Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa
File: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (raw, json)
Hash identifier: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=
Subject key identifier: 50:CC:09:7E:8B:41:57:34:3D:7A:2F:0C:59:94:C5:F8:C3:32:67:DB
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 0197087E779C1A5AB4ABAFAE04B888243F88
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa
Signing time: Sun 25 May 2025 17:29:55 +0000
ROA not before: Sun 25 May 2025 17:29:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213669
IP address blocks: 2a0e:3247:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:08:7e:77:9c:1a:5a:b4:ab:af:ae:04:b8:88:24:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: May 25 17:29:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50cc097e8b4157343d7a2f0c5994c5f8c33267db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:e2:da:29:9e:40:ad:aa:09:fc:b1:02:4e:
a0:e0:0d:59:64:4f:54:86:34:6a:08:3a:37:dc:ae:
3c:67:45:f8:b6:0c:8a:72:1a:46:b2:b6:a4:af:20:
6b:7f:6a:5f:8f:08:fd:c9:c4:35:a3:ab:a8:98:47:
c4:af:bf:16:a8:62:1f:e3:4a:80:e4:74:41:d4:84:
ff:0e:d1:1b:c9:fa:1c:d3:e8:03:5d:a6:11:5d:d1:
8c:67:e8:be:f0:c2:e6:65:28:92:b4:19:a6:28:a2:
45:43:1c:6e:50:55:06:8c:73:07:86:74:e9:0f:44:
40:8b:f8:66:d2:39:d1:35:ca:9a:5a:b8:48:4a:13:
07:c6:2d:79:d7:9f:fa:ba:c8:c1:19:ab:43:1b:23:
40:c4:4a:08:96:94:fc:fe:74:38:ce:1d:6a:95:6b:
54:19:ff:98:ea:0a:8d:67:df:40:b7:fd:44:9a:dc:
4c:1c:cb:14:96:f8:41:71:44:b1:39:af:60:ac:d1:
13:e0:26:a3:ac:3b:0e:30:da:be:2c:d8:64:2b:b4:
35:d3:30:0f:58:78:05:1d:d6:2c:0a:23:6e:8b:b2:
3b:81:79:63:13:c2:56:e3:bf:d7:59:c4:41:eb:3e:
f5:6b:0b:56:82:53:a1:26:9b:44:b0:0a:1f:a0:55:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:09:7E:8B:41:57:34:3D:7A:2F:0C:59:94:C5:F8:C3:32:67:DB
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3247:8001::/48
Signature Algorithm: sha256WithRSAEncryption
68:cd:43:59:dc:80:7f:2b:b4:32:ee:4f:b7:db:25:d8:da:5b:
b9:62:a6:74:6e:3b:93:b8:58:d6:bb:10:37:54:fa:17:c3:b8:
72:51:a0:f5:89:29:be:6f:d5:06:b6:2a:d0:c8:e0:53:c0:11:
d9:2d:9c:b1:3b:37:31:93:f7:c2:d1:54:6e:0e:6e:1f:a4:96:
aa:2b:de:27:a9:b9:fd:9a:21:09:aa:0e:a1:43:c8:fa:41:e1:
bd:49:90:c2:c1:27:eb:b5:1e:6b:4c:6b:12:d2:3a:73:92:40:
6d:66:94:de:65:c5:30:2c:f8:c8:48:df:6f:cd:d6:e7:c4:e0:
40:91:66:d0:cf:f3:95:8f:22:dd:99:ef:ef:a2:5e:fb:d3:36:
93:2a:03:1f:54:64:70:1a:5d:8a:ff:03:58:38:d4:75:39:1d:
ad:37:ce:ca:ab:d8:0f:38:21:33:85:88:75:45:e7:7a:f2:5d:
37:04:cb:1c:7c:82:5f:b8:c6:ad:cf:b4:cc:38:b9:2e:d9:9e:
b4:9c:4e:03:0f:e4:0c:d5:9f:ef:bd:3b:27:ab:1e:eb:83:e1:
5b:22:32:d3:d9:00:f3:e8:ca:fc:30:51:f3:16:6e:9d:ab:65:
4b:61:5a:13:6a:46:94:ca:cf:80:0c:68:a4:4a:de:d8:fe:54:
c3:78:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:29:43 2025 by rpki-client