Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa
File: nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa (raw, json)
Hash identifier: RgiGnVWsGyyBv+tdEC1rHK6Bnf5QcteJnLC2EEE++hQ=
Subject key identifier: 9E:C3:C6:96:54:80:D5:60:9C:D1:26:3A:37:B1:78:32:64:8C:0E:74
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 018CC870265D8B695B051152DEFF5BE63651
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa
Signing time: Tue 02 Jan 2024 04:30:42 +0000
ROA not before: Tue 02 Jan 2024 04:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5607
IP address blocks: 185.110.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 04:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:26:5d:8b:69:5b:05:11:52:de:ff:5b:e6:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Jan 2 04:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec3c6965480d5609cd1263a37b17832648c0e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:a6:a2:78:3d:ba:18:eb:b6:e6:ff:69:31:
22:13:e8:e4:54:97:a7:7b:43:4d:c1:5b:32:6c:f6:
60:e3:61:bc:3f:bb:aa:1e:a5:b3:34:ea:06:28:8f:
cb:1b:c3:ed:ee:e5:03:79:07:34:b5:aa:81:6e:f5:
92:22:c2:9f:ee:c6:da:2d:d6:cd:6a:52:bb:64:05:
a5:fd:e6:a0:54:6b:c1:ee:37:96:09:a9:a1:a5:bf:
5a:ba:f9:44:e0:1b:a9:d3:b2:46:bf:71:7c:01:17:
bd:9f:8b:3f:9f:35:17:7b:16:d6:c8:6b:41:79:21:
0d:b1:e1:74:b6:43:e4:6f:0d:fa:07:56:75:9f:8b:
1b:75:ed:f3:56:be:21:d7:89:eb:27:2a:62:3d:c0:
f6:2d:f6:24:95:e6:8e:de:b4:5a:c9:28:35:c9:dc:
cb:0f:6b:b8:c7:87:57:2c:9f:b4:27:00:16:aa:17:
0d:69:96:b9:0c:2f:58:99:eb:8c:8e:4f:10:8e:65:
9a:17:be:c0:2e:e5:f6:0c:02:87:ac:9a:9c:b7:cb:
34:12:b3:60:1d:37:cd:e6:f5:44:b6:e1:c7:34:7b:
03:0a:00:2f:76:a2:0c:5e:9d:f0:29:4d:81:66:03:
85:cb:78:af:d5:b7:01:d5:8c:1a:e4:85:97:eb:de:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:C6:96:54:80:D5:60:9C:D1:26:3A:37:B1:78:32:64:8C:0E:74
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:bf:81:39:e7:2b:dc:05:26:55:c7:f9:79:ba:6b:b8:2f:d2:
96:74:75:2e:0a:cb:f9:d5:2a:07:18:4c:02:74:5b:c9:13:8a:
9f:04:f9:b6:4c:68:11:df:9c:a5:b3:21:83:b6:8f:5e:24:f4:
c2:8e:9b:91:96:38:19:af:7f:0e:e9:86:27:7c:a5:23:d2:b9:
ae:d2:b9:b3:27:5c:d9:89:fe:9b:3e:01:36:45:e5:cb:d5:f5:
3e:1e:51:1a:27:3c:9e:9c:06:55:2a:7f:90:32:e7:f6:3a:1b:
35:df:aa:40:a6:b3:d4:81:34:12:dc:04:a7:bf:ec:88:e2:d2:
c0:14:47:cc:2d:d1:96:d3:61:b2:94:92:b8:58:80:34:87:19:
8f:62:65:33:df:ba:74:26:8b:2c:ff:28:ad:a5:46:54:49:cc:
d7:b2:4a:ce:94:97:c2:66:2d:bd:f5:42:65:2c:73:6b:78:6b:
9a:81:ee:2a:cc:75:68:8a:47:df:a7:bf:55:c3:d2:2a:27:39:
00:9c:bf:36:93:11:88:45:08:6d:b4:28:6b:17:c8:72:d5:d2:
db:51:41:2a:a3:67:b3:86:27:42:0c:6d:ad:49:a5:fe:94:8f:
85:2f:46:56:51:de:12:c4:c0:e6:52:05:b4:2f:c0:e4:30:db:
a3:07:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 09:23:38 2024 by rpki-client on console-ams.rpki-client.org