Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/MobINerBVuQmP-SIz5bmUV8BPPo.roa
File: MobINerBVuQmP-SIz5bmUV8BPPo.roa (raw, json)
Hash identifier: 6a2BmmDaX86zgOFsxT/j31kuD+dJU0v6H6ycoDKtjU0=
Subject key identifier: 32:86:C8:35:EA:C1:56:E4:26:3F:E4:88:CF:96:E6:51:5F:01:3C:FA
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019423D6F0F17E4FE2394C0C84C9455CB443
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/MobINerBVuQmP-SIz5bmUV8BPPo.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205933
IP address blocks: 185.147.64.0/24 maxlen: 24
185.147.65.0/24 maxlen: 24
185.147.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f0:f1:7e:4f:e2:39:4c:0c:84:c9:45:5c:b4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3286c835eac156e4263fe488cf96e6515f013cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:3f:44:92:99:3f:e9:87:a6:31:13:25:28:
87:6a:cc:93:c2:43:0d:37:47:3c:95:d6:b1:f5:d9:
f9:f0:d4:1f:64:06:0a:11:bf:b8:89:ae:c7:7a:fd:
44:f0:cd:ce:97:9c:05:64:93:9a:14:05:65:24:09:
ce:51:42:05:7b:38:92:95:ba:99:dd:02:f6:f5:1b:
4e:4a:1d:f2:a1:ff:60:f2:f4:c5:70:ce:ac:79:ed:
42:b3:8a:2b:c9:6f:00:27:19:9f:78:84:c8:ab:f4:
7f:3e:50:70:44:57:2d:c1:d0:06:9c:8f:27:91:a4:
76:00:ad:f7:a1:83:7f:f8:43:d0:80:c6:aa:d9:13:
93:4d:93:d6:07:27:54:59:36:fc:8e:8d:6d:6f:87:
c1:5c:e0:f4:3c:a7:14:9f:04:71:c8:76:77:66:3d:
a0:28:12:04:21:68:a5:66:92:74:6b:57:d7:ac:e4:
ab:db:a8:0d:99:df:0d:54:0d:e4:84:01:1b:36:6a:
8d:ea:63:7f:d7:a6:13:4b:0a:0d:95:3c:ab:bc:b0:
da:41:54:da:35:9e:0f:5a:8c:e7:1c:19:90:f6:54:
4b:bd:e6:d7:ba:a0:f7:ff:57:b6:0e:75:69:68:63:
a4:a6:cf:c5:44:d8:03:2d:05:55:d0:63:64:3a:8d:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:86:C8:35:EA:C1:56:E4:26:3F:E4:88:CF:96:E6:51:5F:01:3C:FA
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/MobINerBVuQmP-SIz5bmUV8BPPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.64.0-185.147.66.255
Signature Algorithm: sha256WithRSAEncryption
88:dd:d1:6d:19:2c:e2:91:99:73:0f:20:cb:33:6e:9b:83:24:
e4:45:d4:38:69:0f:76:0e:4b:c7:f1:64:ce:ab:09:1e:99:e9:
92:4d:ae:93:c8:ce:d3:61:c0:3c:de:96:54:c8:d8:91:e0:ac:
2f:83:eb:71:92:dd:bf:eb:d1:14:56:00:43:b4:f3:0f:d6:11:
df:c8:6d:07:2a:7c:22:63:ef:09:32:f3:f7:cf:c0:ee:29:d9:
f0:d4:24:eb:e4:51:77:34:30:82:a6:97:cb:ca:30:e6:80:87:
70:3b:e4:b8:c4:ea:27:ad:23:51:dc:be:2c:1d:e2:2f:13:f0:
a3:31:14:5e:ae:b2:25:df:4b:ce:4c:0c:83:04:e0:1a:b9:15:
77:e3:cb:b4:ef:7c:9f:77:b8:25:aa:d6:9b:cb:48:1c:56:35:
f1:f1:da:04:01:4f:17:c4:dd:c8:c4:a0:b9:86:a8:5b:d7:11:
73:9b:78:8c:f2:7e:8f:8f:19:cc:2f:b1:20:fc:e3:19:1b:96:
5d:45:45:1a:6e:8f:59:79:d1:3c:12:46:66:13:5b:3e:3d:2f:
72:cc:87:ee:92:48:97:9c:ae:87:54:75:77:2d:37:d6:b7:51:
72:79:70:56:aa:03:88:bd:ef:48:e3:e5:e0:62:58:c1:69:9c:
08:a1:fe:6f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj1vDxfk/iOUwMhMlFXLRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjUwMTAxMjE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjg2YzgzNWVhYzE1NmU0MjYzZmU0ODhjZjk2ZTY1MTVmMDEzY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQY/RJKZP+mHpjETJSiHasyTwkMN
N0c8ldax9dn58NQfZAYKEb+4ia7Hev1E8M3Ol5wFZJOaFAVlJAnOUUIFeziSlbqZ
3QL29RtOSh3yof9g8vTFcM6see1Cs4oryW8AJxmfeITIq/R/PlBwRFctwdAGnI8n
kaR2AK33oYN/+EPQgMaq2ROTTZPWBydUWTb8jo1tb4fBXOD0PKcUnwRxyHZ3Zj2g
KBIEIWilZpJ0a1fXrOSr26gNmd8NVA3khAEbNmqN6mN/16YTSwoNlTyrvLDaQVTa
NZ4PWoznHBmQ9lRLvebXuqD3/1e2DnVpaGOkps/FRNgDLQVV0GNkOo0wuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDKGyDXqwVbkJj/kiM+W5lFfATz6MB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvTW9iSU5lckJWdVFtUC1TSXo1Ym1VVjhCUFBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAa5k0AD
BAC5k0IwDQYJKoZIhvcNAQELBQADggEBAIjd0W0ZLOKRmXMPIMszbpuDJORF1Dhp
D3YOS8fxZM6rCR6Z6ZJNrpPIztNhwDzellTI2JHgrC+D63GS3b/r0RRWAEO08w/W
Ed/IbQcqfCJj7wky8/fPwO4p2fDUJOvkUXc0MIKml8vKMOaAh3A75LjE6ietI1Hc
viwd4i8T8KMxFF6usiXfS85MDIME4Bq5FXfjy7TvfJ93uCWq1pvLSBxWNfHx2gQB
TxfE3cjEoLmGqFvXEXObeIzyfo+PGcwvsSD84xkbll1FRRpuj1l50TwSRmYTWz49
L3LMh+6SSJecrodUdXctN9a3UXJ5cFaqA4i970jj5eBiWMFpnAih/m8=
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:56:58 2025 by rpki-client