Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: MQ2INB979xPYgX84Amb1sgGmYmL9IiA3JZVJttdeY/A=
Subject key identifier: A4:04:F7:B5:11:62:B4:0C:09:6E:F9:32:43:92:78:1E:5F:B8:27:E0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3C50E5DEC0594809C40A5FFFC9EDC18C1A5C05A5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Mon 25 Nov 2024 07:53:20 +0000
ROA not before: Mon 25 Nov 2024 07:48:20 +0000
ROA not after: Mon 24 Nov 2025 07:53:20 +0000
asID: 14618
IP address blocks: 46.203.168.0/21 maxlen: 24
46.203.176.0/21 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.63.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:50:e5:de:c0:59:48:09:c4:0a:5f:ff:c9:ed:c1:8c:1a:5c:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 25 07:48:20 2024 GMT
Not After : Nov 24 07:53:20 2025 GMT
Subject: CN=A404F7B51162B40C096EF9324392781E5FB827E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:a4:73:52:24:21:86:03:6b:6d:48:d3:73:
21:a7:16:a8:b5:1b:cc:f7:ec:dc:49:54:73:32:b4:
67:8b:4e:48:c6:6b:d3:bd:48:6e:ae:13:56:bd:48:
5f:a7:2b:a7:5d:c3:f8:9a:a5:86:7e:86:bd:3b:9f:
e3:7e:94:83:3b:d6:bb:c3:9f:ff:84:e1:f7:d0:74:
b8:19:2a:88:e9:79:40:ef:ec:fc:d7:48:5d:9e:37:
9b:7a:e5:ed:5a:b7:aa:93:46:b7:f7:28:95:19:0a:
b6:b6:9e:78:c4:c7:b3:b8:e3:54:97:8f:95:13:5b:
58:5f:19:2b:68:c6:5b:6c:8d:f8:c9:dc:0a:b9:95:
d8:ca:9b:06:db:3d:58:e4:12:f8:53:68:97:60:ad:
e4:15:d6:c4:56:50:46:ac:ad:b4:0e:bc:6b:87:7d:
b9:41:df:56:22:ad:17:33:8e:0f:8a:c6:66:98:27:
fc:2a:7c:36:6f:3f:db:bc:3a:42:d7:f7:bf:75:94:
db:ac:7a:b6:02:bf:f3:69:a8:c0:89:79:98:a3:2a:
2d:b9:42:d5:4e:29:0c:2d:c3:f7:4f:b2:eb:2d:ed:
49:c9:60:f1:4f:16:ea:ba:bf:4d:a9:6f:a9:75:3b:
15:ce:2f:d6:1c:dc:25:ec:2a:cf:e9:51:62:51:3a:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:04:F7:B5:11:62:B4:0C:09:6E:F9:32:43:92:78:1E:5F:B8:27:E0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.168.0-46.203.183.255
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.61.0/24
92.112.63.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
Signature Algorithm: sha256WithRSAEncryption
44:2f:04:fe:6e:79:a5:36:aa:8d:af:6e:aa:23:2b:6d:2a:20:
9d:1b:1a:5a:a9:69:f3:0e:5f:9a:ce:a8:2a:66:eb:68:4e:77:
a2:53:ce:42:d9:39:6f:2d:e8:fd:d3:06:a2:a3:b6:95:86:3c:
64:2f:74:85:b5:34:42:a0:fd:89:2a:08:6b:fa:d4:85:ab:43:
ae:ea:8b:2d:97:f6:66:25:c8:58:9f:0f:9e:9d:ee:38:05:67:
46:68:3a:a4:a1:e8:38:f0:e6:3c:79:69:b9:9e:56:66:4b:ca:
95:a6:6d:cc:3e:7e:b5:6d:73:f6:af:8b:85:36:1e:37:2f:45:
4c:4d:46:5c:c8:74:3a:cd:8a:c0:61:15:bb:77:fc:c9:8e:2a:
ea:91:dd:bf:8c:c1:0f:62:41:8b:cd:39:34:4f:40:29:96:55:
65:56:6d:05:57:cb:57:b3:59:3a:bc:5d:61:39:79:35:b3:e4:
e0:3e:39:31:3b:d8:09:69:2c:dd:7f:30:93:3b:2d:5c:f8:ca:
26:1f:e1:22:37:d3:0a:54:9d:50:b5:c9:f4:99:ba:7e:ad:31:
73:bf:61:de:57:40:6f:98:d5:20:14:1b:e7:41:a2:15:1e:11:
4f:7d:f3:c3:53:ef:7a:2f:5c:ff:c9:43:6c:a1:e1:8c:7d:ab:
b7:34:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:12 2025 by rpki-client