Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: wEGZdWVoMdNisukWJBs9cUJcWZFhUq+L0lPVQFHE8L4=
Subject key identifier: 37:96:5A:9C:44:D9:24:8D:0B:07:6A:87:38:92:2F:FB:3D:60:A9:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 48140582F8ED66721BCFECE26FFCB337C9D8CEB6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
Signing time: Wed 07 May 2025 13:18:10 +0000
ROA not before: Wed 07 May 2025 13:13:10 +0000
ROA not after: Wed 06 May 2026 13:18:10 +0000
asID: 19318
IP address blocks: 146.103.11.0/24 maxlen: 24
150.241.203.0/24 maxlen: 24
155.117.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:14:05:82:f8:ed:66:72:1b:cf:ec:e2:6f:fc:b3:37:c9:d8:ce:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 7 13:13:10 2025 GMT
Not After : May 6 13:18:10 2026 GMT
Subject: CN=37965A9C44D9248D0B076A8738922FFB3D60A980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:51:00:5e:df:8b:f5:1d:ac:a9:d8:a2:22:
ad:6c:23:17:40:d7:26:a0:c4:63:8a:f7:72:13:aa:
8b:5a:dc:bd:87:16:62:eb:01:4e:d0:f1:ac:b5:96:
b2:07:c9:59:65:6f:a9:e2:1a:00:71:4f:15:07:31:
ea:19:a9:93:9d:b8:cc:db:86:68:a3:13:32:d4:be:
6b:25:6b:23:81:ed:eb:3c:b4:8c:88:e9:90:26:dc:
ba:ff:da:06:6d:79:d2:43:55:cc:8c:4d:b6:c1:72:
88:f4:af:a3:1c:e4:50:ed:1e:f6:80:20:e1:60:5d:
16:5f:6a:b0:c2:32:b9:49:4c:30:59:b0:e1:ac:7f:
7e:7c:2a:aa:f2:d8:b5:62:ab:13:50:74:67:6d:bc:
da:bd:62:6e:bc:da:e3:9e:ee:98:79:99:78:fc:74:
77:d7:d5:0d:fa:22:73:32:57:16:a0:c2:8f:49:94:
1d:5b:e1:ea:15:b6:08:6d:11:66:11:35:1e:38:25:
d3:e8:77:a3:38:f4:b6:dd:e8:3e:74:11:22:c8:c1:
8e:0c:4e:c6:0f:7c:e7:ce:82:69:87:23:a3:16:bd:
15:be:9a:6f:78:be:9c:db:be:86:e0:99:a9:64:4d:
03:96:1f:88:53:f8:5b:c9:da:a7:41:3d:28:f5:d4:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:5A:9C:44:D9:24:8D:0B:07:6A:87:38:92:2F:FB:3D:60:A9:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.11.0/24
150.241.203.0/24
155.117.254.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:fb:4e:a1:c1:e1:e5:03:70:02:58:91:cd:ad:5d:3e:39:6d:
0f:8a:93:b0:17:9c:9c:3b:5c:6b:c8:8e:f4:33:54:c7:a0:02:
82:0b:fe:ed:71:b6:40:ee:30:3f:ef:4e:f6:f4:a1:ae:01:0f:
71:4f:9e:5d:a6:68:e6:b8:db:42:7c:bf:ff:cf:51:b6:fa:fb:
5f:91:e7:ca:84:7d:08:d9:18:8e:78:02:f1:85:40:c3:c2:f1:
26:4e:a6:de:0d:cb:f8:48:77:a5:8b:fa:23:c5:d9:fb:e6:b3:
47:0e:3a:c2:3c:af:04:90:5e:24:1e:23:ce:ca:96:ac:7c:16:
c2:db:88:27:f2:17:18:af:f4:fa:e2:7a:04:41:25:43:dd:fd:
74:c2:c4:3a:36:4d:04:29:17:8d:e3:90:a6:77:76:22:aa:0e:
d8:26:27:ea:70:cd:d8:1b:ed:7f:a5:da:48:b4:ce:0e:77:e6:
d9:5c:71:e4:2b:42:7a:51:e9:d6:40:70:b6:fa:80:a0:32:b0:
46:3e:12:2f:b2:d4:f3:67:c3:a0:5e:78:cc:e2:fa:70:1c:2e:
57:7d:98:29:fe:ef:16:ff:ad:90:97:90:dc:1e:db:0f:34:68:
0f:49:93:0c:da:75:3c:27:9b:5f:8d:9d:db:ea:d0:53:52:99:
fc:d0:b2:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 10 08:20:57 2025 by rpki-client