Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/TRV1zvMwN77u4mbYXqSf5mMtgyk.roa
File: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (raw, json)
Hash identifier: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=
Subject key identifier: 4D:15:75:CE:F3:30:37:BE:EE:E2:66:D8:5E:A4:9F:E6:63:2D:83:29
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 01942823EFA589E438BE1938A4258D7F2EBA
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/TRV1zvMwN77u4mbYXqSf5mMtgyk.roa
Signing time: Thu 02 Jan 2025 17:50:31 +0000
ROA not before: Thu 02 Jan 2025 17:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47216
IP address blocks: 185.119.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ef:a5:89:e4:38:be:19:38:a4:25:8d:7f:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: Jan 2 17:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d1575cef33037beeee266d85ea49fe6632d8329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:4f:a8:52:e1:58:80:ca:5f:89:b7:08:ad:
5b:b4:57:ab:d7:08:68:3f:e1:e1:f6:32:44:ab:da:
4e:bf:f4:8a:f3:56:98:60:f1:35:7d:65:61:a8:42:
69:17:2b:e8:06:b3:b3:1c:e5:65:7e:70:79:d5:bb:
60:f1:b8:d6:33:5d:8e:25:79:48:46:c9:78:a6:69:
4c:65:fd:77:21:cb:b2:25:95:47:5b:bb:8e:a9:0c:
39:bd:27:70:3d:60:d0:c6:9b:b4:3c:71:77:6c:f1:
a4:e1:60:03:c4:77:ad:dc:dd:97:be:15:86:f9:21:
bb:8c:ce:70:f4:9e:50:d7:13:81:7a:0a:68:cb:ac:
0a:7e:e1:c6:72:4c:66:95:20:60:a8:c0:c0:73:6e:
39:20:dc:10:76:47:19:bc:a1:ef:ad:8c:5a:07:ab:
6e:8b:7c:88:d3:f9:a0:dc:cf:f3:25:d9:19:1f:cb:
47:9d:65:f1:ca:de:5a:c9:51:f7:8b:e8:56:ad:cf:
d2:17:37:a4:e4:bd:cb:8c:9e:e5:24:de:68:18:c1:
b0:0a:da:14:09:bd:80:a1:d5:ba:ec:50:e0:a7:84:
22:ce:c8:b0:ef:ca:95:a6:e6:9c:3f:9e:b2:bb:75:
14:24:9f:ef:47:dc:9d:ba:a7:8e:4f:1e:c5:1b:74:
c8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:75:CE:F3:30:37:BE:EE:E2:66:D8:5E:A4:9F:E6:63:2D:83:29
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/TRV1zvMwN77u4mbYXqSf5mMtgyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.199.0/24
Signature Algorithm: sha256WithRSAEncryption
25:88:02:1f:0b:06:48:b6:79:32:00:66:be:2d:8e:d3:03:aa:
6d:89:f9:4e:a7:b9:95:bc:d6:98:cb:8b:24:22:43:24:aa:14:
8e:0f:75:fc:7c:6b:d3:4f:8d:d6:e2:b6:6b:3a:19:3c:8c:1d:
04:66:55:02:f9:08:93:a8:e8:5e:e6:3e:08:d3:f8:a6:ad:87:
72:ab:58:3a:12:3c:c4:b5:6d:2f:d6:26:ea:09:39:99:e4:00:
b4:9b:c2:64:e5:20:b6:23:3b:59:24:32:3e:77:b8:85:6b:c8:
ca:af:7c:e7:99:e8:15:f4:86:a2:56:36:e2:61:da:7e:04:49:
78:e3:c9:d9:61:e9:5d:0e:60:de:48:6c:50:c6:60:6e:70:4f:
99:50:1d:0d:0b:de:72:a5:e7:ab:ef:76:7f:c6:c5:2d:e1:12:
13:08:3c:f5:3a:a5:dc:2d:11:5b:c8:93:56:1a:45:45:a9:50:
aa:f8:cc:4c:3c:7c:40:6a:23:03:4b:8a:3b:a7:1b:c9:f8:75:
de:fd:a0:d0:7d:30:9e:b4:26:1c:65:50:d8:45:36:ad:a6:a0:
cb:e5:7c:09:d9:c4:8a:52:34:f1:77:ba:28:c9:97:22:f2:f3:
9f:57:bd:02:7c:df:0a:a9:71:d6:d3:46:08:50:a9:4d:64:b6:
43:1b:d2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:44:30 2025 by rpki-client