Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa
File: ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa (raw, json)
Hash identifier: 9a5DYYLxOiKU0/Lz5D5+BYks2R+Do2ZNkpv4HeNltqY=
Subject key identifier: 02:B8:57:89:99:7F:AC:9E:A3:06:05:F6:3F:36:7C:6A:72:34:5B:2C
Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial: 019425FD3568159EECE7F5F5C38F4B27B30F
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa
Signing time: Thu 02 Jan 2025 07:48:58 +0000
ROA not before: Thu 02 Jan 2025 07:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60515
IP address blocks: 185.88.32.0/22 maxlen: 22
185.88.32.0/24 maxlen: 24
185.88.33.0/24 maxlen: 24
185.88.34.0/24 maxlen: 24
185.88.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:35:68:15:9e:ec:e7:f5:f5:c3:8f:4b:27:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Validity
Not Before: Jan 2 07:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b85789997fac9ea30605f63f367c6a72345b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:b6:7a:61:ec:04:c0:9d:e6:fe:13:96:c3:
b8:d0:6b:7a:36:98:99:2b:ab:c2:b9:61:67:a9:fd:
ab:2a:56:1a:4e:20:b4:ff:03:b2:c8:25:25:a0:04:
18:83:21:74:77:a8:f2:c9:b5:6f:56:ac:15:5f:0e:
53:25:b3:ca:84:04:58:f5:84:de:a4:1f:a0:36:ad:
97:1f:f0:49:a0:b7:8b:7d:16:49:dd:09:69:f6:3a:
90:32:b5:83:c8:c6:5d:be:15:c7:e2:ec:ac:b3:9e:
c3:40:cc:05:82:d8:22:cb:0f:28:2a:55:40:d0:f3:
dd:7c:65:16:ac:7e:f3:d8:9f:46:e2:98:65:10:83:
47:02:55:72:b4:d0:c4:44:d3:63:79:73:9c:f7:0c:
b1:c6:13:7e:cc:7b:b2:e1:ab:b2:fc:f9:09:62:94:
76:fc:22:dc:4f:ec:34:2c:a9:d7:20:15:8c:62:4d:
fd:dd:a0:3f:dd:5b:1f:c1:e3:23:aa:22:78:18:b4:
1c:c1:64:b0:1b:a9:32:7b:e3:a4:ae:38:74:ce:7e:
3d:a2:60:c8:16:2f:7b:97:28:2e:39:1e:8a:c0:7a:
5d:f0:1a:3e:23:9f:66:15:53:65:dd:df:03:1c:23:
c8:1b:11:20:85:05:27:c7:79:cb:6c:38:3e:2c:f7:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:57:89:99:7F:AC:9E:A3:06:05:F6:3F:36:7C:6A:72:34:5B:2C
X509v3 Authority Key Identifier:
keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:86:a8:5d:64:2f:66:5a:51:5a:c7:69:a0:19:bd:e6:84:7e:
3d:c6:f3:9f:c9:e4:40:5e:9d:ac:d9:b2:2d:18:58:d4:7a:3f:
c8:8c:a9:e2:d5:dc:1e:e4:da:73:12:76:35:17:9c:0a:24:c3:
39:6c:e9:73:a0:4a:aa:51:ff:33:e6:b8:87:f5:78:3e:ec:b3:
10:c0:68:6a:5b:fe:ea:f5:78:77:56:42:f0:a0:86:dd:ba:a9:
78:05:f7:22:67:95:e0:5b:1e:64:1e:12:0b:e0:7e:75:1d:52:
af:27:2d:31:4e:f9:5d:db:21:41:7c:50:d0:02:7e:de:c7:44:
7b:be:c4:5b:c0:9a:92:d4:3d:94:73:5d:30:f5:ba:53:1b:79:
7c:c3:c1:ca:5c:0c:dd:18:d5:14:08:87:4b:cc:e5:3c:c5:04:
87:9f:41:19:52:45:3f:53:a8:2e:f6:4a:02:43:e6:dc:22:09:
41:d9:fb:bb:9d:81:36:f6:91:ad:04:64:a0:57:bb:98:63:25:
56:7d:5f:ed:d7:dc:87:df:c9:02:5e:f1:ef:25:2e:25:25:ee:
b7:4c:9b:ce:b9:17:2b:24:33:a2:bf:47:8e:bf:d7:52:3b:37:
3c:b7:9d:ca:4a:ba:2d:d3:b0:c8:92:8d:c3:3c:6d:f8:71:df:
d5:69:fa:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/TVoFZ7s5/X1w49LJ7MPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmQyNmQzYTBiNjkzYTAyOWJjNjJkY2I5ZGRhOTUxOWU0
Nzc2NDAwHhcNMjUwMTAyMDc0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI4NTc4OTk5N2ZhYzllYTMwNjA1ZjYzZjM2N2M2YTcyMzQ1YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJa2emHsBMCd5v4TlsO40Gt6NpiZ
K6vCuWFnqf2rKlYaTiC0/wOyyCUloAQYgyF0d6jyybVvVqwVXw5TJbPKhARY9YTe
pB+gNq2XH/BJoLeLfRZJ3Qlp9jqQMrWDyMZdvhXH4uyss57DQMwFgtgiyw8oKlVA
0PPdfGUWrH7z2J9G4phlEINHAlVytNDERNNjeXOc9wyxxhN+zHuy4auy/PkJYpR2
/CLcT+w0LKnXIBWMYk393aA/3VsfweMjqiJ4GLQcwWSwG6kye+Okrjh0zn49omDI
Fi97lyguOR6KwHpd8Bo+I59mFVNl3d8DHCPIGxEghQUnx3nLbDg+LPfv6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAK4V4mZf6yeowYF9j82fGpyNFssMB8GA1UdIwQY
MBaAFJP9JtOgtpOgKbxi3LndqVGeR3ZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYt
NzNiYjkzMDBmNTc1LzEvQXJoWGlabF9ySjZqQmdYMlB6WjhhbkkwV3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYtNzNiYjkzMDBmNTc1
LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVggMA0G
CSqGSIb3DQEBCwUAA4IBAQA7hqhdZC9mWlFax2mgGb3mhH49xvOfyeRAXp2s2bIt
GFjUej/IjKni1dwe5NpzEnY1F5wKJMM5bOlzoEqqUf8z5riH9Xg+7LMQwGhqW/7q
9Xh3VkLwoIbduql4BfciZ5XgWx5kHhIL4H51HVKvJy0xTvld2yFBfFDQAn7ex0R7
vsRbwJqS1D2Uc10w9bpTG3l8w8HKXAzdGNUUCIdLzOU8xQSHn0EZUkU/U6gu9koC
Q+bcIglB2fu7nYE29pGtBGSgV7uYYyVWfV/t19yH38kCXvHvJS4lJe63TJvOuRcr
JDOiv0eOv9dSOzc8t53KSrot07DIko3DPG34cd/Vafrk
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:14 2025 by rpki-client