Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/1XFNN30FY5LztZB4dUWgirbtDc0.roa
File: 1XFNN30FY5LztZB4dUWgirbtDc0.roa (raw, json)
Hash identifier: zWUzKQ7Ed4t6mM81e3qEZdfz4Dp4dpX3a0AIwEexBxI=
Subject key identifier: D5:71:4D:37:7D:05:63:92:F3:B5:90:78:75:45:A0:8A:B6:ED:0D:CD
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 019152E057C13C65B23CBA4EB9BF4CC6AF69
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/1XFNN30FY5LztZB4dUWgirbtDc0.roa
Signing time: Wed 14 Aug 2024 21:51:59 +0000
ROA not before: Wed 14 Aug 2024 21:51:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63018
IP address blocks: 217.13.109.0/24 maxlen: 24
2a0d:c740:4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:e0:57:c1:3c:65:b2:3c:ba:4e:b9:bf:4c:c6:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Aug 14 21:51:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5714d377d056392f3b590787545a08ab6ed0dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:0a:8c:e6:40:17:9b:6f:00:10:76:b1:68:
3f:5b:53:ef:8b:80:92:b4:d5:fd:c5:60:ee:d7:19:
18:e4:8b:23:47:a5:2c:c7:7d:5a:42:05:33:51:67:
c7:67:c8:e5:34:7b:c6:b0:01:3c:37:5e:a3:c6:38:
ca:79:3d:82:c4:19:97:e0:30:16:25:52:4c:eb:0f:
c5:02:28:96:70:52:3b:d8:40:3f:8e:2c:a0:f7:4b:
3d:a2:5c:bf:6f:92:13:23:2d:10:90:22:ae:d0:82:
40:7a:31:8b:21:d1:1f:a4:0f:24:61:cc:a1:34:0f:
09:49:ca:71:1b:39:82:f7:16:51:d4:4a:52:eb:59:
70:95:68:f8:60:2d:91:12:7a:4d:32:df:61:6a:6a:
3e:7c:88:00:ab:5e:4a:55:5d:7c:a5:4a:56:30:eb:
54:71:1b:14:db:cb:4e:77:98:91:19:ec:47:c6:f4:
82:b8:9d:0e:03:94:7f:a5:a8:88:16:c3:a0:15:de:
a5:c7:26:5d:92:c8:da:af:72:fa:bd:23:fd:27:33:
ec:6b:88:76:59:e2:07:da:46:0b:08:69:af:84:50:
45:dc:01:cd:8b:2b:d2:ac:81:c7:e2:9d:e0:74:4c:
b8:0e:88:f6:6a:9e:56:b5:a9:bf:17:ca:de:3b:9b:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:4D:37:7D:05:63:92:F3:B5:90:78:75:45:A0:8A:B6:ED:0D:CD
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/1XFNN30FY5LztZB4dUWgirbtDc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.13.109.0/24
IPv6:
2a0d:c740:4c::/48
Signature Algorithm: sha256WithRSAEncryption
ea:2a:d2:f0:34:2c:da:b4:06:f0:e7:4a:e2:2a:09:51:36:91:
5e:1f:59:ca:01:f2:3d:6b:9e:c0:5c:9d:35:bd:43:bd:3f:fb:
b8:31:fb:21:c7:a4:ee:7a:3d:6f:2e:7e:6f:00:65:83:95:81:
8a:7d:6e:e4:db:0a:9e:5d:79:f2:e7:92:f9:a0:a0:82:52:f5:
b0:06:06:a3:2c:6f:54:a0:f7:f6:c7:dc:e1:c2:de:c3:cf:30:
e3:89:6f:51:55:9e:c9:de:f0:2b:41:f5:f9:b0:2b:e0:1d:b3:
13:67:e3:6c:57:c1:98:21:27:46:b1:15:a1:b1:d9:f0:6b:c3:
4b:16:20:2e:7b:43:d9:15:21:a7:f4:70:db:4e:bc:0a:59:f0:
d6:43:1e:7d:4b:af:bb:e8:15:d6:ab:df:30:f8:17:90:b2:b1:
0d:54:72:30:10:f3:73:81:4c:e5:f1:93:82:e4:fb:b7:80:f0:
cd:f0:58:05:cc:cc:ab:cb:1b:8e:1b:30:29:80:53:b6:16:a3:
a5:78:f8:0d:84:40:65:b9:a9:f3:1f:a0:84:5a:c2:22:d2:45:
9c:e3:de:16:79:2a:d6:7b:b9:34:1e:e8:06:2e:5c:d2:05:66:
8a:d6:f7:5d:00:d7:b8:18:a1:82:b6:e0:38:4a:3c:66:c5:9b:
41:94:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:20:06 2024 by rpki-client on console-fra.rpki-client.org