Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/7SbEh-AMTINoPBeRDFl9IAaoOj0.roa
File: 7SbEh-AMTINoPBeRDFl9IAaoOj0.roa (raw, json)
Hash identifier: DTHvxHNRnhltXB1qkvHOwQUfn/i3xqHHxwHie2YvUeU=
Subject key identifier: ED:26:C4:87:E0:0C:4C:83:68:3C:17:91:0C:59:7D:20:06:A8:3A:3D
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 018CC2DAD7FA880921E5D620CC2DB535D5DC
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/7SbEh-AMTINoPBeRDFl9IAaoOj0.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 185.79.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d7:fa:88:09:21:e5:d6:20:cc:2d:b5:35:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed26c487e00c4c83683c17910c597d2006a83a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:83:f5:18:99:8a:8a:c0:9b:db:98:77:55:
90:a9:24:9d:74:c2:ce:8b:ff:92:bc:90:20:fe:66:
d9:b8:f8:4e:73:65:ef:46:d2:66:1f:1e:dc:f3:79:
ae:73:4e:96:30:1b:2f:1b:95:69:a4:ef:aa:73:e3:
eb:4c:df:c4:2a:2c:67:ef:83:16:b6:76:50:99:c0:
b5:a7:e8:b6:72:2d:80:c4:af:68:20:7d:57:86:32:
53:7b:7d:ae:0d:48:66:af:0f:5d:32:e5:fd:49:79:
f8:0f:d0:af:37:36:a6:45:ce:c2:66:4a:b5:ec:9a:
b2:bf:41:05:a2:a8:f7:49:86:b8:73:b3:8b:c7:1a:
81:89:89:16:f2:c4:29:c6:20:c4:5d:46:96:0c:9f:
6a:50:da:74:7a:eb:a2:47:d2:cc:c0:ed:a0:2b:c5:
ed:a8:e9:ff:0e:2c:89:57:f3:96:aa:55:37:d7:87:
e6:e7:20:9c:45:50:0b:9a:df:91:95:d2:a8:e8:35:
cb:c6:47:32:7c:b8:79:20:9c:eb:fd:5e:af:d6:78:
2e:ad:b6:b6:87:18:44:27:13:0f:83:c4:01:ca:01:
09:c7:b1:f5:83:fb:e9:59:38:db:c5:c7:e4:55:3c:
83:94:0b:10:09:0e:48:5a:7a:3d:8f:0a:48:a8:03:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:C4:87:E0:0C:4C:83:68:3C:17:91:0C:59:7D:20:06:A8:3A:3D
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/7SbEh-AMTINoPBeRDFl9IAaoOj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.200.0/23
Signature Algorithm: sha256WithRSAEncryption
02:7c:6f:cc:c6:7e:c7:66:31:ed:c3:4d:ad:57:85:a3:85:05:
a7:a8:bd:42:a9:e6:85:11:9f:fa:e9:f6:1d:5d:3f:6f:6c:87:
91:34:7e:1a:fb:1d:86:af:e5:76:b2:44:1c:82:dd:8f:08:0a:
41:14:55:4f:a2:a0:80:3c:66:c1:c5:55:e3:3a:61:cd:38:99:
90:eb:5c:0c:4b:9d:0a:e6:d8:ec:dc:fa:8b:18:44:b5:f5:93:
76:47:42:25:9c:ff:9f:26:ef:66:95:d3:79:0a:84:9a:59:69:
ff:44:be:03:6d:d2:52:dc:af:33:4f:48:82:78:e2:65:9a:47:
ac:d1:41:0e:0c:b0:c9:f6:84:97:8d:09:6d:17:19:70:5a:96:
1f:b9:80:7c:35:d6:30:61:e5:d3:e1:a2:aa:17:e7:cb:39:43:
6b:11:eb:78:8e:32:e4:d0:d8:f5:c6:96:00:40:7d:9a:a1:fb:
a7:e8:7a:5d:16:c5:0d:e9:4f:8c:d9:4a:6d:b2:45:63:c3:fe:
11:b5:d1:53:ec:18:38:cf:c6:46:7c:58:de:05:63:ec:a7:3d:
70:79:ee:7f:f0:7f:b8:d4:c1:86:64:08:cc:5b:66:83:bb:bb:
45:23:dd:aa:2e:e8:67:e4:12:f3:63:a4:c2:1d:e1:2d:2a:3e:
24:33:f4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:49:02 2024 by rpki-client on console-fra.rpki-client.org