Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/nsR-FHMgYoIigkPbTiT6lNDlZy8.roa
File: nsR-FHMgYoIigkPbTiT6lNDlZy8.roa (raw, json)
Hash identifier: c0jjTSM4tHUERKnu0cTOiMIYdX9tT2SvDNkppVmt+YE=
Subject key identifier: 9E:C4:7E:14:73:20:62:82:22:82:43:DB:4E:24:FA:94:D0:E5:67:2F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8DED545AB83DBACD1C4B454525F3
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/nsR-FHMgYoIigkPbTiT6lNDlZy8.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199980
IP address blocks: 193.192.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8d:ed:54:5a:b8:3d:ba:cd:1c:4b:45:45:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec47e1473206282228243db4e24fa94d0e5672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:4c:90:b2:37:8f:6f:67:14:f6:55:f7:61:
89:8e:1e:dc:e1:ff:6f:03:21:36:3e:ad:c3:f5:34:
c9:66:26:14:ba:e2:b1:c2:af:89:e5:a8:ac:9e:d4:
fc:a9:26:f9:3f:5f:a5:69:ed:0c:1a:d1:71:03:6a:
a2:7d:4c:68:13:48:5e:d2:82:28:d8:00:22:c7:f4:
a0:30:72:2f:4c:1f:a8:e0:c0:2b:61:a8:85:c7:c4:
71:34:3b:04:ac:9e:dc:fd:37:9a:92:c9:ab:1d:ce:
6b:56:08:33:7d:23:eb:c2:0c:33:16:f5:30:70:d8:
84:56:27:4d:bf:37:6f:bf:7f:67:b8:bc:ad:d0:1e:
c3:73:4a:67:fb:f8:6b:12:0f:d5:f9:a5:2a:f6:b3:
d6:d3:76:c9:b6:c1:74:51:82:04:c2:2c:41:fa:1b:
43:e0:d9:0d:11:69:55:42:2f:25:d0:86:6c:f2:00:
c7:97:b3:02:ee:52:46:9c:55:f4:3e:ea:4c:0e:ac:
be:d6:cc:44:11:35:1c:26:c5:6f:e9:07:86:86:f1:
25:f6:ea:9e:8f:83:e6:d2:25:59:b2:00:2b:fd:d6:
09:2c:07:f0:7f:7f:af:f1:b0:ca:6f:06:98:7f:c1:
1c:d1:d5:81:5c:8a:67:88:42:0c:1b:3c:fd:25:fe:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C4:7E:14:73:20:62:82:22:82:43:DB:4E:24:FA:94:D0:E5:67:2F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/nsR-FHMgYoIigkPbTiT6lNDlZy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.174.0/23
Signature Algorithm: sha256WithRSAEncryption
55:62:ed:32:03:74:92:13:57:8f:4f:c4:39:29:5d:72:85:5b:
52:20:af:db:b6:65:97:aa:02:b2:99:cb:59:0f:2c:42:3d:ac:
ff:8b:80:88:5d:94:d9:cb:69:c2:4d:70:9e:8c:8a:49:26:d1:
cf:53:e0:d3:3b:01:01:84:44:5c:72:c0:85:fc:c9:96:76:56:
d8:39:32:2d:69:95:f3:09:ce:56:cc:b7:ae:ba:c0:d4:a8:5d:
6a:9b:d9:e2:83:49:fc:76:b3:a9:83:3f:b9:82:93:1f:e4:4c:
92:28:77:6e:c6:28:73:ac:f1:4b:56:a5:64:bb:f4:b3:28:aa:
6e:95:62:da:a4:12:34:86:6a:b4:ca:b2:30:9d:27:0e:4e:eb:
c9:5e:a4:f6:87:d3:d2:d6:92:6e:31:e0:76:c6:ca:6a:1f:18:
33:c8:63:45:03:f9:09:bd:eb:60:4f:fb:e6:80:a8:2d:ae:08:
ec:f8:02:a4:d4:1f:56:63:be:ec:c0:bd:31:53:3f:34:b4:58:
00:54:6c:15:39:0d:9f:d0:60:4a:e3:1f:18:2d:66:4a:9d:a0:
4f:a4:6a:6d:10:ea:c6:ec:64:bd:8d:5a:3c:98:22:a9:59:18:
12:12:34:6a:22:09:dc:05:e4:53:19:ff:12:0f:5d:19:f1:27:
9b:59:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org