Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/TrtZuni9BXkr6xZOXYLQCg04wuw.roa
File: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (raw, json)
Hash identifier: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=
Subject key identifier: 4E:BB:59:BA:78:BD:05:79:2B:EB:16:4E:5D:82:D0:0A:0D:38:C2:EC
Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial: 019425223599ADD2BD35CF872D626CD6C968
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/TrtZuni9BXkr6xZOXYLQCg04wuw.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41872
IP address blocks: 185.65.168.0/22 maxlen: 22
194.33.98.0/23 maxlen: 23
195.12.40.0/22 maxlen: 22
195.43.56.0/22 maxlen: 22
195.90.112.0/23 maxlen: 23
2a05:80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:99:ad:d2:bd:35:cf:87:2d:62:6c:d6:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ebb59ba78bd05792beb164e5d82d00a0d38c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:0e:fe:41:64:27:1d:04:20:08:ea:cc:60:
f7:df:29:ba:b2:9c:f5:54:6d:b6:d4:99:41:95:c3:
9d:28:36:38:d5:ce:35:59:1a:6b:e8:c9:3b:41:4a:
a4:b4:45:c9:e2:66:bf:41:31:80:6b:95:c4:3e:ed:
e2:dc:f2:db:03:0d:85:99:aa:60:1c:fd:98:24:1d:
f1:17:30:46:35:5a:05:46:c2:5f:fc:91:46:e3:23:
ca:78:ca:c0:03:82:bf:f4:51:35:b3:18:8f:18:f7:
b6:4b:dc:b0:b1:40:7b:33:6e:a1:cf:e8:79:eb:38:
d8:6d:6c:38:ab:f5:e8:ae:84:8e:e4:82:8e:56:a2:
47:41:2c:c2:74:cc:1b:49:83:13:86:9d:20:7f:d3:
2b:13:ce:d2:bd:68:16:4b:47:1c:f7:0a:53:6a:62:
8a:85:c8:d4:65:df:e8:e7:40:65:80:8a:f1:22:d6:
3b:d2:88:30:05:51:23:fc:70:56:1b:91:94:ae:1b:
02:26:fa:dc:b1:1f:61:83:b4:f7:b4:b5:93:91:21:
8a:b6:08:e6:0f:05:81:60:7b:09:17:56:6d:67:86:
a7:78:0a:0f:f2:e2:a1:02:bb:e4:1a:ec:28:b4:36:
2a:f6:e3:cf:44:71:02:f3:da:8e:41:81:fd:03:dc:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:59:BA:78:BD:05:79:2B:EB:16:4E:5D:82:D0:0A:0D:38:C2:EC
X509v3 Authority Key Identifier:
keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/TrtZuni9BXkr6xZOXYLQCg04wuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.168.0/22
194.33.98.0/23
195.12.40.0/22
195.43.56.0/22
195.90.112.0/23
IPv6:
2a05:80::/29
Signature Algorithm: sha256WithRSAEncryption
a3:01:c9:98:bd:bf:b4:c6:f7:e0:ea:81:19:5e:7f:d8:dd:8f:
6a:95:ca:15:8a:c5:e8:f1:de:53:7c:cf:9a:61:1a:5e:07:32:
54:b1:7b:9a:a8:6d:b6:87:38:e2:b1:6d:82:30:ca:2c:03:10:
1b:54:c7:55:7a:a0:24:ae:db:47:83:2f:d5:a0:d7:93:d9:04:
e3:2a:ca:aa:2e:d3:aa:10:28:12:b9:eb:44:82:7c:79:ac:2e:
93:30:16:a0:71:03:34:2c:0b:8f:58:e7:eb:4d:a4:a4:30:00:
df:9d:b8:a1:11:bd:b9:6d:6c:59:9c:12:59:c8:b0:5e:ca:d9:
0b:f2:b9:25:29:cb:bb:45:ff:84:96:36:cd:3c:3b:69:b2:7e:
db:f1:f3:78:db:4c:12:8e:a0:96:37:31:bd:76:eb:d7:35:77:
ef:f7:59:45:be:36:17:ff:1d:66:ba:51:53:d2:f1:e5:c7:03:
e4:11:3e:77:2d:6b:9a:e6:f0:e5:9a:ac:32:b9:68:fd:f7:85:
09:b1:1c:22:32:2a:7b:a4:f0:7d:cc:0b:e1:59:d4:81:d2:16:
81:1a:ec:0f:6c:cf:f4:57:e0:2f:d2:6e:88:79:30:90:2e:76:
3c:7f:45:59:af:e9:e9:28:b2:f0:57:48:55:d4:0e:8a:2f:5c:
9e:1b:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:35 2025 by rpki-client