Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7922.roa
File: AS7922.roa (raw, json)
Hash identifier: OEkMh9ndqWs9yrBITz3XvxNsZ03ihLopV0M3aBx3xjc=
Subject key identifier: F1:2D:1F:4D:7B:FF:56:65:01:45:CE:50:AA:DB:7D:C4:E6:3B:97:AD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 567A425D9A8DD5B3FF379CAD4F43279B6CABE675
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7922.roa
Signing time: Sat 06 Apr 2024 11:09:32 +0000
ROA not before: Sat 06 Apr 2024 11:04:32 +0000
ROA not after: Sat 05 Apr 2025 11:09:32 +0000
asID: 7922
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7a:42:5d:9a:8d:d5:b3:ff:37:9c:ad:4f:43:27:9b:6c:ab:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 11:04:32 2024 GMT
Not After : Apr 5 11:09:32 2025 GMT
Subject: CN=F12D1F4D7BFF56650145CE50AADB7DC4E63B97AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:60:1d:07:ea:bc:25:06:a6:ea:ac:4a:d5:
4a:a1:69:e2:62:50:1b:7f:8f:6a:ab:f5:8e:83:09:
ca:81:e6:8d:18:14:e2:47:fe:ab:05:fc:f2:82:33:
dd:1b:04:28:aa:ea:94:6d:2a:1c:f4:3d:8d:86:35:
ff:cf:1b:ed:1b:df:ad:36:41:71:f7:a9:61:29:0f:
d9:e3:8d:87:5e:b5:2d:82:8a:2f:48:27:b4:83:f9:
f3:04:5e:c3:3f:24:d7:f8:f3:f9:05:fc:9c:86:c4:
10:41:cd:cc:14:50:88:bf:64:85:42:f8:23:8a:1f:
46:68:0d:f8:4e:39:89:d6:ac:ae:5d:b5:c0:4e:f0:
9d:63:9e:ff:dd:31:09:ba:94:11:6f:88:6c:94:17:
0b:e2:12:0b:99:35:9d:76:a7:01:0a:b9:22:f4:1b:
4c:a9:54:44:46:0a:07:da:a2:51:ab:c4:92:8e:be:
49:3e:0c:73:d1:8b:9a:ee:e5:6d:da:c5:4e:40:c3:
9c:dd:d2:64:ec:d0:3d:bb:6e:68:97:12:b7:7f:ed:
cb:50:ca:3b:50:4d:6b:e2:df:3a:e4:71:c1:48:db:
c3:11:87:50:d6:61:94:09:4c:bf:bc:9c:b8:00:bc:
d8:a0:b9:ae:86:93:06:dc:31:d0:8c:82:48:20:f6:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:1F:4D:7B:FF:56:65:01:45:CE:50:AA:DB:7D:C4:E6:3B:97:AD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:63:41:b5:50:f2:5d:50:a6:a3:05:3e:e6:b8:fe:2f:2e:cb:
f2:db:cc:66:46:74:29:ef:b1:73:08:ac:cb:fb:5f:cc:5f:3a:
ce:bd:55:48:63:4e:36:59:a8:71:a8:b1:2f:c3:9c:04:4c:c9:
a1:8a:6b:50:45:b3:c2:18:9f:25:c5:c6:6f:80:ca:ff:fb:ef:
d1:c3:5f:53:8e:92:4c:fc:0e:02:7f:1d:5d:25:f9:1a:6b:91:
ad:98:da:cc:c9:71:7e:49:ab:ab:e0:2f:26:9c:77:bc:75:2d:
e1:21:f5:96:56:fb:17:11:6a:e5:e0:ad:7f:cf:0e:9b:74:33:
3e:86:d6:f9:9e:5f:9e:bf:5e:d4:f6:0a:b4:7c:a8:62:fa:0f:
2b:67:4d:ac:ad:e8:ec:7b:68:d5:64:cc:32:5c:de:05:52:43:
2a:8b:ad:46:1e:74:24:94:05:c9:3e:2b:85:ab:d2:99:c2:71:
e7:ab:cc:52:a3:43:f5:c6:55:85:e7:45:b6:f7:23:30:f5:b6:
7b:56:d4:11:8c:af:c3:9c:d6:b7:42:01:ef:25:de:07:24:94:
c2:e3:f1:e5:e3:b5:36:55:33:7d:cc:81:3f:a3:07:ce:8e:bc:
a5:73:83:c7:63:7d:3b:00:82:08:43:51:14:7b:cb:b3:9a:d5:
e7:e6:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:15:23 2024 by rpki-client on console-fra.rpki-client.org