Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa
File: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (raw, json)
Hash identifier: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=
Subject key identifier: 35:45:6E:D9:D4:75:8A:87:2A:98:F1:10:FC:3D:9E:FA:AE:9E:4A:7F
Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial: 01942144023B68484747146C11C4E210A7B9
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 160.98.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:3b:68:48:47:47:14:6c:11:c4:e2:10:a7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35456ed9d4758a872a98f110fc3d9efaae9e4a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:19:f4:49:11:a7:97:ee:45:3c:ee:a4:4b:
d5:44:05:fd:6b:c0:7b:d9:44:cd:34:9c:87:a5:1d:
e6:ac:ee:26:29:a8:a2:1d:5e:30:07:55:b9:9c:a0:
d8:a3:5a:a2:a6:7c:87:45:bb:38:09:79:10:73:ea:
24:7d:cf:d3:88:89:e0:00:83:82:b0:a1:ae:a1:10:
c2:37:71:ca:15:70:ff:7c:2e:17:3e:19:69:b4:c7:
3d:c1:15:df:cb:f0:6b:a4:78:59:09:c9:1e:84:c0:
c9:d5:26:da:41:25:95:b4:1e:50:fb:3b:63:74:96:
4c:72:8c:86:d2:ce:0a:93:50:1a:33:a7:a8:34:c2:
ed:bd:7b:b0:1e:c8:dd:c2:2c:5c:5f:ff:f1:42:69:
f2:e4:9c:0e:8f:d7:a5:69:e0:4f:05:45:ee:6e:dd:
cc:1a:71:88:36:de:a9:1c:8c:92:5d:1d:4d:08:2c:
7c:8d:23:59:9f:0b:20:7f:8e:1f:3c:df:6e:16:37:
9f:25:26:1a:80:c1:c8:15:80:92:e7:64:db:87:ef:
55:a7:50:5a:90:e0:ec:f1:2d:ff:92:06:7d:5b:02:
a4:2c:0f:fe:e5:50:37:ef:6a:c9:68:2e:66:66:99:
b2:62:cf:12:62:e6:92:30:72:7f:9f:ba:af:53:1c:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:6E:D9:D4:75:8A:87:2A:98:F1:10:FC:3D:9E:FA:AE:9E:4A:7F
X509v3 Authority Key Identifier:
keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:20:5e:a5:c1:a5:f2:47:da:61:e7:5c:52:3b:39:47:21:bc:
ba:69:b7:f5:94:8c:f0:00:08:10:7f:f2:4e:eb:28:8c:db:bc:
8b:0b:23:87:1b:3d:b1:f4:a2:6c:dc:11:66:86:75:0d:d9:02:
69:28:58:16:66:06:ed:d3:b1:32:f7:d8:54:66:0b:3c:14:be:
34:02:1a:fc:b5:89:6e:84:92:61:ed:4f:7a:bc:f2:e0:63:b0:
ed:94:7e:69:74:d8:f8:be:6e:32:69:21:84:e3:8e:86:9b:b5:
ef:27:11:83:30:0e:53:99:0d:70:f5:50:c3:fb:94:5b:4b:ca:
dc:60:8f:c3:77:9f:40:2b:55:e3:a0:02:54:82:bb:bf:b1:28:
8a:82:97:08:eb:aa:35:07:a3:3f:42:9e:98:97:0f:20:f9:9e:
30:99:8c:c8:01:76:cc:c0:9b:04:1f:e6:9d:e2:2e:4d:32:51:
7b:e6:fe:78:3d:00:0c:9f:b5:84:8a:70:4b:90:ac:bb:9d:fd:
4d:31:dd:4d:b5:6b:bb:a1:b9:8f:3f:d6:5f:59:a1:f4:06:6b:
55:93:19:71:b0:61:dc:a8:61:d7:7c:dc:8b:c4:c8:4a:fb:47:
da:fd:8f:f0:cd:db:22:c5:4d:e8:85:00:1a:4d:e1:70:3e:5d:
9a:f1:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:24:27 2025 by rpki-client