47031DC817FBD9
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60894.roa
Signing time: Mon 16 Jun 2025 16:55:35 +0000
ROA not before: Mon 16 Jun 2025 16:50:35 +0000
ROA not after: Mon 15 Jun 2026 16:55:35 +0000
asID: 60894
IP address blocks: 143.20.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:52:4e:b3:29:37:2b:d5:2f:03:96:b8:9d:47:03:1d:c8:17:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 16 16:50:35 2025 GMT
Not After : Jun 15 16:55:35 2026 GMT
Subject: CN=7DC4743274BE2E7B518E5F7556A34946D34F857A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:67:6a:5b:df:35:b8:76:c0:69:e2:2d:9e:
4a:fa:ad:ed:2b:ea:45:1f:3a:c8:13:3e:10:d9:ff:
61:fb:a2:e0:4e:20:7b:68:16:27:4b:34:5d:d3:39:
02:43:d6:da:29:58:00:1e:3a:e6:60:3f:15:07:bd:
16:b7:f8:af:be:d9:98:88:96:c6:62:93:6f:a7:cc:
18:4e:2f:ce:e1:75:7b:ca:22:5b:2e:97:f0:83:bb:
8c:d5:fd:20:f8:a6:20:22:de:e9:f0:e7:d1:41:bf:
a9:7f:0e:93:58:6a:3d:04:e8:f9:b6:76:2b:0c:b0:
48:2d:fa:95:04:7d:59:70:2e:f3:d6:94:97:40:c0:
39:cf:3b:06:cb:20:8c:e2:f9:3a:0a:39:a5:bd:73:
70:bb:fa:5f:1a:6b:55:02:30:0a:10:83:35:0e:08:
f2:e8:26:76:8f:3d:8d:ad:91:62:1a:fb:ea:04:de:
ca:3e:ee:26:f1:72:13:ca:f2:81:4f:99:23:b7:60:
63:69:a0:ea:ea:4c:6c:74:8f:46:e8:3a:46:3c:0c:
76:5e:ef:79:17:fd:71:4b:e7:be:31:db:70:0f:2a:
11:a7:d8:8c:b7:d7:5d:4f:07:fb:b7:62:34:b6:0b:
c4:34:54:ff:32:5e:bc:00:75:dd:00:c2:8a:eb:a1:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:74:32:74:BE:2E:7B:51:8E:5F:75:56:A3:49:46:D3:4F:85:7A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60894.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d6:64:bd:8d:1f:d3:e1:fd:84:07:31:a3:ed:14:74:23:d6:
c6:d8:b8:18:1d:d3:ef:2e:21:82:af:6e:bb:1f:43:02:33:10:
86:bc:30:98:ac:4f:e7:11:82:9c:c8:85:e5:13:71:03:7e:c5:
54:c8:5f:24:f0:12:cc:e5:88:3f:c3:14:f3:94:b9:42:07:2a:
24:c7:54:e4:f2:64:3a:3e:4b:69:37:53:b2:01:a3:34:96:c0:
a2:ca:71:1d:9e:22:27:b2:d9:5d:98:7e:2c:48:87:28:8e:5e:
5f:63:9e:a0:fc:e9:8f:a0:d0:d0:ba:8a:ae:eb:08:0f:21:8a:
c7:ac:a4:0b:02:bd:f6:c3:f8:92:42:28:28:0e:b7:7f:45:fb:
f1:f3:bd:88:5c:79:a3:56:ff:c5:33:aa:4a:42:aa:e8:29:57:
20:40:1d:17:65:52:36:14:c0:56:ce:9d:50:3d:be:b8:d1:86:
3f:36:85:32:33:65:25:fe:e5:b4:cc:f0:a5:e4:9a:57:71:e9:
58:48:80:0c:a1:3b:50:eb:b3:24:a9:06:ee:90:8d:79:1e:75:
b4:33:af:22:e7:e1:b0:57:b9:d1:8b:42:8a:0b:ee:d1:0b:8f:
bb:09:50:21:b5:44:5d:e7:a0:76:a4:21:14:bf:98:25:be:f5:
22:60:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:54 2025 by rpki-client