Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/NZQ0L-BPS0Y-K9fE7LOD7s8tw9w.roa
File: NZQ0L-BPS0Y-K9fE7LOD7s8tw9w.roa (raw, json)
Hash identifier: Mj6bkc9gX6h0bSoz2c+PfFjRmWD71Z+l8mpfsa0iLDo=
Subject key identifier: 35:94:34:2F:E0:4F:4B:46:3E:2B:D7:C4:EC:B3:83:EE:CF:2D:C3:DC
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 018CC3B70A41159C216A1CCA985A69F26F6F
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/NZQ0L-BPS0Y-K9fE7LOD7s8tw9w.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209281
IP address blocks: 185.163.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0a:41:15:9c:21:6a:1c:ca:98:5a:69:f2:6f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3594342fe04f4b463e2bd7c4ecb383eecf2dc3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:ff:15:a8:f7:86:d2:77:8b:9c:87:4b:b9:
d3:dc:c6:a2:32:82:43:4a:04:85:76:d1:93:25:cb:
5c:6e:07:77:7b:f4:11:38:8f:11:e1:93:64:9a:3b:
dc:39:da:a8:c4:c3:57:fb:f3:c4:ad:3f:fb:39:4b:
e4:42:57:dc:59:08:7e:ef:c2:e7:52:cb:1d:ed:31:
42:71:7a:d6:1f:d5:0f:e4:12:7c:52:97:fa:d3:a1:
30:f4:92:5d:0a:9b:70:2f:5a:4e:98:9f:f4:c8:8b:
7f:5f:09:b1:d8:96:3b:28:36:e7:04:fb:75:8f:75:
5b:3f:88:5b:17:c2:ee:86:de:cd:05:f1:8e:cb:e1:
4a:2d:da:95:90:6f:4a:22:07:17:14:3c:24:c3:ea:
66:5e:1c:e4:dd:c2:aa:89:88:a3:3e:05:6d:21:c7:
82:b5:9f:a1:ee:15:bd:84:8a:29:75:b1:ff:87:47:
38:a0:cf:2b:61:20:0d:6b:86:f8:44:ab:c1:5f:e8:
b5:b9:d5:15:c1:5b:12:d3:81:32:8e:a4:3c:4e:d9:
a2:8e:62:5a:1b:52:5f:0f:c5:b9:a7:0e:ef:58:52:
17:5c:fd:b3:50:40:de:ee:9e:4e:ed:1a:f2:64:4c:
41:4b:b6:c9:84:ab:27:e2:63:27:4f:ca:9d:33:0c:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:94:34:2F:E0:4F:4B:46:3E:2B:D7:C4:EC:B3:83:EE:CF:2D:C3:DC
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/NZQ0L-BPS0Y-K9fE7LOD7s8tw9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
65:8c:ca:78:0f:a4:03:46:e4:ef:77:4f:05:91:f5:1e:b5:30:
a0:2a:a5:52:86:39:d0:5d:79:3c:85:d1:a4:b5:bc:22:7d:56:
44:30:3e:85:be:9d:43:0d:ef:64:91:e6:4e:f0:db:72:30:d3:
13:c3:60:ff:bb:c7:d4:6c:83:e7:0d:bc:c9:fc:29:50:4a:05:
bf:6a:69:c6:9d:da:68:04:8f:dc:c5:28:c4:d7:af:6a:a5:d9:
05:d7:ae:c7:44:6c:52:9d:fc:37:7c:a5:86:52:df:ca:39:b9:
84:b2:30:09:4b:92:d0:bd:57:ee:2c:d6:c6:01:80:b4:1a:1a:
2f:e8:4d:e1:30:ce:11:63:93:30:a4:70:6f:61:94:11:61:62:
ac:3f:92:c1:b7:25:d9:fc:78:c7:79:9a:06:28:e7:97:ac:06:
5b:e0:82:62:a8:6b:02:a0:fb:36:5f:00:6d:85:5d:a6:af:b9:
61:2d:55:18:da:1c:14:9a:81:ad:27:54:e1:b7:a9:5b:e4:ab:
1f:dc:58:01:29:cb:70:8e:d9:84:5b:5a:f0:d9:63:38:3f:59:
00:21:80:94:6c:0f:c8:52:ba:32:9a:08:e2:d7:ac:37:63:f0:
01:81:39:38:f2:ba:e8:dc:fd:3d:d2:34:92:c1:16:44:8e:bf:
1c:2c:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:34:32 2024 by rpki-client on console-ams.rpki-client.org