Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/lJ3ZPi004eXO28hVs7xB7jNUBVg.roa
File: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (raw, json)
Hash identifier: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=
Subject key identifier: 94:9D:D9:3E:2D:34:E1:E5:CE:DB:C8:55:B3:BC:41:EE:33:54:05:58
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCB1EE11D9788910B7BE2415BD5FD
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/lJ3ZPi004eXO28hVs7xB7jNUBVg.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200247
IP address blocks: 80.120.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cb:1e:e1:1d:97:88:91:0b:7b:e2:41:5b:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949dd93e2d34e1e5cedbc855b3bc41ee33540558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:af:28:fb:bf:aa:b9:49:a5:ea:5d:cf:5d:
09:a1:d4:58:7b:45:2b:c3:2d:91:53:c5:61:07:ed:
32:76:d3:e1:61:d8:67:48:9d:3a:43:23:c5:0f:b8:
4b:6a:9a:dd:e4:e0:7c:d9:d7:91:d4:c2:1a:6b:63:
8f:de:96:21:06:40:25:ad:e1:ea:d3:e4:d2:52:98:
16:bd:01:ea:2a:0c:7b:3a:ed:79:25:03:24:b7:c4:
77:7a:3d:98:e7:95:77:e1:1b:fc:b2:4b:a1:1b:21:
b6:52:85:34:75:d6:73:15:92:4c:38:72:8f:8d:40:
5e:c4:6c:42:7f:0d:fe:71:e6:4d:e1:fd:8c:0c:b5:
94:38:7e:ee:3e:d8:67:8b:ab:22:7f:4a:91:51:60:
b7:b3:e8:27:02:9c:80:21:99:f8:92:2f:20:30:51:
8e:15:80:ab:d5:c4:fd:2e:41:59:01:81:b7:64:da:
9c:ac:37:89:c4:fc:26:1d:40:a4:92:f8:d8:68:b8:
23:72:b1:b3:57:33:28:35:a9:05:98:b1:84:a5:78:
1e:ed:44:1c:6d:dd:61:9e:c4:2b:24:f9:7d:36:8e:
3b:4b:ca:2a:ed:d8:9c:68:55:7c:c0:2c:20:d3:9f:
74:54:d9:89:7c:c3:c1:23:7c:ba:d4:3b:69:ec:ab:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:D9:3E:2D:34:E1:E5:CE:DB:C8:55:B3:BC:41:EE:33:54:05:58
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/lJ3ZPi004eXO28hVs7xB7jNUBVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.8.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a3:5f:35:70:ad:f3:5a:6e:eb:4b:95:b2:68:0a:a6:2c:42:
e4:b0:28:00:03:63:a3:d8:db:72:16:29:01:40:90:ee:e2:93:
16:ee:9b:fa:53:c5:d6:08:60:75:88:9b:6b:06:57:cf:2e:7a:
80:af:fb:92:dc:d7:ed:01:09:2b:54:aa:45:fa:81:08:21:50:
6f:c1:02:27:a6:c0:ec:23:d7:ca:60:02:83:5c:65:18:b1:8a:
05:1f:c8:1c:1a:42:68:eb:33:3d:ff:f9:2d:87:82:6e:ba:e1:
37:94:2b:e4:5a:a5:7a:99:5c:33:b3:f4:c6:a6:81:75:5a:c9:
80:c4:81:92:49:a9:53:ec:f5:75:fc:f8:e1:9a:07:89:b0:8b:
bc:79:47:33:36:4e:62:7e:29:79:70:9f:7b:b9:94:7c:1a:c5:
b6:7a:7f:11:8e:3c:2f:b4:ad:0c:a3:17:68:03:db:60:ad:5d:
a1:3a:b9:b2:05:cd:0b:e1:f5:7f:22:d0:88:aa:49:13:ae:5e:
b0:d0:98:a0:68:cc:5d:dc:54:ac:02:03:65:e8:1f:05:22:81:
a7:9d:77:7d:99:d4:e9:b8:58:93:12:24:78:1c:48:26:78:6a:
2b:b5:2f:7f:c0:45:3f:01:a5:47:06:89:54:0b:52:ee:90:f8:
1c:41:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:19 2025 by rpki-client