Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61003.roa
File: AS61003.roa (raw, json)
Hash identifier: AV7c9PcbG/MaGE4dEG+O6Rs/Z7njYggKOQy9NwMbXd4=
Subject key identifier: 7B:42:18:F2:F8:56:02:5F:C1:6C:26:E3:BA:77:DF:50:C4:7F:CF:2C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1DAD5B531D4A967B0077E5695489616532FE4B50
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61003.roa
Signing time: Wed 25 Jun 2025 18:51:46 +0000
ROA not before: Wed 25 Jun 2025 18:46:46 +0000
ROA not after: Wed 24 Jun 2026 18:51:46 +0000
asID: 61003
IP address blocks: 91.124.174.0/24 maxlen: 24
95.134.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ad:5b:53:1d:4a:96:7b:00:77:e5:69:54:89:61:65:32:fe:4b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 25 18:46:46 2025 GMT
Not After : Jun 24 18:51:46 2026 GMT
Subject: CN=7B4218F2F856025FC16C26E3BA77DF50C47FCF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:2c:62:15:d5:de:70:b6:4e:03:13:b1:e3:
88:a4:3e:b1:37:68:e4:b6:7f:9e:d7:ac:91:fa:cb:
85:8f:8f:35:4b:5d:7e:68:a4:ff:de:08:45:ed:61:
24:73:4b:ec:b8:d0:69:46:5a:ac:82:88:12:8b:c9:
36:8a:6b:2d:e5:94:f4:99:60:8c:ad:a6:74:91:56:
f6:d6:89:14:2e:cc:b1:bc:7e:fb:9a:db:f9:b0:9d:
a9:51:32:f7:07:e5:25:ef:4a:f2:fd:30:99:0e:dd:
a6:4d:bb:a6:0e:b7:27:ac:28:2b:f6:ec:b9:1d:0e:
ec:07:a8:e0:ad:b1:bb:63:e9:5d:59:a9:5e:54:9e:
e1:88:60:65:cc:d7:15:2a:31:5c:35:28:30:2d:b1:
78:49:5f:4c:cc:7f:a6:7c:3d:9a:8f:d3:3e:97:17:
80:0d:81:9c:26:7a:a7:e7:12:ec:aa:72:07:75:2c:
2c:4b:c6:eb:24:76:56:c6:f4:01:5a:18:26:0d:ba:
12:e6:df:a0:fd:10:a5:d1:19:f8:65:5b:ac:64:87:
03:2e:46:ff:ac:4d:e9:30:fd:e4:64:9f:ad:39:a2:
4c:85:a6:e7:23:2c:bb:72:31:98:a0:78:1b:dc:6a:
f8:99:c0:8f:44:45:e6:36:2e:13:04:64:b3:ce:13:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:18:F2:F8:56:02:5F:C1:6C:26:E3:BA:77:DF:50:C4:7F:CF:2C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.174.0/24
95.134.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f8:e5:4b:62:fc:10:9d:5a:78:54:72:76:26:17:37:df:22:
e3:97:73:e2:22:e3:c9:cf:3b:23:03:63:32:b8:19:2d:9e:85:
a1:62:24:74:60:fc:56:fb:35:df:90:22:69:29:18:71:a6:f1:
0f:04:0e:c9:17:61:63:05:92:d0:7e:35:1f:3c:66:66:2f:d6:
6a:7d:d4:80:23:d7:4d:a0:28:21:99:b0:49:4e:2d:b1:99:78:
35:4c:e4:b2:cc:25:79:9b:e8:f9:00:30:4f:53:07:b5:70:be:
90:46:3c:c2:4a:f6:38:0d:c1:14:cd:d7:fa:f1:32:b7:15:61:
c5:4e:d4:35:7a:d3:eb:c4:45:42:ba:63:91:bf:fb:8a:87:03:
31:4d:f3:f1:d7:a6:73:83:93:1c:7b:e2:37:a4:64:17:db:ca:
4a:50:68:33:d4:fc:cf:8f:5c:d4:d3:24:22:84:dd:44:94:36:
b9:d8:47:86:c4:49:50:38:9f:70:b8:f0:9e:e0:20:9c:13:3b:
55:9e:0b:cf:61:e3:6e:79:c4:25:56:b2:79:8f:14:34:df:28:
9e:6c:de:8c:ea:9b:67:eb:c1:5b:fc:3f:db:53:63:f3:37:4f:
ea:db:90:69:38:33:9f:98:7f:df:a5:0c:66:15:cc:7d:88:4b:
2c:97:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:00:07 2025 by rpki-client