Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
File: AS18186.roa (raw, json)
Hash identifier: zQXDzTRpiPtKXM2dZPvOOqb6B88s+3wZTH9M9nRXjJ8=
Subject key identifier: BE:60:65:27:0C:B4:81:1F:DC:54:8E:5A:BA:1C:C3:DA:18:4E:BE:D1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2DFDC409F54A7449D940E92F10C2FFBC5EA9DD33
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
Signing time: Tue 27 May 2025 12:03:42 +0000
ROA not before: Tue 27 May 2025 11:58:42 +0000
ROA not after: Tue 26 May 2026 12:03:42 +0000
asID: 18186
IP address blocks: 96.62.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fd:c4:09:f5:4a:74:49:d9:40:e9:2f:10:c2:ff:bc:5e:a9:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 11:58:42 2025 GMT
Not After : May 26 12:03:42 2026 GMT
Subject: CN=BE6065270CB4811FDC548E5ABA1CC3DA184EBED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:f1:f2:d8:ed:79:87:76:cb:a5:6f:5a:ab:
34:82:db:da:3b:0a:28:94:b7:37:f2:2d:45:a4:05:
0d:09:69:fc:5b:c9:e0:ee:a7:5d:c4:ee:7c:0f:52:
1c:0c:a9:2a:d4:14:e2:0d:f9:46:0e:66:22:6c:98:
51:b7:e8:a9:93:37:bf:09:87:3f:32:b1:03:93:7f:
da:5d:2d:bc:43:36:da:c2:46:fa:e0:de:07:f4:8a:
ec:94:32:3b:60:76:25:17:6d:31:eb:25:ab:7f:92:
dd:e1:b8:43:38:f6:2f:f9:9f:a3:8f:52:9a:ef:45:
b9:fc:e7:eb:d6:7b:80:95:83:01:2a:f0:f0:9f:a6:
f5:d3:4c:d2:5d:3c:a6:b5:00:74:29:28:b4:e0:b5:
94:1f:ec:a0:3e:d1:9b:88:e0:70:e8:ab:16:92:35:
99:78:f5:06:c9:e0:8d:35:49:73:90:f9:1d:9e:cf:
27:a7:aa:d0:be:79:61:2c:ae:9c:d6:c9:ba:33:8b:
d7:20:3b:37:7f:ed:41:78:09:dd:77:c0:76:72:c9:
d5:bd:46:82:5a:50:6b:00:aa:45:94:45:aa:b4:be:
e3:01:15:d7:3a:39:44:61:a9:4b:fa:e8:44:84:41:
50:4d:aa:66:72:32:59:4d:4c:18:a8:14:d0:de:5f:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:65:27:0C:B4:81:1F:DC:54:8E:5A:BA:1C:C3:DA:18:4E:BE:D1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.222.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ab:cf:99:eb:b6:60:ce:5f:a5:3f:92:42:a9:02:93:22:b3:
f9:2a:5b:6e:5c:c2:97:28:de:3e:10:0a:dd:a9:36:96:c2:0d:
ff:82:7a:63:3e:c0:df:fa:9d:a0:80:d5:94:da:65:df:33:14:
5a:0f:b0:6b:b0:b4:c6:0c:53:c0:ca:ef:ba:ac:de:92:61:ae:
3e:f7:94:20:c0:05:7a:f6:1d:c7:19:20:ef:f4:9f:05:20:7b:
4d:fd:a9:29:e7:5a:f1:d8:da:61:bb:eb:59:5e:c1:6d:4d:05:
a5:b8:9e:7d:40:b1:00:dd:98:3d:89:33:4c:0b:24:0d:8e:60:
eb:ce:1e:70:16:78:cf:d5:45:d3:f2:8f:99:3f:8d:58:f7:2a:
4a:bf:78:d3:77:af:0f:c7:78:ca:a8:44:79:0f:6a:57:35:04:
2f:83:5b:6d:f0:3b:4b:84:d7:b0:1b:e2:c5:ca:c5:5a:62:0c:
ac:6e:f1:48:ce:3d:b1:6d:4e:50:fe:69:e5:06:e4:24:a1:52:
43:87:7a:5e:a4:36:a4:bc:ee:a7:80:79:55:de:28:c0:0e:34:
11:ad:a3:e1:e4:16:37:44:b7:a6:aa:f4:f9:0d:00:d2:2c:38:
38:65:31:b7:81:e1:fd:29:d4:60:d1:3e:53:67:d6:62:12:88:
a1:bc:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:09 2025 by rpki-client