Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/rBonRejzrwLn_R9CsYbyPIMa1OI.roa
File: rBonRejzrwLn_R9CsYbyPIMa1OI.roa (raw, json)
Hash identifier: rpBhHR1bnizZIpFzsPFD8HykAjrqfQn3/nBxkx14hX0=
Subject key identifier: AC:1A:27:45:E8:F3:AF:02:E7:FD:1F:42:B1:86:F2:3C:83:1A:D4:E2
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 018CC79445A0D359F3DE728649B50EDAEE9C
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/rBonRejzrwLn_R9CsYbyPIMa1OI.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 185.72.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:45:a0:d3:59:f3:de:72:86:49:b5:0e:da:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac1a2745e8f3af02e7fd1f42b186f23c831ad4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:f5:42:e0:4d:18:49:56:73:cc:7c:46:7d:
7b:f8:49:90:ac:98:22:7d:b7:09:cd:f4:b8:75:af:
0e:9d:24:2c:fa:e1:b5:26:5c:62:36:cb:58:6d:cc:
7f:71:5c:b9:34:1f:55:9d:ff:63:eb:5d:98:24:c3:
a2:c6:62:20:18:48:53:44:6c:39:a5:05:c6:36:44:
2d:89:39:75:e6:86:59:e4:a6:5e:1a:82:e1:ad:8b:
88:5c:ba:a8:45:0c:5b:1e:1c:1e:dd:51:d0:3f:a2:
65:80:12:a2:43:b6:e9:90:f7:2a:8f:14:f1:41:8e:
6e:fd:69:98:2a:c7:52:39:eb:54:16:09:a8:17:46:
03:70:82:93:b3:57:8f:cc:87:6e:d2:2c:a8:eb:71:
7b:7b:1d:04:b0:4c:81:e7:c5:79:d4:f9:e3:8c:a7:
74:fc:34:34:5a:28:1d:e9:c2:b9:ec:99:21:2a:97:
7a:b9:ca:33:1a:f6:19:a3:d8:95:8c:56:a3:07:45:
ab:d2:72:75:e8:4f:43:30:6d:fc:c9:51:f5:02:28:
5e:20:13:ba:ee:f5:30:6b:06:9d:34:6a:41:f2:c6:
ad:51:59:d2:72:ce:ca:69:0f:a0:df:11:24:c6:8e:
5a:4f:36:c8:6b:58:6d:73:d8:df:df:e4:9e:f3:c0:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:27:45:E8:F3:AF:02:E7:FD:1F:42:B1:86:F2:3C:83:1A:D4:E2
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/rBonRejzrwLn_R9CsYbyPIMa1OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:7e:e7:05:16:38:92:56:a0:2b:80:f1:26:77:79:20:c1:9d:
38:30:bc:a5:7c:e4:c9:ce:0d:a9:2d:79:a2:43:76:bf:95:95:
80:c6:41:0b:86:45:7c:e8:c0:ea:c7:93:92:ca:59:2e:29:ed:
03:e7:ff:23:a8:c4:7e:ec:7b:6d:0b:41:26:ff:dd:5c:82:6c:
2a:49:be:dc:d9:20:6d:ab:a7:93:21:57:73:94:02:90:b2:00:
ec:7d:b1:38:cf:6c:7d:16:85:3f:64:1c:f1:0f:b4:03:63:de:
93:28:ea:f8:72:0d:16:d4:f2:3d:c3:b9:d1:ca:74:8e:57:ca:
17:8b:ab:d9:03:5f:3c:0a:4d:c2:0f:42:13:9e:42:57:90:84:
2f:58:f7:b4:9a:e0:88:73:6b:65:5f:8d:fc:35:2c:23:9d:37:
d7:35:ea:8e:f8:50:c9:cf:53:ce:7b:b2:1e:4c:98:61:5d:e9:
ec:5b:f7:3d:7d:d8:b7:56:41:7d:ab:f1:c3:71:0b:18:57:87:
c3:e4:43:5b:4f:3c:4c:14:51:71:dd:69:00:cc:47:d3:cd:01:
4e:78:fb:e3:ae:a9:01:c1:d4:76:65:85:6b:3d:8a:01:e7:7b:
14:6b:77:42:e5:1f:9f:94:5c:95:9d:1c:7b:e2:3b:46:19:fc:
94:17:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:33:17 2024 by rpki-client on console-ams.rpki-client.org