Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NQZQI8FMBPZqf3TgjyjNSfzy3dA.roa
File: NQZQI8FMBPZqf3TgjyjNSfzy3dA.roa (raw, json)
Hash identifier: V5rl4I7sGtJW3XIIXns3rronUcFSjNs1e4PwwWFy/hc=
Subject key identifier: 35:06:50:23:C1:4C:04:F6:6A:7F:74:E0:8F:28:CD:49:FC:F2:DD:D0
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B730A93C6338FE26386B39D63B9593
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NQZQI8FMBPZqf3TgjyjNSfzy3dA.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15962
IP address blocks: 90.64.0.0/16 maxlen: 24
92.180.192.0/18 maxlen: 24
2a01:c840::/28 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:a9:3c:63:38:fe:26:38:6b:39:d6:3b:95:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35065023c14c04f66a7f74e08f28cd49fcf2ddd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:1f:97:7f:6b:9a:62:3e:65:3b:3f:40:3a:
27:69:f1:e2:6f:ca:3d:d0:b1:82:6b:9c:40:fd:8f:
61:b0:d1:79:34:5e:99:de:38:e1:37:e4:c4:2a:b8:
7d:26:b8:95:57:e6:c9:3f:64:de:de:34:af:f4:39:
b8:08:95:9e:f5:58:4c:2a:f5:a5:a4:e6:31:21:8a:
9e:35:d5:fb:88:7d:38:87:32:06:dc:36:78:7a:f2:
5d:36:e2:61:0c:ad:f7:1f:d9:c0:ec:03:ec:06:4c:
68:b2:10:83:28:d8:b1:4e:54:b7:d3:21:7b:89:40:
e4:16:e1:2d:10:70:f3:7a:13:ee:1c:73:be:94:0b:
9b:ed:8d:6c:b5:9c:05:c1:9a:62:85:10:1c:89:70:
6a:47:80:03:f7:9d:3b:19:6b:87:c3:d6:d8:54:10:
f0:a0:22:a4:18:8e:da:70:aa:8a:28:00:b4:8b:7a:
6c:15:e1:7a:29:a4:f6:f1:d1:b0:8b:0b:b6:9b:8a:
2c:08:65:36:b2:7b:75:75:bf:6c:ae:f0:b3:b5:54:
8e:6f:ce:9c:0a:4c:f8:61:8b:1b:e9:c1:75:ee:1b:
91:2a:de:27:23:3f:3f:07:9c:d8:80:c3:90:82:38:
ff:33:0f:44:af:fe:48:00:90:6a:08:83:02:22:cc:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:50:23:C1:4C:04:F6:6A:7F:74:E0:8F:28:CD:49:FC:F2:DD:D0
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NQZQI8FMBPZqf3TgjyjNSfzy3dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.64.0.0/16
92.180.192.0/18
IPv6:
2a01:c840::/28
Signature Algorithm: sha256WithRSAEncryption
85:87:ee:b1:95:80:0f:84:5b:98:cc:3c:c5:4f:ab:da:27:05:
6c:30:3c:19:a2:bb:1a:a1:31:a1:50:f3:61:13:51:55:b4:73:
6f:f9:d0:1c:ca:a1:f8:80:d0:8f:89:97:5c:75:88:15:bd:50:
3a:eb:de:1f:28:f7:e2:f3:27:a6:8e:34:ab:60:ac:5f:f7:08:
fb:73:2f:fd:4d:5b:dc:d8:47:aa:9e:46:09:49:30:dc:7f:4b:
6c:49:b4:25:27:65:b3:c1:4d:56:0a:54:2d:d0:06:ac:bd:d1:
fc:0a:fb:1b:4a:5b:bb:61:0f:d2:3f:5b:ed:59:cb:0b:d3:ca:
e2:87:0c:07:e9:e0:5a:16:22:c0:bc:4c:29:91:f5:a5:3e:21:
9f:4d:2a:39:f6:ce:96:59:7f:32:be:89:c1:2f:7b:12:61:13:
14:11:ae:b5:66:08:d4:c2:d1:85:2d:5e:25:7b:01:73:1b:0a:
c5:09:bf:1e:69:7e:0b:0b:33:ef:03:a5:be:07:6c:11:23:1c:
1e:57:70:52:80:5b:d2:ab:0e:a0:fb:ed:ea:c3:5c:54:87:a8:
1f:ff:c5:a3:d3:15:39:8b:bc:5b:b7:64:d8:f6:c6:ff:2c:6c:
17:ef:63:2d:a8:ea:59:bb:f6:3c:ae:8a:e6:a7:9f:69:2d:05:
f8:0e:32:a4
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzDtzCpPGM4/iY4aznWO5WTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjQwMTAxMDYzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA2NTAyM2MxNGMwNGY2NmE3Zjc0ZTA4ZjI4Y2Q0OWZjZjJkZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ8fl39rmmI+ZTs/QDonafHib8o9
0LGCa5xA/Y9hsNF5NF6Z3jjhN+TEKrh9JriVV+bJP2Te3jSv9Dm4CJWe9VhMKvWl
pOYxIYqeNdX7iH04hzIG3DZ4evJdNuJhDK33H9nA7APsBkxoshCDKNixTlS30yF7
iUDkFuEtEHDzehPuHHO+lAub7Y1stZwFwZpihRAciXBqR4AD9507GWuHw9bYVBDw
oCKkGI7acKqKKAC0i3psFeF6KaT28dGwiwu2m4osCGU2snt1db9srvCztVSOb86c
Ckz4YYsb6cF17huRKt4nIz8/B5zYgMOQgjj/Mw9Er/5IAJBqCIMCIswoVQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDUGUCPBTAT2an904I8ozUn88t3QMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvTlFaUUk4Rk1CUFpxZjNUZ2p5ak5TZnp5M2RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAWkADBAZc
tMAwDQQCAAIwBwMFBCoByEAwDQYJKoZIhvcNAQELBQADggEBAIWH7rGVgA+EW5jM
PMVPq9onBWwwPBmiuxqhMaFQ82ETUVW0c2/50BzKofiA0I+Jl1x1iBW9UDrr3h8o
9+LzJ6aONKtgrF/3CPtzL/1NW9zYR6qeRglJMNx/S2xJtCUnZbPBTVYKVC3QBqy9
0fwK+xtKW7thD9I/W+1ZywvTyuKHDAfp4FoWIsC8TCmR9aU+IZ9NKjn2zpZZfzK+
icEvexJhExQRrrVmCNTC0YUtXiV7AXMbCsUJvx5pfgsLM+8Dpb4HbBEjHB5XcFKA
W9KrDqD77erDXFSHqB//xaPTFTmLvFu3ZNj2xv8sbBfvYy2o6lm79jyuiuann2kt
BfgOMqQ=
-----END CERTIFICATE-----
Generated at Sun May 19 21:17:40 2024 by rpki-client on console-ams.rpki-client.org