Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/NbaGosj9udq1NNkEJRWiRZuuNGA.roa
File: NbaGosj9udq1NNkEJRWiRZuuNGA.roa (raw, json)
Hash identifier: R/qISyh/iD0h7f4511XJszH1s3fmk7+XoLbpt9mb0U4=
Subject key identifier: 35:B6:86:A2:C8:FD:B9:DA:B5:34:D9:04:25:15:A2:45:9B:AE:34:60
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 0190542ED80B7D0E60F16A8DD4E238772904
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/NbaGosj9udq1NNkEJRWiRZuuNGA.roa
Signing time: Wed 26 Jun 2024 10:54:34 +0000
ROA not before: Wed 26 Jun 2024 10:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204252
IP address blocks: 185.109.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:2e:d8:0b:7d:0e:60:f1:6a:8d:d4:e2:38:77:29:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Jun 26 10:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35b686a2c8fdb9dab534d9042515a2459bae3460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:ff:ef:ed:f4:38:a0:ac:f0:7a:f1:67:2c:
f8:e8:0c:21:7f:3a:34:43:79:f3:9f:99:8c:58:56:
19:cd:ea:b7:6e:bc:c3:77:44:4f:26:1a:5e:54:b2:
bd:cd:f5:95:99:25:5b:16:f9:4a:3a:c8:7c:41:7d:
16:ee:81:28:26:e8:77:dd:df:28:35:38:c9:a5:35:
1a:0b:2f:ad:77:c4:b5:73:3d:53:4c:e1:02:87:90:
47:15:e0:98:56:2c:c6:1d:67:20:2a:f0:93:68:a9:
4c:0d:30:b9:50:f2:e2:d6:08:a2:1e:11:26:cd:77:
6b:97:81:1b:9a:4b:61:3f:ff:8d:9c:37:4e:07:ef:
e2:86:cd:14:a1:ab:da:bd:c6:2c:61:10:c1:96:e0:
91:64:ca:42:43:4e:7b:80:43:ee:32:70:22:9e:63:
9d:08:56:39:b3:4f:11:eb:5f:d7:51:8d:26:73:7c:
0c:ef:0f:7e:31:39:21:45:aa:eb:be:b4:ce:14:8b:
f6:12:e5:54:ef:8d:fe:f8:79:18:76:e8:8f:cc:ad:
80:82:85:2f:f7:fa:4c:1f:20:b7:d1:c9:57:5d:4a:
50:8a:68:be:cd:d8:48:fb:08:3c:f9:c0:f9:81:ff:
43:9a:cd:4c:14:95:7a:74:c5:60:d1:ce:86:74:1a:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:86:A2:C8:FD:B9:DA:B5:34:D9:04:25:15:A2:45:9B:AE:34:60
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/NbaGosj9udq1NNkEJRWiRZuuNGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.180.0/22
Signature Algorithm: sha256WithRSAEncryption
86:bc:b8:4f:4b:80:08:14:01:f5:fe:80:73:76:eb:7e:24:59:
3f:0d:91:aa:b1:02:19:a8:4d:8c:e6:a7:cd:bd:d2:58:0b:0c:
ad:2f:fd:2c:24:71:b8:4b:9b:91:fe:71:0e:08:e7:cc:4c:60:
85:d3:81:13:e5:af:b0:52:4a:b3:a1:32:10:ba:ec:bd:4c:c1:
ae:be:4e:13:cd:e3:5f:e9:bc:e4:80:4d:71:80:4b:6e:3c:9b:
37:58:e7:5c:ef:a4:a5:f1:47:b4:8e:eb:0f:e9:ad:50:7c:47:
49:b5:f3:10:9e:3c:1e:98:12:41:5d:86:40:69:7d:80:f1:73:
c7:ae:37:c0:34:af:16:e9:89:1c:34:02:5b:07:6e:20:eb:bf:
7a:b2:4d:73:e6:c0:0d:f1:ab:43:fa:72:0d:d8:55:dd:cf:19:
03:3d:7c:d8:70:bc:39:81:6b:dd:5c:74:69:af:62:f5:9e:11:
f7:fd:51:60:34:aa:8a:ae:d4:71:d1:24:b2:e6:c9:f9:51:bb:
6a:fc:da:66:2b:33:6b:94:68:26:34:f7:b0:d7:81:11:62:d1:
b6:f1:a1:1a:64:d5:95:1f:f1:73:dd:60:6c:cb:d1:70:64:e3:
7b:9e:e9:b5:a5:39:95:cb:ec:7d:a3:6b:f7:54:47:15:cd:b1:
45:83:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:59:10 2024 by rpki-client on console-fra.rpki-client.org