Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BoNX1Ofi3oot5pVRs4pICLmsVaw.roa
File: BoNX1Ofi3oot5pVRs4pICLmsVaw.roa (raw, json)
Hash identifier: ag75GP+Xvt94BhLKk9p4/JNSOX0ywZQRkLtHxXoni4o=
Subject key identifier: 06:83:57:D4:E7:E2:DE:8A:2D:E6:95:51:B3:8A:48:08:B9:AC:55:AC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FC64D04A52A5A003F528F079D70D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BoNX1Ofi3oot5pVRs4pICLmsVaw.roa
Signing time: Tue 02 Jan 2024 02:31:28 +0000
ROA not before: Tue 02 Jan 2024 02:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199902
IP address blocks: 192.121.120.0/24 maxlen: 24
192.121.3.0/24 maxlen: 24
192.71.191.0/24 maxlen: 24
192.36.97.0/24 maxlen: 24
192.71.190.0/24 maxlen: 24
192.71.188.0/24 maxlen: 24
2a01:280:301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fc:64:d0:4a:52:a5:a0:03:f5:28:f0:79:d7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=068357d4e7e2de8a2de69551b38a4808b9ac55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:5a:e5:cc:d1:f7:cb:35:99:52:3c:4e:0c:
ac:44:a9:c2:85:cf:44:1f:c0:c3:62:4b:5e:26:90:
f6:c9:93:00:f4:25:1b:ee:62:96:97:4b:68:3b:5c:
65:9d:e8:1f:16:21:88:d7:ca:c1:d6:8d:70:19:a1:
cd:88:50:8e:68:27:9b:0e:bc:ee:4d:80:e9:ae:cc:
de:7f:ab:83:d4:83:ac:c0:90:ef:ec:3f:1b:51:d7:
5c:e0:bc:55:84:5f:30:00:3a:eb:3e:88:ab:c2:1f:
6a:6d:6b:b7:49:56:48:32:ef:44:ab:15:5c:ba:c1:
5e:15:54:56:9e:8b:58:56:b7:be:a8:80:3b:52:a7:
da:24:0d:7d:8c:3c:bc:1e:da:59:8c:4b:af:5d:e6:
e8:ce:ac:cc:4a:33:36:5c:9a:27:d7:01:da:3f:c9:
c5:ef:32:b2:6a:0b:71:3f:aa:87:c1:ea:72:db:3a:
4e:80:da:cf:98:96:4a:f8:10:b0:50:22:3c:3d:bc:
d9:12:a5:3e:95:10:b0:99:71:09:0a:29:8b:f0:3c:
f3:4d:97:02:0b:fb:4b:bf:2e:af:cc:0e:46:09:6a:
43:c7:da:fb:2c:87:98:2c:1d:6f:76:18:f1:a6:ba:
7e:a2:e1:6d:61:6f:22:d8:18:b4:1d:6b:af:fc:39:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:57:D4:E7:E2:DE:8A:2D:E6:95:51:B3:8A:48:08:B9:AC:55:AC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BoNX1Ofi3oot5pVRs4pICLmsVaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.97.0/24
192.71.188.0/24
192.71.190.0/23
192.121.3.0/24
192.121.120.0/24
IPv6:
2a01:280:301::/48
Signature Algorithm: sha256WithRSAEncryption
a0:aa:b2:41:0a:8e:36:15:c3:9c:db:1f:a8:5a:62:80:9e:f5:
c5:94:79:70:9c:7b:fb:e6:cd:c4:69:47:e4:0d:e8:8d:10:e1:
68:e1:1a:9e:ef:3a:80:90:60:19:0f:2f:fe:65:b8:a3:1c:29:
16:b5:80:a6:9c:ec:72:2b:8c:7f:63:dd:5e:0a:3d:a2:96:e2:
28:87:62:79:96:ee:05:4b:0b:b6:13:e2:da:01:83:9e:2f:59:
12:e2:5d:d4:7c:07:4d:67:c0:31:71:b4:3c:81:78:d1:b2:0f:
85:28:e7:79:cb:f5:20:8b:96:c0:83:df:b2:72:c9:f0:fe:9a:
a0:24:cf:8a:c6:97:49:5e:1d:71:6a:78:0a:0a:60:5e:3e:a3:
2a:de:fb:f1:94:8c:ed:c6:5f:39:71:79:4d:3e:44:c8:c8:27:
53:56:6b:18:59:03:83:5c:5c:a0:96:df:e3:06:25:9a:e0:2a:
b5:83:89:eb:b1:9a:32:63:cc:9f:7d:0b:22:0d:40:8c:77:86:
f7:89:6a:54:8c:3f:e2:d7:22:41:ca:df:aa:c8:b3:d2:36:10:
a9:a6:30:37:48:4a:1f:ab:62:89:73:17:7f:15:3e:1f:70:75:
10:40:d1:af:8d:e4:ef:84:0a:1b:91:ee:77:fa:79:b8:82:e0:
3e:b3:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org