Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa
File: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (raw, json)
Hash identifier: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=
Subject key identifier: 82:EE:CC:8C:4D:94:BF:3A:D2:D1:71:94:63:A6:F8:88:29:06:D8:B4
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01942444B4D038F0AE85A958D54C9C6854FC
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a03:e140:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b4:d0:38:f0:ae:85:a9:58:d5:4c:9c:68:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82eecc8c4d94bf3ad2d1719463a6f8882906d8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:81:e6:3e:9b:f7:57:c6:d6:16:61:8c:62:
e9:e8:ac:df:3d:eb:a4:17:7d:10:f0:05:51:50:11:
0f:91:3d:cb:9f:2b:86:14:49:06:ea:2b:67:e9:91:
b9:b3:73:87:1f:1f:26:44:ed:01:e3:cb:6f:93:2f:
fa:f3:ce:b5:f2:e7:d4:6c:9e:c7:73:cc:37:e0:79:
12:e9:77:0d:75:4e:27:84:ae:7e:54:45:78:60:38:
1f:09:6f:56:93:6f:f1:81:65:61:2e:16:55:26:57:
c0:db:0b:fb:d9:53:48:a9:ba:e1:31:a4:0a:fb:b0:
26:1c:16:fc:44:af:8a:4f:ae:d6:61:2d:b2:c8:55:
fe:65:7b:2e:9f:6a:22:64:b8:85:e4:63:95:0a:f4:
67:26:c4:42:02:f9:21:81:d1:34:ef:ba:e4:a3:32:
94:65:6d:30:dd:48:bc:18:2b:26:d8:2a:84:ac:f1:
b8:a0:89:27:36:97:8b:42:f6:03:b7:80:dd:e1:ce:
02:15:4a:a0:e9:5c:17:24:b8:53:57:e7:21:08:50:
7f:fc:2f:59:ac:b1:81:d5:29:13:2e:ac:57:59:c0:
08:34:e8:41:5a:82:65:cb:65:bb:e7:aa:4c:3b:33:
a6:74:68:18:8b:e6:e8:65:6d:2d:cd:28:8e:86:09:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:CC:8C:4D:94:BF:3A:D2:D1:71:94:63:A6:F8:88:29:06:D8:B4
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e140:3a::/48
Signature Algorithm: sha256WithRSAEncryption
73:88:03:7e:d7:06:3d:60:36:74:34:32:ff:5b:8f:f7:d3:20:
a2:49:5e:c6:0f:af:55:d9:bf:45:a9:9d:8b:ef:13:e7:1c:a5:
6f:40:0a:4e:62:5e:4d:71:e2:6d:98:cf:5a:22:f8:6f:bf:ca:
00:c0:a0:f7:0b:c6:93:0f:3d:b0:02:4c:42:ec:56:2b:21:cf:
3d:fe:2b:b5:5f:fd:70:15:ad:b7:90:13:80:c5:60:ad:7b:60:
63:20:43:a4:0c:63:96:c8:fb:3b:f8:14:dd:4d:c5:ce:54:1e:
57:d2:7d:7b:31:18:eb:58:e8:6b:84:fd:ea:f4:e7:8c:12:1e:
5c:e2:14:9b:e6:c2:45:7d:50:53:69:11:2d:bf:f5:d9:94:ec:
31:c4:1f:fe:cd:07:c9:e0:1a:c0:a1:d8:e3:9e:b0:e6:d9:ce:
68:eb:51:75:7d:e6:65:60:53:3a:6e:e4:6c:09:cf:ab:8f:ab:
77:6b:b6:ae:8a:22:a1:8b:f5:32:80:1b:d4:e9:b3:da:16:4f:
e3:1e:80:e5:93:45:bc:b0:bf:c9:9a:a5:9c:81:81:30:77:09:
fd:4e:e8:ad:b0:71:27:bd:5c:40:84:da:d2:2e:f2:0c:9b:0a:
03:06:39:21:ca:5b:80:d8:c3:7f:6b:8c:4c:60:6f:98:dd:f8:
dd:33:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:44 2025 by rpki-client