Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iBeyry2GEeQW4nBbCkP0miiqyyY.roa
File: iBeyry2GEeQW4nBbCkP0miiqyyY.roa (raw, json)
Hash identifier: eQJuc8/Ek2oK6IRN1qJaSWrSlu2ycHl2CLnz0P5OxI4=
Subject key identifier: 88:17:B2:AF:2D:86:11:E4:16:E2:70:5B:0A:43:F4:9A:28:AA:CB:26
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0191855A718FF7A2201C42310C35C9EE4D07
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iBeyry2GEeQW4nBbCkP0miiqyyY.roa
Signing time: Sat 24 Aug 2024 17:06:22 +0000
ROA not before: Sat 24 Aug 2024 17:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20057
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:85:5a:71:8f:f7:a2:20:1c:42:31:0c:35:c9:ee:4d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 24 17:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8817b2af2d8611e416e2705b0a43f49a28aacb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:ba:2e:02:b8:51:3f:73:28:03:b9:cf:2d:
7c:2d:ed:9f:40:e6:e1:c7:0d:71:c6:e1:9a:06:3e:
f8:06:1d:2a:35:40:87:0d:2f:b4:ec:ab:88:4a:59:
8a:13:a3:27:95:fc:f0:5f:4a:f5:3e:c4:9e:3a:bb:
3f:d2:48:2d:9e:fb:48:35:d6:09:26:7d:a2:48:24:
c6:23:2e:a2:26:73:06:2e:bc:92:3b:6f:d3:56:1e:
1c:84:90:60:f0:2e:47:86:37:7f:d4:01:bc:8b:f4:
83:59:ea:95:a9:24:6d:2e:06:57:9e:0a:51:6a:1a:
da:a6:27:15:9f:c2:01:8b:eb:64:af:75:8e:f6:a2:
81:f7:53:94:76:7d:1f:c2:79:52:27:0c:d1:7d:da:
ba:f3:02:74:59:2c:b3:25:b1:94:5a:e0:fe:11:df:
51:f8:39:7a:a3:54:5f:3a:f3:f2:e4:ab:3f:07:25:
d1:96:f9:37:c9:db:b5:8f:58:79:d5:44:73:d8:fc:
b2:a9:fc:a6:1c:d2:7c:25:fa:cb:f5:0b:6a:67:b9:
d6:0d:37:49:c5:22:0a:62:24:d6:88:b7:31:07:5a:
29:4c:47:36:bd:0c:1b:68:e6:c3:93:ff:4b:43:58:
c9:cc:ff:45:ee:71:ea:eb:0a:f7:4f:e8:d8:e6:e6:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:B2:AF:2D:86:11:E4:16:E2:70:5B:0A:43:F4:9A:28:AA:CB:26
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iBeyry2GEeQW4nBbCkP0miiqyyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a3:80:70:07:07:83:5d:b0:58:ca:4d:66:82:73:8b:03:18:
3a:d3:59:6b:d8:c1:45:7d:7f:6d:e1:04:4f:40:1c:fe:3f:02:
d4:1a:ef:b6:2e:75:89:9e:dd:6f:39:79:c9:95:66:94:a1:89:
92:e2:2e:51:de:77:8c:60:3e:fb:28:2f:c3:97:2f:72:05:f8:
19:31:3b:7b:ad:b1:03:0c:73:c0:62:db:ec:5b:a9:17:c0:60:
9b:37:27:b6:54:75:3b:5b:21:4c:c0:8e:5e:a1:cf:31:41:0e:
95:bb:a0:6b:fa:65:50:67:a3:70:b1:07:8e:ed:78:4b:a4:86:
80:29:7a:1a:91:73:c1:92:76:36:ec:a2:d9:fe:0f:0d:12:bd:
72:e9:25:8f:0f:72:61:57:97:d0:14:73:fa:2a:87:96:c2:94:
03:ac:69:05:4e:2a:32:72:9d:5c:9b:a1:d7:ed:9a:ed:04:e9:
de:dc:75:11:b7:3a:e7:1e:c8:b6:6a:dd:57:97:41:e4:9a:b6:
c5:2b:b5:4f:42:1f:93:7e:cb:fd:0b:24:37:05:cd:0a:48:52:
9e:b2:8b:7e:ba:65:ee:f4:52:8c:f0:90:01:73:43:b5:7b:01:
0c:6e:f8:88:cc:3d:73:ab:37:1a:90:1a:e2:be:47:6d:12:c3:
e5:6f:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:38:06 2024 by rpki-client on console-fra.rpki-client.org