Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XCN9FbizIVT5ABEN-A7tA56US5U.roa
File: XCN9FbizIVT5ABEN-A7tA56US5U.roa (raw, json)
Hash identifier: 57X2BMZzn1wdxxks04NAIh97tSuJQFazDHeFw1QMY04=
Subject key identifier: 5C:23:7D:15:B8:B3:21:54:F9:00:11:0D:F8:0E:ED:03:9E:94:4B:95
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0191E0E4AE46BB39E3FC4E9A275F1638A129
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XCN9FbizIVT5ABEN-A7tA56US5U.roa
Signing time: Wed 11 Sep 2024 11:42:48 +0000
ROA not before: Wed 11 Sep 2024 11:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a0d:9440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:e4:ae:46:bb:39:e3:fc:4e:9a:27:5f:16:38:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 11 11:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c237d15b8b32154f900110df80eed039e944b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:9b:d0:1d:19:49:9b:80:c2:31:ec:ba:aa:
a5:15:60:b4:45:da:21:e7:b8:52:a3:62:2d:91:d8:
f7:d9:56:51:f2:59:7b:47:04:1d:28:78:6e:69:9d:
7c:02:12:7a:e3:fe:eb:5a:a3:2d:4f:16:ee:07:6b:
ad:19:a3:a1:fc:a8:e5:49:fc:c0:e2:5e:67:a5:84:
ce:b4:9a:96:90:ff:03:72:9f:8a:7a:61:27:42:d5:
97:71:67:32:e5:16:1f:bd:88:12:c1:cf:c0:a8:e3:
37:50:67:84:6a:91:4a:83:1c:0b:a8:c0:ce:f7:a0:
c8:42:35:13:0c:38:08:5c:93:a4:9d:7d:17:cb:73:
f2:69:3b:d9:4b:81:8b:8e:3e:1a:67:18:be:30:a8:
83:a0:a1:96:bd:11:f2:ef:f7:df:a3:30:34:fc:23:
0f:77:8b:04:b1:64:d6:cb:7f:0e:68:ae:07:17:a0:
92:c7:0b:7b:4a:85:f1:96:b7:30:39:4b:31:75:93:
78:74:e9:d8:66:d0:be:e5:e4:e1:6c:38:72:27:62:
31:f5:e9:f0:22:2c:6f:74:38:47:5f:84:0f:09:a3:
2b:19:79:1b:25:f8:ac:5f:a4:9d:8d:2f:1d:f7:67:
82:3f:c9:c7:28:ae:2f:fb:cc:08:2e:43:7e:d6:b2:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:7D:15:B8:B3:21:54:F9:00:11:0D:F8:0E:ED:03:9E:94:4B:95
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XCN9FbizIVT5ABEN-A7tA56US5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9440::/29
Signature Algorithm: sha256WithRSAEncryption
17:cb:e9:f3:a6:42:87:dd:4e:18:a5:27:78:5b:42:b6:cd:9b:
1a:c8:b4:36:30:42:f7:ed:57:75:75:4d:ce:f2:f3:31:70:9d:
82:f7:3b:5f:70:90:b9:dd:ce:1a:e9:3b:d0:22:8a:83:21:07:
44:32:4b:b9:35:06:a3:f5:12:11:a5:64:fc:bf:85:50:56:0d:
31:c9:8b:76:b4:f3:9b:7b:19:74:56:f4:be:83:86:2b:b9:3a:
63:b7:de:7c:31:05:d5:e2:d5:ba:fc:e1:b9:82:d4:7a:fa:85:
a2:bf:c0:47:b1:88:75:a3:1f:0e:9f:e5:d3:02:f3:45:45:6e:
4a:be:94:44:73:60:84:3a:c3:2e:7f:df:8b:50:4e:29:b4:cb:
99:92:c1:a5:d8:42:a5:c3:d6:58:b0:34:21:ce:cb:79:ab:81:
91:19:56:d2:19:13:6e:1e:0f:5b:60:e9:13:16:cb:61:7a:58:
5c:02:50:2b:5e:91:38:7e:94:8f:69:e0:74:e3:95:aa:49:4b:
43:88:83:c4:4b:6f:70:91:e2:e6:e8:80:8a:aa:d6:9c:97:1a:
1c:ad:d0:06:fd:2e:0f:4d:91:c4:81:b3:b3:b7:c7:58:0f:12:
d1:2c:20:fa:e9:46:56:6c:84:bf:7f:75:90:a5:8e:f2:e1:77:
51:f1:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:29:32 2024 by rpki-client on console-fra.rpki-client.org