Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: pojJ5KrccFM0o3/9bWX3ytdHzGSIo4NIpZRDI2SlN6g=
Subject key identifier: 7F:6E:89:0A:6C:35:1B:07:BB:E6:32:5E:60:08:EE:CF:FD:B6:24:39
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 498F1ECC0E53F963A383EDB16A9D89C4BA16C298
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
Signing time: Fri 20 Jun 2025 09:35:09 +0000
ROA not before: Fri 20 Jun 2025 09:30:09 +0000
ROA not after: Fri 19 Jun 2026 09:35:09 +0000
asID: 18811
IP address blocks: 178.92.0.0/22 maxlen: 24
178.92.8.0/22 maxlen: 24
178.92.16.0/22 maxlen: 24
178.92.24.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.92.64.0/22 maxlen: 24
178.92.72.0/22 maxlen: 24
178.92.80.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
178.95.0.0/22 maxlen: 24
178.95.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:1e:cc:0e:53:f9:63:a3:83:ed:b1:6a:9d:89:c4:ba:16:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 20 09:30:09 2025 GMT
Not After : Jun 19 09:35:09 2026 GMT
Subject: CN=7F6E890A6C351B07BBE6325E6008EECFFDB62439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:c7:88:d5:62:58:e5:b7:a3:95:c1:4c:b5:
66:9a:62:90:a1:8b:f1:fb:ad:49:b8:78:1c:0d:23:
db:e1:b7:db:39:b1:cc:e6:bf:a9:42:64:ee:ca:23:
c2:3d:e0:04:9f:99:fd:31:ce:df:c1:4d:45:51:f2:
6b:d1:9c:f0:21:fb:98:41:ff:4f:0d:4e:3d:2f:22:
bb:23:13:b5:df:59:70:7a:27:21:dc:30:71:0b:20:
8a:db:0a:a1:b5:69:1e:f3:b4:d9:fb:fd:f0:f0:df:
3c:d8:17:34:7e:05:7f:eb:39:00:b4:f1:cc:a2:23:
99:3c:9a:b6:f6:fc:a2:51:27:d1:4d:05:5d:6c:99:
60:bf:67:93:ac:87:58:de:5f:6e:81:27:18:07:1f:
5f:49:f2:82:1a:67:00:a8:45:24:b3:84:f4:86:56:
01:2a:9d:09:e8:b8:5e:16:d2:69:0c:ef:11:ec:21:
91:6e:6d:08:5e:9b:7b:8f:1e:eb:ed:54:df:cf:c1:
8a:f5:c8:41:89:92:94:e8:c4:b3:70:33:e5:5c:b6:
db:41:9c:db:e0:96:4a:68:22:aa:47:5a:95:5e:9c:
74:d0:da:7f:94:da:cf:a9:c8:de:26:c3:e4:f0:3c:
d8:52:3d:7c:b9:11:dc:c0:51:44:d9:05:51:ba:77:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:89:0A:6C:35:1B:07:BB:E6:32:5E:60:08:EE:CF:FD:B6:24:39
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.0.0/22
178.92.8.0/22
178.92.16.0/22
178.92.24.0/22
178.92.36.0/22
178.92.64.0/22
178.92.72.0/22
178.92.80.0/22
178.93.0.0/22
178.95.0.0/22
178.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:08:8f:b3:ab:d6:21:f6:58:10:f2:5a:8f:8c:5e:a8:dc:90:
f0:a9:d7:a7:85:dd:74:62:80:ea:1b:c3:00:38:ba:63:95:da:
51:64:eb:de:13:42:fb:01:4a:a6:f4:53:f9:ce:c6:ca:76:31:
ec:46:d7:8b:77:1d:96:70:bd:d8:53:52:b2:b3:37:58:0a:46:
6c:8e:18:5d:97:fa:e4:21:42:da:1e:a1:35:99:2d:91:02:21:
ce:d6:12:0e:5b:71:78:a6:38:5b:6a:b5:29:4c:bb:75:92:da:
10:c0:30:98:87:6e:db:e2:bc:01:bd:20:e2:77:92:fb:78:e1:
72:10:b9:69:82:40:1c:fe:63:75:f1:e4:e2:af:fc:52:84:fe:
17:5f:9e:6d:e8:09:c5:ad:6a:e9:c8:ce:70:94:e7:42:0b:39:
87:b8:7c:15:be:27:eb:d7:c6:48:be:fc:c2:c0:9a:42:85:c8:
e1:b3:a0:05:99:15:04:ab:f1:0d:f1:5f:c5:f3:f7:1a:39:3e:
14:06:f2:51:82:36:df:82:73:d2:d4:3a:d7:d7:4d:00:b5:1f:
cb:95:fa:ec:31:df:e5:72:0b:10:39:e6:4f:39:7e:c0:16:36:
b9:24:d4:56:dd:d7:9c:4f:4f:cd:7f:ed:8e:9e:b3:94:da:6e:
a3:7f:be:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:33:16 2025 by rpki-client