Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: JbZEeoYg/bek+0nbzaqAvYbhDGKPESGnBMpdaTW80lc=
Subject key identifier: 5D:0E:6B:B9:BE:B2:7A:99:A4:8A:49:44:52:74:8D:16:11:77:D4:3B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20C6E2D9F3E96611508B78283245A8311B7069C8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
Signing time: Thu 05 Jun 2025 19:22:23 +0000
ROA not before: Thu 05 Jun 2025 19:17:23 +0000
ROA not after: Thu 04 Jun 2026 19:22:23 +0000
asID: 19318
IP address blocks: 146.103.11.0/24 maxlen: 24
150.241.203.0/24 maxlen: 24
155.117.254.0/23 maxlen: 24
167.148.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c6:e2:d9:f3:e9:66:11:50:8b:78:28:32:45:a8:31:1b:70:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 19:17:23 2025 GMT
Not After : Jun 4 19:22:23 2026 GMT
Subject: CN=5D0E6BB9BEB27A99A48A494452748D161177D43B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:21:a7:cd:84:80:a3:ef:b9:3e:aa:4b:da:
03:53:23:46:5a:11:3c:5d:ba:21:2d:ec:77:e2:f2:
fa:6d:ed:f8:00:76:cf:70:69:a7:7d:6c:c5:96:8f:
27:2f:4e:f0:79:85:fc:37:d0:18:9a:5c:93:ce:c2:
59:44:c7:5c:31:99:d5:50:bc:44:e0:1f:f3:92:fd:
ba:16:55:6e:b8:2a:5e:38:f3:67:28:c3:d0:55:95:
09:00:bc:f9:e2:45:91:75:08:8e:74:1f:1e:7a:89:
b3:24:73:f3:ea:0b:cd:c1:94:71:0b:6a:0c:66:4c:
0c:17:9c:c1:80:12:93:d8:89:a0:a6:81:da:2c:e0:
9f:69:40:c9:c0:c1:4f:e1:76:ed:0d:d7:43:c1:b3:
a3:94:87:06:f1:d2:dc:7c:a8:30:64:d3:e4:30:15:
f5:d9:c3:d8:42:93:4e:43:54:b7:ea:72:a2:ea:0c:
f4:d3:0b:bd:97:4e:82:5a:b9:66:ea:44:05:ee:f9:
00:dc:8e:23:26:28:3e:57:92:67:08:84:0d:a3:da:
80:b6:33:a9:03:8d:f8:48:1b:c4:8f:24:b6:bc:d3:
03:6f:52:58:2e:22:c4:8c:1a:06:9f:fd:09:0a:6f:
8d:8f:63:bd:ea:d3:36:bf:27:b6:31:49:ee:28:6c:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0E:6B:B9:BE:B2:7A:99:A4:8A:49:44:52:74:8D:16:11:77:D4:3B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.11.0/24
150.241.203.0/24
155.117.254.0/23
167.148.80.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:d7:c9:2e:54:c0:33:f2:01:dd:ba:67:ba:a8:26:0e:19:d2:
ea:01:15:ed:8b:90:98:18:7e:db:8c:69:ec:70:1b:82:af:e0:
86:ee:8c:4a:36:3e:7c:18:9f:8a:43:3b:c0:e1:80:a3:e1:0b:
8d:8d:c5:2f:3a:31:41:a2:83:be:03:b3:52:38:50:c1:6a:11:
ae:c0:f6:60:63:2e:eb:de:38:7b:2d:87:32:cd:e2:22:06:f9:
df:e1:68:83:29:b4:cd:32:1f:46:c6:6c:aa:2c:0e:f9:cd:83:
25:98:92:f4:43:ba:f0:81:7b:f3:84:ca:1a:d2:e1:76:73:a5:
69:5c:a6:78:5a:01:e7:b1:da:d9:f2:d5:a4:55:19:c3:a3:97:
ad:ef:78:0b:09:75:e4:86:55:6e:b2:3f:08:8c:e5:7b:8d:40:
83:50:18:6e:d5:aa:6e:40:6d:bc:5c:3c:f0:46:ab:87:aa:ad:
29:06:79:2f:df:76:b6:6b:55:42:9f:0a:ca:1a:25:4c:15:71:
35:e3:53:ef:74:88:df:92:5a:e5:77:7b:16:c5:26:2d:2e:65:
df:5a:3c:5a:15:81:e6:b1:89:f1:80:d3:e9:16:d4:4f:dd:6c:
2e:62:a3:ae:d2:ad:bd:99:2f:2a:ef:b1:8b:3e:44:e6:4c:24:
08:f6:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:59:24 2025 by rpki-client