Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/kZrEx1_e9Xbg1mmYICMnjPVv9os.roa
File: kZrEx1_e9Xbg1mmYICMnjPVv9os.roa (raw, json)
Hash identifier: NOVBff+Y/2rB+jCO1yj4tprwZr9/pFViCLO1UVINS60=
Subject key identifier: 91:9A:C4:C7:5F:DE:F5:76:E0:D6:69:98:20:23:27:8C:F5:6F:F6:8B
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018EE628083F9327F6811EB0EE2D2DF4B45B
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/kZrEx1_e9Xbg1mmYICMnjPVv9os.roa
Signing time: Tue 16 Apr 2024 09:06:06 +0000
ROA not before: Tue 16 Apr 2024 09:06:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:28:08:3f:93:27:f6:81:1e:b0:ee:2d:2d:f4:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 16 09:06:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=919ac4c75fdef576e0d669982023278cf56ff68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:d2:a8:26:ff:cd:13:79:93:f9:ec:3e:57:
e1:22:67:05:8d:64:4c:e3:5c:7f:c8:ad:ee:1b:83:
38:f1:62:a9:00:91:45:ff:3f:fc:20:22:e2:92:d0:
1e:a1:ef:1a:25:6a:77:2d:4a:21:58:e6:29:2c:ca:
a8:7b:0e:2b:ed:4b:29:5a:8b:e7:8d:47:34:36:3b:
63:5d:db:a4:39:cb:41:ce:16:58:73:16:41:a8:e9:
30:31:a2:60:3d:ab:2a:72:7b:84:d2:ba:1b:78:40:
96:36:7b:98:65:f4:4f:4e:e1:2d:9a:fd:f0:15:8d:
14:79:a0:60:09:ed:20:d5:cc:84:b1:bb:28:b6:9e:
3d:78:4a:dd:d1:87:88:7c:cb:0b:75:82:09:36:2a:
3d:07:78:71:85:87:55:e4:b5:60:1c:90:85:cd:2b:
56:51:23:07:dd:82:b7:31:98:f8:3c:b6:d7:bb:cc:
7f:25:a1:af:ba:3f:cd:22:37:7c:39:a6:ee:f4:7b:
dd:a4:30:5a:60:f0:26:19:08:67:3d:fc:7e:c3:9b:
a6:1a:64:8f:f1:99:5f:e1:1b:29:5c:63:74:22:d8:
17:18:ed:9a:bb:21:74:b4:f8:1a:5d:a3:78:9d:8e:
e3:a4:b7:77:6a:fe:c7:c8:dc:b4:9a:f7:36:21:84:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:C4:C7:5F:DE:F5:76:E0:D6:69:98:20:23:27:8C:F5:6F:F6:8B
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/kZrEx1_e9Xbg1mmYICMnjPVv9os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9e:e2:67:7c:1b:72:13:e2:7b:65:31:35:1e:d0:da:ac:b6:
02:7f:4b:f2:0a:03:43:e2:b7:aa:06:8c:24:e0:82:10:78:0d:
41:4f:4d:79:3a:45:41:45:eb:73:4e:c9:1b:b2:5a:27:3e:b8:
48:4a:c2:b8:0e:af:c2:eb:51:07:86:ba:aa:ad:29:4e:95:79:
f6:8e:76:21:20:ed:9c:b0:ab:ad:57:26:dd:5c:2a:6a:9e:64:
37:91:f9:16:08:f1:46:f0:4f:c2:22:8e:d2:6c:0c:67:69:88:
29:b2:03:82:d6:a7:8f:30:c0:12:e6:bf:65:9e:81:ee:66:ad:
7f:08:64:dd:b5:97:b2:d6:c0:de:bd:67:ad:96:4b:4f:0e:d8:
69:7d:a1:ff:d9:43:a5:f0:d4:52:c5:a0:2f:5e:1d:d2:19:83:
b2:13:1b:08:b2:fb:d4:47:4c:3a:db:b0:94:61:76:0d:1e:88:
a7:59:9e:23:65:5a:91:a9:b2:9a:2d:96:cc:cb:08:a6:db:8f:
69:63:71:5f:7b:75:15:bf:b0:12:27:61:46:95:8a:4a:0e:86:
6d:f3:91:a9:18:0f:e2:0f:09:ec:15:92:94:12:c8:fd:e6:fb:
b1:84:e4:6d:e9:7b:21:09:ff:ed:dd:e9:a5:1e:80:bb:2d:1e:
cd:a5:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:40:02 2024 by rpki-client on console-fra.rpki-client.org