Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
File: AS18345.roa (raw, json)
Hash identifier: eK4GZwjnTH4VUQr6HMLhMimucIz7wCpFlLQDU2M6xEo=
Subject key identifier: FD:16:76:B3:1D:92:1F:04:4D:77:D0:77:AB:27:16:4D:AF:96:59:77
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 53E8826DA6A1DF5E2E7DBF3672FB4E4B02B9C864
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
Signing time: Wed 31 Jan 2024 08:05:11 +0000
ROA not before: Wed 31 Jan 2024 08:00:11 +0000
ROA not after: Wed 29 Jan 2025 08:05:11 +0000
asID: 18345
IP address blocks: 181.214.23.0/24 maxlen: 24
181.214.51.0/24 maxlen: 24
181.214.104.0/24 maxlen: 24
181.214.199.0/24 maxlen: 24
181.214.215.0/24 maxlen: 24
191.101.210.0/24 maxlen: 24
191.101.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e8:82:6d:a6:a1:df:5e:2e:7d:bf:36:72:fb:4e:4b:02:b9:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:11 2024 GMT
Not After : Jan 29 08:05:11 2025 GMT
Subject: CN=FD1676B31D921F044D77D077AB27164DAF965977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:29:bc:db:50:a3:06:c4:0f:58:2f:5b:93:
51:29:76:e0:55:ac:66:63:43:c9:ed:c2:f9:90:65:
ea:46:d4:ee:05:84:eb:e6:38:c2:33:7f:36:fc:0c:
31:6b:0b:f0:9f:d7:8e:d4:79:3f:47:ab:8b:e3:f5:
94:27:39:e5:b4:20:10:94:b2:2d:8b:a7:57:59:f3:
34:e8:89:e0:b6:31:8a:4a:ec:39:b3:d6:a8:21:20:
d9:21:26:b4:46:e6:83:44:6f:bb:72:b3:bf:3b:7b:
bd:e5:c0:cc:e9:ff:2d:46:3e:ad:af:b1:58:0e:97:
03:75:d1:be:98:e9:77:6b:6d:bf:32:f7:32:31:d2:
51:59:8a:e1:58:9e:1c:d8:f5:f9:ec:90:20:b2:a5:
24:1c:b4:6c:00:b9:21:1a:b5:29:a4:35:14:13:7a:
4d:8e:4e:01:5a:c3:e7:9a:bf:d5:38:93:29:88:57:
c6:c6:ce:a2:c5:c8:5d:5b:a1:2f:8a:53:14:f6:fd:
cb:e2:12:d5:bf:91:2b:df:0e:e8:2b:6b:34:74:61:
b2:19:65:53:a5:82:f3:78:ee:92:2c:c1:c5:75:74:
eb:a7:3b:a4:ff:73:69:d0:e6:f7:a4:0f:e8:59:65:
8b:f9:c8:64:fa:81:7b:67:be:33:0f:81:64:87:b4:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:76:B3:1D:92:1F:04:4D:77:D0:77:AB:27:16:4D:AF:96:59:77
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.23.0/24
181.214.51.0/24
181.214.104.0/24
181.214.199.0/24
181.214.215.0/24
191.101.210.0/23
Signature Algorithm: sha256WithRSAEncryption
76:65:07:96:0b:77:64:49:aa:42:1e:6b:07:01:e2:00:9b:91:
af:46:c5:55:8d:41:ef:82:b6:08:d1:6c:87:6d:73:e1:97:c8:
04:53:94:84:ef:6e:ee:f9:66:dc:1b:56:9c:7c:ca:85:66:c6:
33:bf:85:00:0a:9d:31:2e:f4:5b:70:10:c7:ed:04:45:b2:de:
d1:a8:c3:f5:e3:5b:ff:8f:98:cf:4f:90:1d:9b:5a:70:a4:f2:
fd:89:14:c6:02:71:76:2e:f1:00:0f:1e:10:91:af:84:82:21:
16:eb:01:73:ea:9a:42:0b:f2:f0:1c:69:6b:da:b9:41:d0:96:
44:8d:ef:88:66:52:4e:67:d1:8e:de:83:3b:a1:d7:9f:cc:23:
bb:ce:e0:29:72:0d:42:38:70:cb:8f:b4:81:8e:6e:2e:be:aa:
c7:84:51:7f:d1:d3:8b:5c:27:8e:36:60:cc:5b:26:b6:d1:9d:
cb:5f:6a:0b:c6:c3:d1:96:9a:be:fa:3c:b9:ea:c2:09:bb:16:
23:f1:ab:d2:68:58:44:54:8b:6d:43:a8:59:bc:3b:86:a0:90:
d4:9b:90:7a:f9:e0:11:23:0c:b0:26:be:b8:14:e7:c4:f4:53:
55:9c:95:8e:fd:98:7e:dc:b2:c8:ba:89:83:21:5e:98:d3:0d:
20:8e:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 02:01:21 2024 by rpki-client on console-ams.rpki-client.org