Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: MeJpyZecj8DZxBaG9JJG0yqBve1nqJ7kYM313rzvXXg=
Subject key identifier: 37:02:4B:B0:D0:C9:A3:B2:32:3A:B1:75:A1:4F:1E:32:8A:03:04:D9
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7E5F74BDA468164063F0DFE9253CEC9BF8037361
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7018.roa
Signing time: Mon 27 Nov 2023 22:21:34 +0000
ROA not before: Mon 27 Nov 2023 22:16:34 +0000
ROA not after: Mon 25 Nov 2024 22:21:34 +0000
asID: 7018
IP address blocks: 141.11.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5f:74:bd:a4:68:16:40:63:f0:df:e9:25:3c:ec:9b:f8:03:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 27 22:16:34 2023 GMT
Not After : Nov 25 22:21:34 2024 GMT
Subject: CN=37024BB0D0C9A3B2323AB175A14F1E328A0304D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:90:c5:56:cf:db:40:91:6d:fe:fd:ff:61:
f9:e5:e3:db:c2:78:3a:6c:b9:31:71:75:c2:f3:38:
53:76:d4:bc:c7:b1:6d:1d:49:5a:23:b5:19:4d:9b:
f6:1e:98:22:7d:e8:41:dc:c7:a3:18:2e:a6:d2:45:
75:49:65:ec:8b:a7:a1:e7:05:bb:6d:5e:ba:dd:70:
46:28:3b:fc:9d:4c:50:32:64:c2:f9:94:dd:b5:bb:
ca:70:d6:33:ee:ce:f3:2a:20:bc:14:64:95:14:2b:
90:f7:d2:df:28:a6:f5:fb:08:98:66:50:c0:f8:d9:
d1:ab:c8:12:73:c2:db:9a:03:db:7b:dd:cc:d3:33:
37:eb:3e:13:68:91:77:45:94:0e:08:9f:e7:d9:b2:
4e:61:d2:6b:9d:a9:bc:95:dc:b7:e0:67:34:e2:30:
0e:b4:d1:19:d4:1e:2d:d1:59:bb:f2:96:b6:de:56:
62:60:47:97:89:ef:f5:96:25:1c:df:db:5a:98:4a:
cc:6d:14:8a:ec:85:e2:df:97:36:4d:0a:64:bb:d8:
28:16:1e:c4:7c:d9:fb:84:3e:6a:11:62:b5:8d:44:
b9:83:3f:8a:58:a0:95:fc:e2:b8:55:d0:3b:ae:50:
c0:74:4f:07:20:51:b0:f1:49:cb:51:1d:45:1c:d8:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:4B:B0:D0:C9:A3:B2:32:3A:B1:75:A1:4F:1E:32:8A:03:04:D9
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a9:87:e6:26:0a:27:5a:6f:4a:dd:f9:ac:1e:53:31:46:75:
b1:05:df:57:d7:5d:24:50:a3:7e:04:e2:d6:e4:91:dd:da:34:
24:55:97:5c:23:02:62:f1:e6:a7:38:8c:69:b6:ae:ca:34:d8:
20:78:80:14:db:f5:39:6c:36:d9:64:5f:f8:fc:dc:c3:a7:37:
81:59:f8:63:d3:3f:a0:5e:a0:8b:97:02:72:0d:d4:32:68:a5:
0a:f8:02:48:f8:be:bd:dc:c1:a7:24:58:9d:aa:79:39:6b:3e:
d7:3c:10:de:87:fe:9b:dc:0e:b9:b7:7e:97:b6:7e:77:2a:6f:
fa:1e:29:2f:02:ea:b5:92:5e:3b:bc:a2:99:81:02:29:ea:59:
ac:45:f2:e0:a7:07:d0:19:3c:5c:81:09:1d:f1:69:bd:6d:4f:
f8:b5:90:be:b9:71:95:6a:a6:ae:93:ae:5f:32:d5:75:69:58:
5a:17:7b:e8:fe:4f:69:97:c5:e1:29:1a:9f:2b:a9:44:43:5f:
38:34:f8:e1:09:fe:ec:b4:7a:1e:95:49:45:e6:65:3d:4c:1c:
68:85:e6:46:62:8b:f3:19:4f:ee:54:e5:19:bb:42:75:f9:71:
09:2d:4b:26:e5:71:e5:4d:bd:59:31:f8:ed:e4:bd:d0:f9:0b:
c9:54:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org