Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/NOQzUR_OJGx_rycG3xwaq--UwsU.roa
File: NOQzUR_OJGx_rycG3xwaq--UwsU.roa (raw, json)
Hash identifier: JSfXS+fmw4Cb8dZCrB+6kB0DXv44DNwYJaaByDTCdiM=
Subject key identifier: 34:E4:33:51:1F:CE:24:6C:7F:AF:27:06:DF:1C:1A:AB:EF:94:C2:C5
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018CCA287F83CC1BB5B0F53107714B3B6F59
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/NOQzUR_OJGx_rycG3xwaq--UwsU.roa
Signing time: Tue 02 Jan 2024 12:31:40 +0000
ROA not before: Tue 02 Jan 2024 12:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400587
IP address blocks: 2a0e:1c80:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:7f:83:cc:1b:b5:b0:f5:31:07:71:4b:3b:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 2 12:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34e433511fce246c7faf2706df1c1aabef94c2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:b4:f6:88:32:7c:8c:75:48:5d:75:05:c3:
8a:28:c1:9d:ee:16:80:c1:2b:df:0c:2b:af:e5:8b:
60:af:5b:22:4c:2f:88:82:f4:56:59:55:dc:30:60:
75:a1:85:48:a7:f4:d5:b0:21:3a:14:7e:0f:3f:95:
8d:77:3e:9d:18:3c:0c:cb:70:cb:66:85:ab:92:17:
2d:25:a9:6d:6b:55:34:45:1b:7d:17:a4:ee:8c:a9:
ef:6c:26:8f:62:ae:99:ff:7f:3b:b7:f0:20:d3:ce:
1c:3b:9e:3d:12:76:c5:3c:10:07:77:f1:60:0a:6a:
be:3c:30:1f:07:cc:44:a8:02:2d:59:3f:25:b0:e2:
92:ce:06:6d:10:b2:20:4e:d2:76:36:60:3f:e6:41:
9f:e7:fb:71:f2:2d:de:af:f8:9c:9c:a0:31:db:b1:
59:01:04:71:8a:a0:f3:6b:b5:82:74:8b:79:94:42:
d4:69:60:5a:e2:08:38:24:dd:c4:8e:8d:0f:48:4e:
0b:aa:b8:28:0c:51:88:33:0c:12:e9:34:f3:d6:51:
ec:09:57:c4:9a:fa:01:87:f3:37:44:b0:3d:36:bf:
d6:8c:96:83:3d:e4:44:10:ab:db:e5:5d:06:73:9e:
52:15:5b:8c:48:23:ba:da:37:d1:58:44:44:4a:50:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:33:51:1F:CE:24:6C:7F:AF:27:06:DF:1C:1A:AB:EF:94:C2:C5
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/NOQzUR_OJGx_rycG3xwaq--UwsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:17::/48
Signature Algorithm: sha256WithRSAEncryption
65:10:67:0f:68:ec:b3:7c:cb:a3:d7:91:98:ca:5f:72:14:90:
c3:1c:08:b6:19:ad:e9:b6:c7:c2:4d:c8:4b:21:19:4e:e1:64:
15:b7:1d:ec:c7:bf:c4:ab:24:fb:aa:ae:b4:a4:6f:af:81:83:
9b:36:0b:33:ac:bb:55:85:f3:ef:48:fc:50:45:23:5c:8a:a9:
63:f1:42:ee:be:4c:8b:ae:f2:9c:f3:0d:9f:ca:c4:55:f2:64:
9d:43:ec:30:9d:7a:88:22:94:ec:05:e4:6d:35:04:37:f3:45:
98:76:d9:b5:16:fc:03:26:b1:32:da:f2:a1:eb:6b:29:ff:50:
fa:30:e3:2b:96:ca:f2:ec:ae:1d:1e:af:b4:89:95:37:1a:1f:
fd:d8:2c:0b:7b:ec:13:ac:1a:e8:ea:b9:7c:37:66:3c:51:58:
ef:cf:ed:c1:72:e6:74:76:32:91:f0:a4:d5:7b:b9:fb:88:7b:
03:50:00:4a:76:0e:bb:5a:22:00:09:83:42:64:fc:99:ce:cc:
a0:79:d1:50:62:05:47:0c:77:b3:ba:49:17:96:52:8a:7a:f1:
e7:74:9d:5f:1a:40:18:81:21:cd:0f:36:fd:9c:ac:d0:ad:5d:
d9:90:cd:69:18:03:f9:30:0f:48:87:63:1b:66:2d:af:fa:d8:
b4:76:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:00:18 2024 by rpki-client on console-fra.rpki-client.org