Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7922.roa
File: AS7922.roa (raw, json)
Hash identifier: +mp06dUSwHuB9/9nSvW27PnOKv4/HRV8m4v7dlynbd0=
Subject key identifier: E6:E7:45:F5:8B:45:FA:96:4C:2C:62:11:2C:6F:D0:AA:9A:2B:AE:38
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2652FE4067E2E0741454CFA931E1B89AE556CEB6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7922.roa
Signing time: Sat 08 Mar 2025 11:53:56 +0000
ROA not before: Sat 08 Mar 2025 11:48:56 +0000
ROA not after: Sat 07 Mar 2026 11:53:56 +0000
asID: 7922
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:52:fe:40:67:e2:e0:74:14:54:cf:a9:31:e1:b8:9a:e5:56:ce:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 8 11:48:56 2025 GMT
Not After : Mar 7 11:53:56 2026 GMT
Subject: CN=E6E745F58B45FA964C2C62112C6FD0AA9A2BAE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:c5:e6:48:fd:18:2b:8a:21:e2:9e:8a:5e:
17:55:27:ef:b8:6d:3d:55:0a:c3:fe:8e:8c:0c:9e:
91:5b:e0:a4:ac:b7:7a:7d:78:f6:e1:2d:1e:e4:3a:
e4:c9:87:b7:5d:48:19:42:6c:10:ba:0a:bb:6b:6c:
08:db:ff:df:17:ec:a4:0b:f1:c3:b5:33:cd:6a:89:
94:73:1a:01:72:27:4b:61:8a:71:1f:a6:77:30:a9:
88:15:75:25:fe:ba:19:c2:d4:e0:7d:09:33:b4:bd:
9e:4c:1a:bb:d0:ea:5a:41:2b:a4:14:f5:af:48:c0:
61:95:95:1b:2b:a6:a1:81:17:60:41:f4:89:54:4a:
e7:67:8f:21:b2:0d:87:77:97:b2:ee:fa:81:ae:ee:
47:7e:df:fd:f3:57:d0:06:b1:8f:fc:8c:bf:92:0a:
70:90:e3:73:38:46:60:10:1f:59:7c:fa:bf:5d:41:
e6:0a:18:56:a5:b9:d6:f8:d7:a2:1f:b1:65:fd:39:
a1:ab:e3:de:e6:3e:4c:1d:49:a2:92:ca:78:2e:ac:
ad:14:45:3d:7b:5e:f7:ff:80:36:ce:2c:18:52:67:
0e:a0:ee:51:3e:8a:4f:49:e8:96:2a:a1:91:83:fb:
07:bc:11:4e:a7:27:0b:e0:f0:46:20:3b:11:ae:71:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:45:F5:8B:45:FA:96:4C:2C:62:11:2C:6F:D0:AA:9A:2B:AE:38
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:8a:dc:7d:9b:1b:9a:7e:58:9f:e9:7f:81:7f:81:19:13:e7:
97:61:db:78:be:aa:f4:58:ef:cd:fd:7f:69:05:92:98:b8:41:
c0:40:0b:16:5a:42:c8:77:c2:af:36:66:d0:3c:c4:6e:00:56:
2f:d2:f8:81:2c:6b:4d:ef:ae:f6:3b:f5:42:5a:55:02:00:84:
ac:ed:15:49:67:ed:95:95:ce:fa:d8:8b:78:57:45:96:00:e5:
ae:82:32:4d:8d:fe:ea:ac:19:85:50:47:04:73:fd:53:91:dc:
3a:af:ef:e4:08:b4:5f:a7:e4:45:0c:4b:a9:a6:43:61:84:95:
cd:85:da:1b:55:50:ce:58:b1:87:3f:4e:11:86:9c:14:49:2a:
ab:f0:2c:09:c6:f9:14:ab:18:bd:5a:36:ac:91:1c:4a:e0:06:
0d:54:0f:78:cf:41:6d:42:c2:84:9b:bc:47:d2:41:79:91:e0:
48:40:a9:5d:38:2f:ba:87:43:a0:d6:f1:82:a6:ab:b1:11:28:
48:fe:b0:58:65:94:27:ac:ce:ef:e6:f3:0d:ab:12:a3:6f:f2:
a4:e8:bb:23:ea:f7:e7:d4:a9:aa:c2:90:a1:0b:88:df:ef:36:
9b:d8:f2:7d:4e:20:68:65:15:1f:f1:34:76:c1:7b:98:02:0a:
26:c7:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:26 2025 by rpki-client