Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
File: AS18345.roa (raw, json)
Hash identifier: 0yGS+U/y39LDLy5j/d85gifKbIg2dUCoqlfjviH6A3E=
Subject key identifier: 41:32:94:B9:27:B0:C9:C9:CC:C9:44:11:C3:68:22:70:18:53:64:A6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4842DBC0D6FA662CCB95186AB1AE9906102D5326
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
Signing time: Wed 01 Jan 2025 08:53:49 +0000
ROA not before: Wed 01 Jan 2025 08:48:49 +0000
ROA not after: Wed 31 Dec 2025 08:53:49 +0000
asID: 18345
IP address blocks: 181.214.23.0/24 maxlen: 24
181.214.51.0/24 maxlen: 24
181.214.104.0/24 maxlen: 24
181.214.199.0/24 maxlen: 24
181.214.215.0/24 maxlen: 24
191.101.210.0/24 maxlen: 24
191.101.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:42:db:c0:d6:fa:66:2c:cb:95:18:6a:b1:ae:99:06:10:2d:53:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 1 08:48:49 2025 GMT
Not After : Dec 31 08:53:49 2025 GMT
Subject: CN=413294B927B0C9C9CCC94411C3682270185364A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:a8:d2:cd:81:f3:bf:84:33:0c:87:b9:59:
8f:7d:b7:64:91:28:3d:52:eb:a3:79:93:df:91:18:
5f:1f:d1:8b:3a:b9:2e:bd:1e:c1:db:6c:ee:20:20:
09:f7:64:b9:b3:43:47:9e:f2:08:5e:33:db:a2:4f:
fc:59:39:44:58:0e:73:fc:3e:75:9b:f0:6f:bc:a0:
b9:cf:a8:86:6a:b4:43:18:2b:03:5e:a5:ba:b4:67:
43:7c:88:af:7a:21:3c:5b:8b:93:f5:12:77:47:19:
51:d7:81:48:fb:04:af:2b:85:f3:da:a5:4d:87:d1:
2d:5a:92:2a:83:00:02:4f:3f:be:61:79:21:bf:42:
59:f0:6d:28:9a:ba:c4:1b:b9:ef:43:e5:1f:b3:11:
8d:fd:3c:4a:4f:ab:ee:5f:70:5a:c7:6d:ac:3b:e7:
b6:97:6a:7f:47:35:58:a9:95:37:c8:ed:32:78:a5:
f6:e4:9f:c7:82:8a:47:39:d0:dc:d0:22:69:15:1f:
99:04:a9:70:89:b8:a9:fc:30:26:ef:4d:bc:69:b5:
57:64:77:d8:e4:6e:65:ab:7f:2a:9a:13:66:b4:ea:
6c:65:c6:f9:f6:4d:e5:1c:a9:a1:a3:bc:01:b6:20:
23:49:c7:43:d1:aa:47:ef:57:98:2e:c6:a3:a8:d1:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:94:B9:27:B0:C9:C9:CC:C9:44:11:C3:68:22:70:18:53:64:A6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.23.0/24
181.214.51.0/24
181.214.104.0/24
181.214.199.0/24
181.214.215.0/24
191.101.210.0/23
Signature Algorithm: sha256WithRSAEncryption
83:15:9e:8a:32:b5:4e:0f:16:36:f4:3e:12:cf:e7:69:46:2d:
6a:59:9e:a4:08:45:44:1a:55:34:10:12:87:fb:04:4e:3c:16:
90:7c:3e:f3:cc:e4:06:46:71:26:b1:7c:00:73:76:cb:be:32:
77:62:e9:3d:22:aa:48:08:72:f8:b5:d2:2e:ba:a8:70:df:5c:
8d:7e:a3:a6:be:c1:31:81:c9:9e:a1:60:56:90:c3:27:a7:db:
ce:d3:bc:8f:9c:fb:df:b4:21:7d:87:24:1a:26:1d:0a:ab:d7:
38:ea:3b:94:eb:d2:a1:4c:bb:c1:ff:0e:e5:ff:8a:8d:12:26:
e2:37:56:f4:7c:05:2f:42:ef:e4:b2:ac:0c:fd:d7:c8:b8:e9:
f6:5d:d9:e8:ed:b5:bf:6f:e5:52:a9:7e:42:e7:28:32:e0:29:
3d:91:ee:92:98:b4:c5:e4:36:59:fd:8d:74:24:8f:95:01:dc:
af:e7:0f:db:22:75:99:bd:9b:72:d5:63:52:2c:8a:9e:3c:26:
af:74:e5:7c:36:c0:f4:16:1f:0e:39:64:e3:1a:f7:d5:43:9e:
72:80:c1:31:0a:47:75:36:32:75:a6:4d:59:89:51:5c:1f:d1:
35:94:05:e2:f2:90:47:75:f1:0a:eb:d5:2b:2f:4e:24:98:3e:
b2:d8:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:52 2025 by rpki-client