Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NuvpaChAgIE7MP3TPjJtNnLbQGk.roa
File: NuvpaChAgIE7MP3TPjJtNnLbQGk.roa (raw, json)
Hash identifier: Ikhun+zn/TLXJepIXPXIvVGiLiQGlk7JLB26oY84wr0=
Subject key identifier: 36:EB:E9:68:28:40:80:81:3B:30:FD:D3:3E:32:6D:36:72:DB:40:69
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 018CC9BC13E4A13624DAA2564041535703DF
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NuvpaChAgIE7MP3TPjJtNnLbQGk.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 143.55.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:13:e4:a1:36:24:da:a2:56:40:41:53:57:03:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36ebe968284080813b30fdd33e326d3672db4069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:d0:c8:22:db:ef:02:0c:be:bd:57:2b:63:
cb:f9:bd:8a:8a:52:43:2d:dd:ad:1d:ce:b8:61:b3:
21:91:cb:ad:cd:0d:ca:19:55:ce:07:02:0b:6b:90:
2a:46:a4:cf:20:70:69:8d:9d:c1:d2:b2:6d:73:3a:
ab:97:c7:8c:df:31:ad:31:6c:b2:20:32:e5:9d:45:
9c:16:c6:dc:9f:5e:22:f4:ad:c7:0a:bd:31:ff:73:
cb:74:3c:56:d4:26:bc:16:e5:5c:ee:18:c6:32:70:
3f:7f:2b:e9:bf:4f:ae:bb:7b:77:a7:6b:ea:ea:cd:
20:1f:95:a5:49:23:0d:74:b7:31:f0:2c:db:84:ed:
98:5d:e0:49:36:74:5e:b3:79:c6:2a:53:c0:11:aa:
e1:be:0a:8e:8e:75:cf:dd:74:32:f0:df:96:d1:24:
ec:64:9d:03:b3:87:92:b2:e8:50:a6:c2:51:de:13:
c3:08:5e:10:e0:bc:2b:5f:00:82:83:df:ce:4f:27:
f4:59:72:e0:43:f0:8d:12:0f:b6:dd:0c:ac:79:3f:
79:ab:23:0b:4d:ac:f6:b1:9f:bc:66:86:6d:51:25:
55:a8:f7:be:c4:d5:da:00:51:78:9d:51:19:4f:52:
aa:44:2e:75:3f:4b:c9:fc:e2:35:5e:71:49:7b:a1:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:E9:68:28:40:80:81:3B:30:FD:D3:3E:32:6D:36:72:DB:40:69
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NuvpaChAgIE7MP3TPjJtNnLbQGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.55.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:19:18:3d:9e:40:59:aa:84:b5:7b:03:25:40:b1:48:4f:ba:
88:ef:32:2a:38:09:d9:04:1b:c2:10:bb:ec:28:c3:d8:fd:c7:
21:5b:c8:01:2e:46:87:b6:0d:4b:fa:68:ab:5c:0a:99:66:c2:
ec:5d:88:2a:20:65:33:ea:86:1c:07:2a:83:88:46:60:7f:f2:
f8:26:29:8a:42:af:cc:98:10:05:b1:86:12:ed:a9:fa:c5:e4:
e6:08:ed:e1:f3:94:91:52:b4:d7:c4:22:e7:0c:6a:fb:79:0d:
5e:41:65:bf:dc:36:24:4d:f6:30:94:60:2a:03:cc:c4:56:ca:
19:c0:40:2d:62:3a:3f:d2:5d:b7:0d:ed:ff:83:48:73:ca:b1:
e6:f5:df:a4:4e:57:f0:ee:86:64:ab:fd:84:45:f9:ec:65:c0:
d5:09:55:27:0b:32:3e:ca:6c:b9:23:c4:d2:ea:a7:e5:44:af:
e4:3b:02:e9:21:12:74:10:e7:21:5b:5b:bc:77:4a:83:a7:62:
a2:8b:7b:0b:42:cb:31:2b:1a:a8:50:a0:bf:3b:17:ab:61:f0:
48:64:e5:f0:e9:88:22:64:54:c1:16:ab:c0:21:d6:75:19:81:
11:7f:bf:a0:f4:3a:7d:e2:7f:7b:4b:0c:a7:78:ad:22:17:97:
33:19:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:08 2024 by rpki-client on console-ams.rpki-client.org