Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7203.roa
File: AS7203.roa (raw, json)
Hash identifier: 5JMNPKzSOsbx0JXtdf8/FGjRBuLSD0MrvTC9YKQXV8s=
Subject key identifier: 2D:F4:D4:75:34:74:F7:87:9C:BE:6D:71:D2:CA:E8:AF:FB:F9:2B:63
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 542AE3D471DD53FD60C53CC1619E5B7C5444C8AF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7203.roa
Signing time: Mon 11 Nov 2024 00:01:59 +0000
ROA not before: Sun 10 Nov 2024 23:56:59 +0000
ROA not after: Mon 10 Nov 2025 00:01:59 +0000
asID: 7203
IP address blocks: 179.61.166.0/24 maxlen: 24
179.61.245.0/24 maxlen: 24
191.96.130.0/24 maxlen: 24
191.101.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 07:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2a:e3:d4:71:dd:53:fd:60:c5:3c:c1:61:9e:5b:7c:54:44:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 10 23:56:59 2024 GMT
Not After : Nov 10 00:01:59 2025 GMT
Subject: CN=2DF4D4753474F7879CBE6D71D2CAE8AFFBF92B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:c5:65:a1:34:96:e2:00:20:9b:94:9f:47:
4a:9e:47:c9:d9:4a:04:a8:31:6f:1b:7f:9f:4e:24:
28:c5:76:d5:65:78:16:e5:70:ca:f6:f6:cb:c0:49:
67:00:8f:77:0e:fb:1f:0a:41:46:35:66:1b:52:37:
60:c7:7f:8a:a7:0d:94:ec:e4:e7:8d:5e:a2:95:e1:
4c:62:44:7d:38:d2:0a:b3:b8:ac:5b:7a:a3:e3:3a:
6b:ce:cb:6c:20:3c:40:c7:64:d6:0a:f4:b6:0e:96:
fd:10:6a:81:f3:2a:53:b6:23:cc:e9:20:39:1a:1b:
3a:6d:16:cb:27:2f:dc:27:a1:02:4d:0d:3c:7f:db:
29:f9:40:8d:bf:4a:b3:01:77:f7:11:c7:f7:da:c2:
c9:8a:42:17:4f:43:35:9a:c1:77:5e:ab:ee:c5:11:
0f:83:0f:13:90:b9:2b:b0:d6:a2:64:19:d3:c7:ee:
5d:a1:b3:cf:74:2a:a9:67:9d:58:f9:29:42:39:81:
e4:22:75:8c:c6:b1:ac:d5:e5:72:4f:15:7d:33:e9:
0e:44:f4:3d:ba:5e:ff:71:71:b4:1c:96:4f:24:3c:
c9:70:19:46:7c:9c:4d:c7:10:70:8e:fd:3e:65:26:
74:a8:79:77:b1:73:70:42:07:0b:61:08:68:af:b9:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:D4:75:34:74:F7:87:9C:BE:6D:71:D2:CA:E8:AF:FB:F9:2B:63
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.166.0/24
179.61.245.0/24
191.96.130.0/24
191.101.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:01:e7:1a:f3:a3:59:42:19:bd:18:ed:9b:6e:2e:55:1a:0b:
17:e0:31:d0:51:48:34:49:4a:89:57:3a:dc:c8:54:77:79:df:
8a:b2:19:59:af:9f:a3:f9:63:24:e5:56:97:67:89:a9:a7:da:
8d:dc:f6:a4:3e:97:b5:99:15:1f:f3:ff:ad:21:d4:ad:24:9e:
5b:e6:6a:e8:90:5a:1b:a5:75:68:ea:a3:a6:e5:72:6a:b3:69:
8c:2d:03:5f:da:53:cc:7a:b8:21:d3:d5:50:6e:97:cd:d2:03:
f3:e5:f7:d8:10:09:ad:45:f1:fb:67:08:f6:d1:9e:f2:82:d4:
2b:10:8c:38:80:91:61:3d:f2:23:38:bb:be:b8:30:03:25:a0:
d5:42:fd:7e:a8:30:e9:6f:76:93:1c:67:7d:87:40:c9:4f:84:
00:28:40:a9:ff:17:2b:b1:d3:85:87:05:0f:fe:30:45:13:26:
01:9a:bb:3d:25:87:a5:30:8d:0b:44:64:24:26:8a:26:93:39:
07:a4:d3:79:9b:19:e9:a3:b0:2a:7c:86:97:e9:c1:b9:a8:09:
5c:23:eb:f3:34:e2:00:8b:ae:e2:8d:cf:38:e5:0b:c8:bd:e5:
91:10:de:17:04:69:a3:29:36:ab:ee:9c:03:24:d7:27:d9:33:
f0:2e:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:21 2025 by rpki-client