Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NoQQo7-js6L12fR0RacWq8GG0sQ.roa
File: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (raw, json)
Hash identifier: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=
Subject key identifier: 36:84:10:A3:BF:A3:B3:A2:F5:D9:F4:74:45:A7:16:AB:C1:86:D2:C4
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 01942747DF123C713FD1F86003566C446AA1
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NoQQo7-js6L12fR0RacWq8GG0sQ.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 2a04:ff00:500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:df:12:3c:71:3f:d1:f8:60:03:56:6c:44:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=368410a3bfa3b3a2f5d9f47445a716abc186d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:ba:ae:85:74:eb:eb:e1:2e:98:13:4c:2c:
18:a4:89:84:5f:11:bb:84:e1:61:a2:21:e7:1b:78:
23:af:cc:ef:48:83:16:18:44:11:a8:0c:31:d8:f9:
b8:79:41:3b:b8:8a:4d:e5:f1:0c:da:7a:7a:b7:f9:
e9:fe:0f:5c:a9:d8:f6:cd:ff:74:6d:14:af:83:d8:
c2:82:01:92:b4:b8:ef:01:61:ce:d9:e4:8a:3b:4d:
7b:05:65:f5:7c:7b:91:45:20:21:31:12:bb:f2:05:
a4:0d:79:ae:27:e3:89:29:75:e6:9d:b6:51:b6:dc:
55:2d:98:b8:77:4e:2a:a9:05:2d:44:35:82:a8:89:
23:48:ab:21:34:24:4b:37:68:a8:f3:fb:29:87:79:
4e:22:e3:96:3a:72:31:73:3c:ba:23:e7:c1:a1:7d:
98:ab:a9:68:79:78:30:37:d7:75:bb:85:64:02:b9:
fa:66:2e:a1:e7:ac:cf:6f:04:be:ca:33:93:94:66:
58:87:06:df:ef:64:8b:52:57:87:8a:2d:b6:c1:b9:
54:5f:1a:b0:20:64:e2:25:00:ff:af:f4:04:ec:03:
bf:9a:72:23:53:b4:b3:0f:da:52:90:83:77:eb:b9:
86:e4:1d:8e:ab:a5:96:7f:2a:b6:2d:3c:b7:80:f8:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:10:A3:BF:A3:B3:A2:F5:D9:F4:74:45:A7:16:AB:C1:86:D2:C4
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NoQQo7-js6L12fR0RacWq8GG0sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:500::/48
Signature Algorithm: sha256WithRSAEncryption
8a:7e:19:6c:49:13:91:c3:94:fe:64:8e:24:29:c0:ea:95:d3:
12:fb:36:47:d0:2a:1a:bc:ed:95:4b:53:e3:68:40:ab:8f:17:
89:5f:8a:13:07:57:b8:eb:94:6f:48:7a:c9:91:13:8d:0e:93:
c8:b3:e5:7d:a9:99:c2:80:c7:e8:03:ec:03:d9:ac:e1:cd:63:
56:32:17:31:c2:e9:7e:3d:08:68:6a:e6:1a:2a:55:02:45:50:
29:6f:6b:7d:32:f8:96:1a:aa:e9:d9:f2:e0:d8:6f:42:ef:a7:
27:57:c6:63:21:49:bb:8a:16:9d:11:93:20:98:d2:43:c3:72:
fe:37:a8:81:a1:25:26:e2:8d:4f:04:62:73:b2:26:4b:b2:c6:
3d:cc:b4:fa:4e:94:96:d9:2f:e7:75:2c:10:4e:29:2d:be:46:
69:0a:22:a6:79:58:41:eb:ad:9d:ef:c4:9f:1e:71:10:9f:76:
3c:43:92:82:64:40:47:f3:96:02:11:d8:e4:7d:11:ea:8f:12:
76:0f:c3:76:bb:4f:9d:9d:2f:a7:65:74:0c:ea:66:27:e8:5a:
4f:d1:4e:24:3b:df:e0:92:71:ef:1d:9f:d6:c6:6e:0c:62:74:
c6:3a:2f:e1:7e:6d:00:28:59:8f:ca:94:64:dc:ee:e8:61:c1:
7d:ed:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:07:41 2025 by rpki-client