Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/pmob96zXbDAhKR7Wz6RPvLXoY-A.roa
File: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (raw, json)
Hash identifier: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=
Subject key identifier: A6:6A:1B:F7:AC:D7:6C:30:21:29:1E:D6:CF:A4:4F:BC:B5:E8:63:E0
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 0194266C40FC8AC32676F75F559365FBFE5C
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/pmob96zXbDAhKR7Wz6RPvLXoY-A.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49037
IP address blocks: 151.0.48.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:40:fc:8a:c3:26:76:f7:5f:55:93:65:fb:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66a1bf7acd76c3021291ed6cfa44fbcb5e863e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:a1:6e:ec:7b:07:2d:c9:23:48:ac:29:a0:
6a:28:90:e1:bf:c1:d6:09:c2:67:31:b1:53:d0:12:
87:16:42:7d:ed:0a:23:e1:f8:ba:44:98:ed:72:cb:
b8:11:c8:10:1b:68:4e:e1:32:8b:4d:53:e3:3d:10:
14:14:90:76:95:d8:58:3d:30:e3:75:f1:c9:50:65:
95:bb:37:e3:64:c6:57:53:27:5b:ba:b8:cb:ab:df:
cb:2b:b9:9b:5a:dd:f8:01:35:b9:de:4c:90:a9:ff:
29:d7:ab:97:8a:a4:f3:e9:86:85:5e:b6:d3:55:67:
21:91:d0:d4:04:80:b2:18:06:49:77:7d:65:14:8f:
7d:10:e6:e7:74:85:27:35:84:36:5f:da:ad:10:f0:
d8:e3:dd:15:5c:c1:03:3a:69:1c:0c:d8:56:4d:73:
38:9b:c6:95:60:10:6f:31:d8:7a:11:96:58:2f:cd:
4b:d2:c3:df:99:2b:9c:2a:10:8d:2f:76:04:74:2d:
e3:90:0c:4a:6d:c9:58:d6:18:c3:51:d8:29:1e:dd:
0f:b8:4a:84:17:b6:5f:91:42:ab:25:bf:eb:92:71:
74:c4:32:08:a2:26:1e:2d:f6:78:a6:94:37:11:5e:
3d:07:15:bd:8e:f7:21:7f:98:60:40:96:1b:71:76:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:1B:F7:AC:D7:6C:30:21:29:1E:D6:CF:A4:4F:BC:B5:E8:63:E0
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/pmob96zXbDAhKR7Wz6RPvLXoY-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.0.48.0/22
Signature Algorithm: sha256WithRSAEncryption
69:a7:b3:a2:87:d8:a7:54:92:b4:d8:b6:f9:53:c1:d6:df:8e:
1a:cc:8b:61:44:42:05:f2:7b:48:a9:16:2b:3c:c2:d8:8d:1b:
7e:3c:a1:1c:ba:ee:cf:0e:24:31:f4:28:4a:73:e1:36:55:34:
7c:ea:37:59:3d:ea:51:45:32:73:e5:b1:b6:56:99:86:68:43:
83:f4:9e:d1:67:00:f1:6a:9e:c9:9c:2f:41:3e:b5:0d:bc:71:
c9:9b:e6:85:5d:07:3c:98:6c:a6:01:e4:a0:d9:f5:7b:50:3f:
07:0a:43:02:73:ed:e2:80:75:d3:ec:ea:82:24:57:75:31:7b:
58:94:bf:ca:07:70:77:15:f8:64:ca:a6:42:c8:84:23:5d:b8:
7b:2a:98:76:6f:6e:da:d2:c2:64:93:6e:88:48:1f:5d:d8:0f:
e0:8a:1d:76:c2:75:55:97:3d:95:6c:15:37:05:a0:ab:9c:4d:
0f:20:07:f1:db:b1:18:71:38:6d:4e:04:ab:f0:fd:b4:1f:27:
19:0c:f9:dd:e7:45:8c:07:57:1d:67:fc:f5:42:68:1c:98:a1:
e0:09:74:9e:84:26:3a:7d:97:f3:cd:68:2e:d4:e5:12:5b:7e:
b8:3e:63:9e:66:a7:bd:56:4f:e7:2a:b1:74:b0:12:88:05:f8:
28:21:45:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:32:50 2025 by rpki-client