Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa
File: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (raw, json)
Hash identifier: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=
Subject key identifier: 72:82:98:81:38:34:53:2A:AB:E2:8F:B4:6C:A5:8E:3F:C3:CC:63:54
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC6409E871034C1922EA395CB9E50
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34905
IP address blocks: 80.120.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:40:9e:87:10:34:c1:92:2e:a3:95:cb:9e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=728298813834532aabe28fb46ca58e3fc3cc6354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:ab:0f:29:19:93:3e:87:6d:7f:8a:6a:24:
01:a2:79:45:43:bd:fe:a4:3b:59:08:7f:64:31:2d:
f7:1e:91:d2:a4:ca:75:99:e0:85:bc:63:96:c2:32:
0f:6b:ca:2e:9d:b8:02:a1:50:38:36:9f:4b:bc:eb:
d6:4f:1c:dd:94:0a:0d:03:6c:7a:de:3b:6e:ac:24:
05:80:34:72:a0:ac:1f:12:d4:65:60:cd:b6:6f:6a:
8c:6a:58:4f:98:db:02:85:1a:ab:70:67:5c:88:5e:
bc:17:71:7b:55:8d:cf:b3:bf:83:5e:85:f4:2f:5b:
71:8e:f4:f7:8a:35:e5:29:b1:1e:cf:ad:ea:7f:2b:
ea:62:3f:1f:27:88:53:57:47:3c:c5:cf:56:0b:60:
e0:c7:98:45:d4:ea:8d:47:cd:ce:db:9a:fc:1d:9f:
69:ae:53:b7:62:08:87:61:74:c4:02:3f:2a:dd:98:
ac:28:ca:51:4c:1a:d7:ec:74:01:87:12:1b:a2:69:
90:75:5e:a6:ad:55:ec:3a:13:75:d9:47:86:0b:72:
0a:8c:b0:ac:ca:2a:ea:9c:bc:bc:59:2f:6b:0d:3f:
04:68:fc:c6:3c:54:20:85:99:d1:6c:b6:ce:7d:a3:
7d:7c:d9:21:1d:8a:50:a0:86:1c:bb:e4:67:42:35:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:98:81:38:34:53:2A:AB:E2:8F:B4:6C:A5:8E:3F:C3:CC:63:54
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.58.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4f:93:d2:66:16:38:b6:34:88:e4:97:31:c9:95:b8:02:a8:
a4:60:7c:6c:d2:7d:26:15:c7:77:ce:d7:64:fc:c9:8a:2c:3b:
3a:47:1b:85:16:84:b7:04:79:a8:77:ef:a9:5e:5e:1c:5f:5e:
e0:d7:b5:06:92:5d:4a:d6:43:37:26:9d:0e:5a:11:84:94:3d:
9e:00:fd:5b:19:47:d1:f3:bb:3e:b6:63:81:06:bf:ac:77:19:
c5:5c:7e:32:6e:2d:ad:5c:e4:c0:8a:42:0f:86:83:93:73:ca:
fd:28:dd:ce:95:8e:d9:6a:24:8f:09:aa:60:44:a4:58:2c:5a:
94:9c:b0:5a:a8:db:04:8b:d3:b2:e0:62:ca:28:6a:de:ad:11:
9b:66:3c:1d:84:d8:07:8f:99:eb:27:e9:39:87:05:73:3f:f9:
42:2e:4c:2e:08:29:a7:9e:c7:6b:dc:6b:20:8c:01:0a:7c:1b:
99:7c:51:6e:61:b0:62:8e:31:61:a0:7c:65:41:ec:1a:14:f5:
54:91:df:a1:7a:84:50:03:c8:09:1a:9b:1c:1b:55:0d:37:b9:
12:34:18:fe:05:00:57:15:a7:ce:42:4c:1b:63:44:62:6c:0f:
3f:39:27:bd:30:53:ce:5e:e3:76:85:51:f8:c5:b6:e1:51:3b:
d7:5d:3b:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8ZAnocQNMGSLqOVy55QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjUwMTAyMDk0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjgyOTg4MTM4MzQ1MzJhYWJlMjhmYjQ2Y2E1OGUzZmMzY2M2MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6WrDykZkz6HbX+KaiQBonlFQ73+
pDtZCH9kMS33HpHSpMp1meCFvGOWwjIPa8ounbgCoVA4Np9LvOvWTxzdlAoNA2x6
3jturCQFgDRyoKwfEtRlYM22b2qMalhPmNsChRqrcGdciF68F3F7VY3Ps7+DXoX0
L1txjvT3ijXlKbEez63qfyvqYj8fJ4hTV0c8xc9WC2Dgx5hF1OqNR83O25r8HZ9p
rlO3YgiHYXTEAj8q3ZisKMpRTBrX7HQBhxIbommQdV6mrVXsOhN12UeGC3IKjLCs
yirqnLy8WS9rDT8EaPzGPFQghZnRbLbOfaN9fNkhHYpQoIYcu+RnQjVjgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKCmIE4NFMqq+KPtGyljj/DzGNUMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvY29LWWdUZzBVeXFyNG8tMGJLV09QOFBNWTFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHg6MA0G
CSqGSIb3DQEBCwUAA4IBAQCJT5PSZhY4tjSI5JcxyZW4AqikYHxs0n0mFcd3ztdk
/MmKLDs6RxuFFoS3BHmod++pXl4cX17g17UGkl1K1kM3Jp0OWhGElD2eAP1bGUfR
87s+tmOBBr+sdxnFXH4ybi2tXOTAikIPhoOTc8r9KN3OlY7ZaiSPCapgRKRYLFqU
nLBaqNsEi9Oy4GLKKGrerRGbZjwdhNgHj5nrJ+k5hwVzP/lCLkwuCCmnnsdr3Gsg
jAEKfBuZfFFuYbBijjFhoHxlQewaFPVUkd+heoRQA8gJGpscG1UNN7kSNBj+BQBX
FafOQkwbY0RibA8/OSe9MFPOXuN2hVH4xbbhUTvXXTsJ
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:57 2025 by rpki-client