Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/NaoxUETI4MRfs7Ku7ZS618oGav8.roa
File: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (raw, json)
Hash identifier: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=
Subject key identifier: 35:AA:31:50:44:C8:E0:C4:5F:B3:B2:AE:ED:94:BA:D7:CA:06:6A:FF
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D6265D87366EBEC9302A0908AA212F
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/NaoxUETI4MRfs7Ku7ZS618oGav8.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43824
IP address blocks: 193.41.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:26:5d:87:36:6e:be:c9:30:2a:09:08:aa:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35aa315044c8e0c45fb3b2aeed94bad7ca066aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:52:e6:90:fc:53:bb:38:e2:37:71:32:11:
f8:cd:53:39:16:68:5a:3d:70:4f:5a:f4:b7:12:f1:
c9:49:35:10:70:00:2d:cf:c6:96:cd:a9:fb:e6:48:
01:58:42:b8:19:d1:79:29:e7:df:0e:34:20:6e:21:
e1:19:d0:29:79:07:30:65:48:82:6d:41:63:d6:72:
e3:0d:7d:16:d4:5e:2c:b8:f9:9c:00:80:65:5a:a7:
7d:c1:34:f3:36:80:93:b3:0a:f1:5b:b8:9c:9f:a7:
18:2e:50:5f:61:d4:f0:a8:6b:5e:b9:cc:0d:08:3f:
ec:14:e1:3d:13:05:18:4b:cb:29:24:de:f5:fb:d8:
e9:2f:76:2b:d1:59:93:de:8d:99:98:3d:ba:fe:12:
13:29:f9:d5:75:4c:c5:0c:63:7b:77:2b:70:19:40:
b1:1b:09:be:09:c6:96:14:76:7a:0e:de:29:05:11:
52:66:48:05:df:c3:13:c2:76:74:c3:f2:dc:b8:c4:
a0:ae:01:52:d9:c8:88:d0:c7:48:fc:b0:ed:bf:75:
0e:9e:ac:40:24:c2:3e:6a:df:bf:75:78:14:05:05:
f4:27:52:22:44:0b:a4:55:b4:4a:8c:0d:f8:1c:3e:
41:4e:ed:07:57:1d:30:84:f0:71:6e:a9:e4:b4:2d:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:31:50:44:C8:E0:C4:5F:B3:B2:AE:ED:94:BA:D7:CA:06:6A:FF
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/NaoxUETI4MRfs7Ku7ZS618oGav8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.217.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d5:03:16:b2:b4:1a:45:2d:1b:9e:a3:2f:38:fb:b2:96:2c:
43:e1:ed:dd:ec:2e:1a:58:67:d3:4b:ba:0b:6f:5b:c5:0d:1e:
d9:d5:c5:71:fd:4e:33:13:03:c6:ad:5f:b7:6f:c5:89:41:3a:
8c:97:27:36:3f:26:99:44:5b:1d:5f:82:36:02:9c:35:d9:d2:
78:20:68:f0:91:2f:fb:cc:09:d4:9b:28:0f:fb:c8:37:d0:bd:
5e:b8:de:39:d7:20:eb:e8:75:18:b6:b4:45:c7:3c:15:11:74:
04:bc:05:c4:be:77:2f:ad:60:ce:3e:df:49:22:66:dc:7d:08:
c5:9d:48:d6:a7:16:2e:a0:18:c9:be:43:ce:89:27:1e:02:82:
bc:26:e3:6c:87:42:5a:dc:b8:fc:eb:81:ef:0f:72:dc:75:5d:
a7:d2:d3:60:47:ac:e7:88:e9:87:15:38:4f:07:e7:c5:1d:6a:
00:45:c7:32:d3:fa:d1:67:f3:90:29:7d:8a:be:74:18:91:83:
df:31:3b:ca:ca:81:ea:60:fb:3d:fe:93:3a:a9:d0:f7:63:57:
6f:23:48:b4:e9:9e:ba:71:30:d3:5d:7d:b5:d6:15:82:36:19:
7b:57:d1:87:0e:dc:6b:33:80:00:47:ac:29:73:2c:19:92:2f:
6f:3b:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:56:14 2025 by rpki-client