Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: 4AHYKJckYw2f070BVhPRVA439lTIHrrHtGfOjpNSdDY=
Subject key identifier: C9:72:2C:11:9F:F3:1B:44:94:EE:16:B6:F7:D9:AB:CF:DC:5F:0D:79
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2DC6640BEB3097C4B59AE0B8470C4B15C6F693A5
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS7018.roa
Signing time: Wed 28 May 2025 00:54:08 +0000
ROA not before: Wed 28 May 2025 00:49:08 +0000
ROA not after: Wed 27 May 2026 00:54:08 +0000
asID: 7018
IP address blocks: 45.155.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c6:64:0b:eb:30:97:c4:b5:9a:e0:b8:47:0c:4b:15:c6:f6:93:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 28 00:49:08 2025 GMT
Not After : May 27 00:54:08 2026 GMT
Subject: CN=C9722C119FF31B4494EE16B6F7D9ABCFDC5F0D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:16:34:59:c6:a2:02:29:d3:11:1a:c2:10:
31:dc:2f:ee:01:5d:35:07:71:b2:ac:47:9c:8b:f7:
53:3d:f6:82:f8:2e:d2:fd:31:e4:ac:22:8c:b5:bd:
fa:f9:7c:25:25:09:e3:6c:d2:87:6c:8b:a0:35:f8:
61:e5:ee:d7:26:9c:d4:0f:4d:0a:37:05:26:87:2e:
3d:af:0f:76:8a:09:2a:69:cc:ad:0d:0f:f8:bb:85:
35:03:81:f0:55:9d:26:38:a1:b8:20:b0:39:db:1b:
0b:56:8d:4f:91:d7:a6:b9:04:22:6e:51:b3:bc:09:
45:5c:98:b2:cf:da:40:a6:e3:f5:04:22:96:32:4f:
d5:a2:1b:c5:9c:f4:e7:16:d6:b7:9f:ec:25:19:51:
c1:19:a9:3d:e6:84:c1:bd:78:38:6c:e1:8b:54:d2:
1e:40:fd:c6:31:b8:12:e9:b2:f5:83:3d:f1:8f:83:
9d:f2:d7:0d:85:a8:b1:f0:17:39:4d:95:b3:1a:fb:
44:72:6b:e2:f9:80:47:c9:7c:65:15:77:db:00:56:
ac:3e:84:f7:44:9d:e6:3e:41:ea:ab:1a:ff:fe:c6:
93:d7:72:67:d4:fd:ec:ae:ef:45:04:41:32:ed:de:
54:92:7f:f8:00:22:c7:54:88:43:6d:67:2c:d3:34:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:72:2C:11:9F:F3:1B:44:94:EE:16:B6:F7:D9:AB:CF:DC:5F:0D:79
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8f:8a:55:85:75:bd:b6:8d:9f:e1:bd:a4:38:16:23:42:8c:
67:63:c8:37:89:40:c7:b9:86:73:11:da:e3:6b:90:b9:42:82:
55:19:ab:11:20:bd:1b:b4:1d:1e:62:53:5c:4b:8a:44:41:1b:
5d:2c:ee:5c:c4:ca:c2:47:f2:35:6b:38:df:0c:28:9d:d7:c7:
b4:29:09:66:e3:5c:d6:6e:39:6b:e9:4f:58:95:e6:c8:e5:01:
89:8c:ea:e5:36:68:a5:47:25:31:05:c6:3c:4f:2b:dd:f9:91:
8f:65:15:1d:a0:26:11:4b:c8:1b:16:7f:97:ba:b6:a8:06:c0:
36:17:9a:d3:c8:36:0b:a7:88:50:6e:a9:cb:74:53:8c:b7:d8:
ac:2a:c6:86:2d:d1:49:2e:3d:9c:45:dc:25:b0:51:a4:c4:96:
15:df:24:df:b6:13:c1:f4:56:86:4e:5f:3b:66:4d:df:96:5f:
3f:b4:df:63:08:50:cb:78:62:3c:04:89:d2:01:57:c1:bb:ee:
29:3c:4a:4b:8b:17:4f:51:ec:e7:31:16:33:62:42:66:90:e3:
58:32:89:8a:7b:ae:f3:f6:af:f0:12:4c:fe:3f:3e:17:c8:d5:
14:70:35:8a:6f:84:bf:09:c7:f9:ef:bc:8b:29:d4:a6:3b:c4:
40:76:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:01:06 2025 by rpki-client