Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/B72N3-hkcDm2l0G1zqwOKqUPq_g.roa
File: B72N3-hkcDm2l0G1zqwOKqUPq_g.roa (raw, json)
Hash identifier: ZyLI5x7lynXit1kA3fhSfEeisLDoqUMBfOxOFNvGo18=
Subject key identifier: 07:BD:8D:DF:E8:64:70:39:B6:97:41:B5:CE:AC:0E:2A:A5:0F:AB:F8
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0192419C3310FCD11B0AC0A3DF73173632E9
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/B72N3-hkcDm2l0G1zqwOKqUPq_g.roa
Signing time: Mon 30 Sep 2024 06:26:48 +0000
ROA not before: Mon 30 Sep 2024 06:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 92.243.74.0/24 maxlen: 24
92.243.75.0/24 maxlen: 24
109.120.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:9c:33:10:fc:d1:1b:0a:c0:a3:df:73:17:36:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 30 06:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07bd8ddfe8647039b69741b5ceac0e2aa50fabf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:c8:93:13:73:39:04:bf:bc:a5:33:2e:49:
ea:84:db:d6:b4:8f:77:96:c6:41:f0:71:16:d6:88:
5d:83:6f:90:3e:45:a4:53:07:54:23:e0:53:fd:c8:
a7:bc:68:3d:a9:d6:d3:37:f4:9a:aa:4b:ac:63:dd:
d4:ac:da:9e:c0:7c:e3:62:51:70:ae:0a:85:53:cf:
e7:92:f5:50:fd:40:06:dd:f1:43:02:3b:c8:f7:8e:
2b:d4:e6:d1:ee:42:51:d2:1d:bd:8c:bf:c2:8f:68:
bc:25:b9:80:da:b3:7a:97:7d:12:d2:fe:97:2c:34:
4c:da:ba:02:9c:82:24:92:d2:80:09:f6:11:a9:7b:
bd:26:eb:4f:68:47:d5:17:71:a1:8e:b4:4a:23:d2:
1e:cd:2a:05:2e:75:82:4a:28:68:9c:3e:03:03:5b:
29:c2:76:e5:7c:28:da:b1:b4:e9:6b:c8:8a:fa:c7:
b1:70:02:4f:8f:33:9b:97:7a:1e:96:3e:d1:19:e2:
07:59:82:8c:39:41:23:78:cc:36:45:59:17:b5:89:
a9:78:6d:57:a3:b0:1a:10:5a:1b:e0:8e:b9:49:4e:
dd:7e:bd:87:5b:65:33:db:82:17:de:f2:97:f1:5a:
5f:c9:23:c2:33:1e:9d:e7:66:bf:cc:ee:62:cb:4a:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:8D:DF:E8:64:70:39:B6:97:41:B5:CE:AC:0E:2A:A5:0F:AB:F8
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/B72N3-hkcDm2l0G1zqwOKqUPq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.74.0/23
109.120.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:82:57:d6:f1:fb:d5:9c:b8:62:64:6a:d5:17:58:c1:01:b2:
9a:43:43:3e:06:b9:c0:9c:62:d2:2c:98:f8:d6:56:71:61:39:
2e:f2:ab:a3:ba:f7:ce:a5:84:46:a4:46:d9:f0:1d:c3:db:94:
89:96:e6:5b:48:7c:a7:c4:a1:69:6f:c0:50:c0:dd:6f:8a:32:
4c:41:a0:4a:0d:c8:cd:2e:26:96:8b:f7:cc:80:ed:6b:aa:78:
5d:1c:9a:52:a5:44:fb:9b:16:c0:5e:b9:48:61:e4:32:08:31:
05:37:c5:1a:84:59:04:81:fc:22:32:5b:31:5c:42:b1:82:15:
ad:48:3d:d6:03:95:de:f3:7c:c0:da:01:47:70:07:75:2c:1e:
f0:29:f3:11:8b:2c:1c:dc:fe:f0:79:a6:60:5a:0c:91:08:00:
47:3f:c3:6c:49:fe:90:39:29:50:48:48:de:af:24:26:97:bd:
54:2d:7b:aa:a8:68:53:e4:8c:2d:d4:d8:44:4e:a8:d7:9a:60:
3c:b4:9a:31:e8:88:ee:e0:50:ad:eb:12:6c:e4:0f:8c:47:6e:
06:93:c2:9a:e0:f3:49:c5:02:1b:a9:4b:73:95:eb:e0:c8:f3:
48:ef:15:d8:35:0f:0b:35:65:d6:b8:ac:82:ab:eb:a6:b0:6d:
4e:89:86:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:15:14 2024 by rpki-client on console-ams.rpki-client.org