Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa
File: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (raw, json)
Hash identifier: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=
Subject key identifier: 01:16:F9:64:F0:DA:77:91:5F:4D:3E:DD:67:CC:47:67:B8:0C:CB:A0
Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial: 01942748871EDD1DA6FC73517CAC6DA59111
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207231
IP address blocks: 185.25.95.0/24 maxlen: 24
2a0c:85c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:87:1e:dd:1d:a6:fc:73:51:7c:ac:6d:a5:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0116f964f0da77915f4d3edd67cc4767b80ccba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:e9:54:7a:28:82:2b:75:0b:df:fa:77:88:
ce:bd:61:76:20:fb:0e:d9:f6:9b:f3:e8:93:96:f7:
fb:dc:c4:a5:93:c5:05:0d:7d:c3:2c:38:18:3f:25:
eb:3f:d3:3c:80:17:77:ee:11:e5:3b:d5:af:2b:5a:
d5:b4:92:85:21:b6:4b:09:c2:e9:b0:8f:45:91:86:
49:16:fc:f7:f2:5a:db:5d:1f:97:08:d7:b6:ae:04:
5b:ad:32:77:93:77:de:24:7f:f5:16:6e:ee:bf:e7:
f0:03:7f:b4:78:9b:d1:b5:c2:48:32:3c:41:56:8b:
e5:a3:78:7d:45:49:e9:7c:77:96:84:bb:a5:56:7c:
c9:09:17:87:2c:0c:d0:b6:f6:5a:bb:26:76:5d:f0:
a4:86:1e:3d:b7:b4:d9:e2:78:7f:19:c7:2c:f8:8d:
37:2d:2d:19:33:70:5f:fa:bf:19:4a:4a:51:c5:e1:
58:2f:3d:83:6f:fc:00:a2:6f:a7:05:58:86:d5:b3:
d4:be:ff:89:72:60:b3:56:94:ab:e7:40:cb:dd:6a:
e9:7f:cc:e3:2f:cd:a9:10:4d:ea:09:ef:c1:c4:ad:
e3:25:53:52:86:b8:71:3e:b4:ab:2b:dc:0e:ba:6a:
f6:5f:92:c7:2f:b6:d4:eb:41:d0:87:59:60:ef:79:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:F9:64:F0:DA:77:91:5F:4D:3E:DD:67:CC:47:67:B8:0C:CB:A0
X509v3 Authority Key Identifier:
keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.95.0/24
IPv6:
2a0c:85c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:9c:ab:6a:49:42:18:b4:dc:2a:b9:96:29:79:e9:19:06:cd:
d2:05:33:f7:a5:87:ec:ff:51:2c:a9:bd:53:d2:cf:1d:ce:de:
59:1b:11:8b:84:c0:4b:6e:94:7c:56:af:b7:50:0e:5a:cf:b0:
cd:22:f6:d2:14:81:5d:a5:bb:08:d6:ee:0a:dc:16:56:89:24:
fa:20:b3:59:5d:26:a6:e9:be:2e:36:c9:f4:d1:02:fd:b2:45:
a5:f1:11:7a:99:58:55:be:ef:49:88:e8:d1:56:40:d4:11:60:
4c:88:48:6b:c1:0c:47:b0:3b:30:63:0b:a2:90:4a:4a:83:ed:
4c:50:d5:da:7e:4b:fa:c0:0a:c3:53:ab:12:71:6e:f4:ed:95:
1c:fd:2b:af:ff:5b:15:f4:99:83:2f:36:2c:98:43:a6:0d:0e:
ca:4f:ec:55:0a:a8:76:a0:30:bc:a1:1a:00:92:10:e5:f5:7c:
80:1c:6a:d4:58:2f:46:e2:6c:75:4d:cc:27:6b:37:91:fd:86:
71:be:c7:b9:d5:41:21:c6:fe:95:43:40:cc:1c:ea:f3:4d:c5:
1a:4e:05:bd:9c:ed:9b:89:28:14:d6:2f:da:de:64:30:a1:29:
e4:ca:ae:da:e6:55:17:5d:41:4c:54:ef:fd:6c:e4:37:79:cd:
21:75:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:42:26 2025 by rpki-client