Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa
File: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (raw, json)
Hash identifier: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=
Subject key identifier: A0:CA:4C:9A:84:39:D0:90:6A:BF:98:1F:50:B2:E5:91:56:7C:EE:44
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0198253151560209D54ABD2BC678BFADF396
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa
Signing time: Sun 20 Jul 2025 00:17:25 +0000
ROA not before: Sun 20 Jul 2025 00:17:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10122
IP address blocks: 5.150.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:25:31:51:56:02:09:d5:4a:bd:2b:c6:78:bf:ad:f3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jul 20 00:17:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0ca4c9a8439d0906abf981f50b2e591567cee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:69:96:7c:82:e5:cb:76:2b:c5:b5:bf:e0:
e2:1c:f3:4e:dc:5a:f4:aa:ce:76:6b:76:d3:a8:25:
17:8c:45:b0:24:7a:a0:da:72:19:3a:d0:26:a4:fc:
eb:44:7a:43:f4:7a:90:fc:92:5d:12:7c:31:74:ba:
54:69:d2:1b:a9:94:b9:57:66:0d:a3:49:7c:1e:a3:
92:9c:5b:60:ae:d8:86:2f:dc:04:70:2b:7a:67:03:
0a:04:8f:c1:12:c0:55:9d:4d:a7:d2:ce:2f:b2:f0:
6c:fa:3e:bd:f5:46:f8:7f:57:9d:57:19:b3:e0:0f:
b1:bd:d2:1d:27:fa:22:2e:f4:82:d4:a5:5c:62:05:
ba:f2:8f:6e:01:12:96:19:d9:6b:53:04:12:ef:46:
25:2d:98:15:df:b7:23:ba:42:5f:f4:b1:df:71:eb:
1e:93:31:1c:2a:28:b9:3d:ac:12:15:aa:98:a6:4a:
ee:eb:30:b5:40:4c:47:ea:ee:75:21:c0:cc:03:47:
37:c9:2e:a2:c8:16:5f:3a:2d:e6:47:4b:b3:cc:b1:
17:de:06:f8:ab:5f:68:b8:93:2c:37:24:6d:83:28:
b7:1a:ed:3e:2e:ef:96:a2:ef:a6:8f:cc:cb:63:f5:
fd:05:15:d3:08:36:5a:96:61:96:fc:4e:57:04:49:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CA:4C:9A:84:39:D0:90:6A:BF:98:1F:50:B2:E5:91:56:7C:EE:44
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e3:69:f3:e5:5d:24:da:41:8f:4d:91:cb:02:f6:fd:8a:e3:
d2:7f:9f:21:db:85:29:4e:68:0f:57:88:6d:ac:21:09:3c:c1:
f8:39:e9:67:c7:1a:70:00:d3:8d:07:e1:db:ee:c4:8c:10:0c:
98:22:06:61:b4:9b:7d:b0:9c:f8:7f:95:ab:b2:14:13:83:51:
71:79:9b:95:b7:44:c0:0a:d7:c6:36:50:cc:99:f1:ab:fe:6a:
73:5f:12:6c:90:d8:94:44:76:ef:6a:fb:57:41:03:fa:0e:2a:
a4:b5:8a:5a:4e:9f:98:cf:88:f9:97:4d:c0:5e:d7:0a:ef:1a:
37:88:a1:fe:f4:02:6e:64:15:4e:42:cc:45:f8:8c:cb:54:e0:
54:3c:44:3f:57:87:47:a6:59:6b:39:f1:6b:bd:77:82:f5:cd:
1e:a8:53:1a:19:d9:99:9a:5c:93:52:ac:cb:5c:af:c0:8a:11:
9a:53:af:b9:3c:85:86:ec:d6:74:87:2b:0c:04:be:7f:1d:43:
61:12:e2:00:d7:d2:04:da:dc:88:98:8b:ca:0d:3e:b7:5b:37:
57:d8:d5:d9:f9:d5:80:2d:96:31:c5:2e:95:c9:8c:db:57:49:
65:07:c1:e7:99:bc:f6:2a:88:13:9d:0e:03:05:ce:74:7e:b2:
f6:9c:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:41:11 2025 by rpki-client