Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/OsT-YBp3DAavsitz7NLsTwnK23M.roa
File: OsT-YBp3DAavsitz7NLsTwnK23M.roa (raw, json)
Hash identifier: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=
Subject key identifier: 3A:C4:FE:60:1A:77:0C:06:AF:B2:2B:73:EC:D2:EC:4F:09:CA:DB:73
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCD7C24DEDAFFB5860711133EBEF5
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/OsT-YBp3DAavsitz7NLsTwnK23M.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203518
IP address blocks: 80.121.192.0/22 maxlen: 22
80.121.193.0/24 maxlen: 24
80.121.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cd:7c:24:de:da:ff:b5:86:07:11:13:3e:be:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac4fe601a770c06afb22b73ecd2ec4f09cadb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:27:68:8b:d3:41:de:ec:f3:a4:f8:0f:8b:
b0:e4:32:d0:b4:ee:36:07:6b:e5:71:55:77:94:2b:
ca:ba:b5:02:6b:99:e8:d9:38:ff:56:98:b9:82:80:
4a:5e:d8:08:d7:97:86:35:6b:92:d3:33:39:34:b9:
02:06:67:c8:e6:18:1a:4b:48:fe:95:b8:6e:0e:7b:
1f:de:f5:f4:f9:dc:cb:5f:31:9d:c1:84:1d:d8:92:
b0:7c:a5:5b:3a:4e:fb:a5:76:a3:ad:b7:f4:05:8c:
de:0b:f8:94:d0:e5:d5:e5:f7:fb:67:e5:ce:62:d5:
23:0b:d2:ea:7c:5e:06:aa:36:52:f7:07:ac:a1:58:
df:54:ea:4e:5b:29:f3:2b:98:7e:13:3e:21:be:a1:
14:a6:38:48:b1:b4:74:74:8a:f3:b3:1b:6c:81:d0:
f4:b9:01:b9:0d:31:70:32:1d:0e:0f:61:6d:89:20:
0a:8b:56:8f:fb:b2:6c:d8:4b:c3:5b:ae:6e:45:b7:
63:ff:9d:59:9b:59:0e:35:00:23:86:4f:f4:fd:63:
c1:d9:b5:e5:c3:24:b1:bb:0d:6a:17:e2:f1:fb:32:
c6:e1:c4:a5:c1:38:a9:32:b0:d2:bd:8d:0d:f5:2f:
93:66:f0:04:35:1b:65:1f:15:87:fa:91:1d:9a:b4:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:FE:60:1A:77:0C:06:AF:B2:2B:73:EC:D2:EC:4F:09:CA:DB:73
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/OsT-YBp3DAavsitz7NLsTwnK23M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.121.192.0/22
Signature Algorithm: sha256WithRSAEncryption
27:36:2c:b8:18:4a:7c:0d:a8:33:5d:6f:5f:65:eb:4e:30:fd:
ed:50:d9:87:68:37:83:f0:e1:56:05:05:1c:7f:2e:12:e9:f3:
46:67:b7:4b:4b:7f:4c:97:17:c5:59:dc:3b:b6:84:03:4c:bc:
1a:79:01:59:37:ef:99:f6:ce:af:f6:4f:48:f6:fb:0f:3b:72:
51:67:4b:fc:bf:31:49:44:b1:5b:44:2f:af:79:e4:4d:2d:d8:
2b:7c:5b:3b:d1:bd:ba:1a:8d:5c:01:9d:cd:93:f0:ca:c0:ab:
3a:40:e8:aa:ef:5b:47:bc:7a:0e:3b:27:b5:a0:2d:a6:2e:18:
6b:be:70:73:56:2a:23:85:7b:c8:30:9a:c4:fb:ac:a8:5f:7e:
a7:57:9a:55:bb:fd:ff:6a:45:3d:ba:f7:4e:8f:b6:35:c2:52:
1e:85:1c:89:bb:55:ae:33:47:d9:46:3c:64:f5:e9:f5:dc:73:
b9:41:5b:04:a4:9f:98:4a:f3:8a:ae:01:a4:03:14:c6:c7:39:
6c:a6:58:13:df:0c:1a:b6:c1:fd:9d:57:27:49:fd:78:c6:82:
37:4b:b3:a6:fc:1d:5e:be:04:99:60:54:3d:f8:60:6b:af:0c:
84:24:33:52:d5:71:ae:66:d6:f5:29:4f:cf:91:ae:58:11:80:
41:ca:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:09 2025 by rpki-client