Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: cA4drtNzmxHf8b78eBxzIza0F1KsI1J4QMwuqdQNZfQ=
Subject key identifier: 9B:57:E2:12:28:AD:BB:D4:11:EB:B3:3E:DA:71:72:C5:E0:1D:8D:5A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6B8AB07D2452B4848C1C2FC9CC783CD022946039
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18811.roa
Signing time: Thu 05 Jun 2025 12:56:38 +0000
ROA not before: Thu 05 Jun 2025 12:51:38 +0000
ROA not after: Thu 04 Jun 2026 12:56:38 +0000
asID: 18811
IP address blocks: 155.117.12.0/22 maxlen: 24
155.117.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8a:b0:7d:24:52:b4:84:8c:1c:2f:c9:cc:78:3c:d0:22:94:60:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 12:51:38 2025 GMT
Not After : Jun 4 12:56:38 2026 GMT
Subject: CN=9B57E21228ADBBD411EBB33EDA7172C5E01D8D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:67:d8:3c:a4:11:10:63:a4:bb:f1:2b:e3:
49:7f:90:e2:ca:74:40:75:6a:d1:13:ed:99:c0:c8:
56:69:2b:55:c4:6b:32:52:82:02:c6:05:15:31:c6:
15:6e:b9:80:d6:9a:39:1b:0f:01:4d:03:b2:74:79:
73:2d:13:7f:39:2c:1c:22:3e:c5:62:2e:e6:ea:f9:
ae:bd:6b:0d:7d:53:ec:b9:58:d5:bd:38:7c:af:ad:
43:e8:a7:8d:12:8c:57:92:8e:67:51:ff:d8:0c:e1:
70:91:f7:16:ae:83:94:56:29:86:30:09:0d:4f:70:
09:5f:af:98:58:6a:1b:45:6b:3d:b9:2b:0c:40:87:
c8:b4:5d:79:a9:8a:f3:24:7f:c8:8c:82:ad:b5:f7:
6b:99:c7:c3:31:22:f5:30:40:22:98:13:fa:cd:73:
c3:6e:39:c1:24:3b:58:61:9e:94:08:f1:2f:92:b7:
59:89:67:9d:25:67:91:c9:11:a2:9b:7b:6b:66:97:
fd:70:11:45:31:f8:e9:5f:09:88:ff:61:06:35:c9:
28:9b:25:d6:79:91:a9:7f:23:51:7d:8c:5a:9c:c4:
b5:3e:33:6e:23:c4:76:59:f0:7b:d7:57:42:d6:30:
1f:88:3e:22:97:b1:22:a6:f0:3d:da:15:6d:e3:0b:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:57:E2:12:28:AD:BB:D4:11:EB:B3:3E:DA:71:72:C5:E0:1D:8D:5A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.12.0/22
155.117.20.0/22
Signature Algorithm: sha256WithRSAEncryption
68:a9:75:a5:ba:0f:ea:50:84:19:9c:57:75:b6:82:ea:a8:57:
f3:29:a3:f2:97:18:49:4d:99:f3:1f:e2:27:6f:0c:4b:f7:3f:
8a:69:b0:d1:9a:76:94:ac:b5:3e:f4:93:b7:1c:d3:01:8d:a9:
26:8e:01:70:57:cb:22:df:91:2f:cf:60:38:81:79:0e:17:c8:
e9:04:cf:c9:a5:fb:93:60:a8:ec:73:98:72:30:2b:00:3d:ed:
f5:50:4e:b5:4f:d3:71:e9:54:de:67:d7:ea:63:dd:d0:0a:a6:
82:36:df:dd:5e:e6:be:a3:97:d8:ef:a9:5e:0a:70:6f:bf:2e:
36:1b:9f:1e:44:2b:27:09:8e:4e:33:1e:33:3f:b2:74:0a:1d:
f0:b5:20:58:7e:39:26:05:81:24:d9:96:7c:81:a1:d5:94:31:
bc:03:41:85:ba:d9:b5:61:35:d8:c8:c0:5e:31:b2:82:93:b8:
2a:c8:a0:f0:c9:fb:6e:42:9b:96:21:b7:85:31:89:1d:47:df:
94:0d:86:8f:f2:d0:0e:9c:f5:12:4f:44:f1:0e:8d:89:a9:89:
c1:d0:c5:53:ec:0b:f2:33:1e:83:a7:b4:2c:4f:bd:da:01:e5:
4e:10:fb:20:3e:b7:09:66:69:98:8d:05:9c:bd:0b:80:a1:47:
6a:89:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:58:31 2025 by rpki-client