Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: Pq3IGFN4sg93ug5jvA3hdv8IROP3AqDyAKpkPblgQXk=
Subject key identifier: F5:DB:EE:72:E3:D1:1F:51:D9:39:12:C5:AE:45:8A:D6:54:10:1B:A6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1337CF408AD39499BF7E81E23BAF1AF2C9A292CA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Fri 03 May 2024 08:11:56 +0000
ROA not before: Fri 03 May 2024 08:06:56 +0000
ROA not after: Fri 02 May 2025 08:11:56 +0000
asID: 14618
IP address blocks: 45.89.249.0/24 maxlen: 24
191.101.94.0/24 maxlen: 24
191.101.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:37:cf:40:8a:d3:94:99:bf:7e:81:e2:3b:af:1a:f2:c9:a2:92:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 3 08:06:56 2024 GMT
Not After : May 2 08:11:56 2025 GMT
Subject: CN=F5DBEE72E3D11F51D93912C5AE458AD654101BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:c4:36:3b:24:c5:6f:e4:e9:46:24:65:8f:
69:13:c8:09:1f:13:c4:c9:ed:b0:44:b1:ee:25:18:
80:e2:36:c4:f8:9e:5d:a4:30:45:b8:7b:d2:b7:a3:
8c:e2:48:95:93:96:48:ea:77:75:a8:3c:46:b4:4f:
a3:1d:ca:2a:2a:43:88:41:26:db:48:7e:7f:7f:89:
5d:cd:f1:6a:19:40:ff:36:39:a1:ce:90:c3:08:15:
29:6b:bf:c2:a3:f4:ea:ce:af:16:23:a7:0c:98:0a:
5a:b5:07:b9:fc:e6:5a:f4:c6:49:89:12:e4:8c:9d:
e4:b8:8d:e5:e7:3c:06:3b:53:e5:a6:dc:45:79:4f:
ea:af:42:c8:ed:0c:67:d8:e7:fb:66:ae:3a:79:f4:
b0:0d:28:ae:59:0c:de:77:ec:cf:2f:11:14:2f:08:
f5:63:13:48:cb:a3:2a:94:fb:49:af:ee:08:2d:8c:
67:d0:b0:cb:5d:f4:21:de:81:af:57:49:2a:c9:49:
5a:e2:bb:38:80:2d:76:53:ea:7e:b5:65:9b:96:42:
18:c8:56:26:d5:25:e2:33:8a:f3:ef:34:5f:7b:27:
93:14:80:6e:b0:56:83:e2:f6:35:12:2d:17:c3:48:
22:16:f6:29:19:63:1f:59:7c:4f:eb:56:a5:03:a2:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:EE:72:E3:D1:1F:51:D9:39:12:C5:AE:45:8A:D6:54:10:1B:A6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.249.0/24
191.101.94.0/24
191.101.242.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6d:f0:e8:70:6b:04:4d:f3:60:d2:89:fa:1b:1c:6b:45:fe:
0d:aa:60:64:f1:47:53:bd:ab:fe:64:fa:0b:de:e1:a2:38:20:
b8:94:86:a3:ab:f9:25:24:30:79:5a:1f:8e:0b:db:c6:e7:25:
d5:53:52:6e:e1:a7:28:ce:62:89:6b:e0:98:20:a4:c9:e8:bd:
4f:97:35:8c:89:3b:8c:04:6a:b4:59:3d:3b:15:93:91:a7:fb:
42:fb:ca:4a:b1:20:3a:14:5d:f2:e2:6d:37:e0:37:09:15:55:
9c:d8:b9:c3:cf:aa:25:7e:9c:34:4a:2e:7a:8a:de:c1:bf:0b:
96:b4:7f:2d:d5:1d:66:dd:b7:85:96:f7:91:ef:b4:d2:12:a1:
54:9b:a7:d2:81:5f:c1:6f:f5:6a:dd:34:2d:3a:2c:f2:86:a5:
b8:55:96:b2:97:c9:64:f3:5c:01:64:ad:9d:1b:e4:77:e5:1e:
5f:f0:39:99:ef:ae:4d:e4:64:14:02:91:6c:4a:55:78:07:4e:
d5:96:2c:33:95:37:1d:2a:c3:78:a8:b9:85:61:93:b7:99:57:
d5:e4:ad:3c:7b:84:c0:f0:08:c2:5c:6b:23:53:d7:1e:dd:87:
58:f8:4a:04:95:39:77:9a:31:ad:08:f5:16:fc:a5:11:86:95:
2c:bb:ec:fa
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUEzfPQIrTlJm/foHiO68a8smiksowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA1MDMwODA2NTZaFw0yNTA1MDIwODExNTZaMDMxMTAvBgNV
BAMTKEY1REJFRTcyRTNEMTFGNTFEOTM5MTJDNUFFNDU4QUQ2NTQxMDFCQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vsQ2OyTFb+TpRiRlj2kTyAkf
E8TJ7bBEse4lGIDiNsT4nl2kMEW4e9K3o4ziSJWTlkjqd3WoPEa0T6MdyioqQ4hB
JttIfn9/iV3N8WoZQP82OaHOkMMIFSlrv8Kj9OrOrxYjpwyYClq1B7n85lr0xkmJ
EuSMneS4jeXnPAY7U+Wm3EV5T+qvQsjtDGfY5/tmrjp59LANKK5ZDN537M8vERQv
CPVjE0jLoyqU+0mv7ggtjGfQsMtd9CHega9XSSrJSVriuziALXZT6n61ZZuWQhjI
VibVJeIzivPvNF97J5MUgG6wVoPi9jUSLRfDSCIW9ikZYx9ZfE/rVqUDoq0FAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQU9dvucuPRH1HZORLFrkWK1lQQG6YwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAtWfkD
BAC/ZV4DBAC/ZfIwDQYJKoZIhvcNAQELBQADggEBACBt8OhwawRN82DSifobHGtF
/g2qYGTxR1O9q/5k+gve4aI4ILiUhqOr+SUkMHlaH44L28bnJdVTUm7hpyjOYolr
4JggpMnovU+XNYyJO4wEarRZPTsVk5Gn+0L7ykqxIDoUXfLibTfgNwkVVZzYucPP
qiV+nDRKLnqK3sG/C5a0fy3VHWbdt4WW95HvtNISoVSbp9KBX8Fv9WrdNC06LPKG
pbhVlrKXyWTzXAFkrZ0b5HflHl/wOZnvrk3kZBQCkWxKVXgHTtWWLDOVNx0qw3io
uYVhk7eZV9XkrTx7hMDwCMJcayNT1x7dh1j4SgSVOXeaMa0I9Rb8pRGGlSy77Po=
-----END CERTIFICATE-----
Generated at Sun May 5 16:41:19 2024 by rpki-client on console-fra.rpki-client.org