Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/UMbeRLYaYfBz7ZqoWAVk65ZAKDw.roa
File: UMbeRLYaYfBz7ZqoWAVk65ZAKDw.roa (raw, json)
Hash identifier: CMu3V8810nprnNp2zv9tF8oCmSsSPTpzL8+xyy/5uNo=
Subject key identifier: 50:C6:DE:44:B6:1A:61:F0:73:ED:9A:A8:58:05:64:EB:96:40:28:3C
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA67FF0FDEEC6C583901273D21A51
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/UMbeRLYaYfBz7ZqoWAVk65ZAKDw.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 91.93.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a6:7f:f0:fd:ee:c6:c5:83:90:12:73:d2:1a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c6de44b61a61f073ed9aa8580564eb9640283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:b2:b1:74:bb:e1:c1:07:c3:eb:16:ba:27:
36:29:0f:8e:10:19:24:da:a5:0e:2a:27:1d:f7:ce:
42:14:36:dd:7c:de:8f:96:ae:c9:83:79:fc:82:fe:
ad:d0:0b:39:03:b7:88:6a:a9:bf:d5:20:f9:ce:4f:
1c:54:fd:fa:9b:2a:71:dc:aa:cc:c6:47:c0:f0:c7:
30:35:00:79:7c:2e:b7:8e:6b:af:c6:e9:f8:22:0c:
a8:10:38:6f:ca:42:07:61:34:ac:3e:73:1d:50:18:
4b:f4:a5:51:62:aa:df:c1:de:d6:58:cb:c0:78:98:
98:bc:5f:c6:fa:32:f3:a1:d3:a0:34:a7:48:95:2c:
49:cb:15:e7:b6:c1:b5:47:37:f2:0d:36:bf:90:56:
79:0a:96:ae:53:37:f1:01:11:96:e5:6a:2c:de:21:
f2:70:cf:69:75:d1:d3:cb:a8:b0:fb:2a:01:af:ba:
8d:04:36:7d:ca:93:91:9f:fb:64:5a:54:bf:a8:19:
7c:31:34:a4:c7:ab:d3:2a:85:72:65:46:89:9b:4c:
4e:6f:2f:10:24:6e:1b:7f:0e:55:52:89:1a:35:de:
35:b3:aa:8b:98:b6:13:ed:ef:65:c6:5c:31:f7:f6:
1b:8c:78:13:56:0e:67:34:38:ff:4b:07:ac:1d:b0:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:DE:44:B6:1A:61:F0:73:ED:9A:A8:58:05:64:EB:96:40:28:3C
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/UMbeRLYaYfBz7ZqoWAVk65ZAKDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.155.0/24
Signature Algorithm: sha256WithRSAEncryption
23:39:cf:84:d7:b3:10:1c:d8:e3:b1:72:56:fd:cc:af:3b:71:
8b:40:71:21:8e:9f:8f:a3:0d:40:96:69:11:43:a5:21:50:62:
a0:92:4e:61:a5:3b:69:9a:ef:3d:7d:b3:78:87:d3:6e:df:c7:
8f:59:e2:fd:c8:36:0e:06:d1:1a:a6:5d:11:c2:7a:9d:65:8c:
e6:7f:8a:8d:b7:28:15:fb:3e:d6:28:15:f0:1c:ec:c2:14:b5:
c2:1f:d4:cf:d1:47:e5:1c:58:d7:c6:a4:c8:94:7f:fd:ee:72:
a5:5d:85:44:49:a3:02:01:80:6e:af:12:d3:aa:ef:0e:09:eb:
55:ce:28:5a:ab:84:96:68:72:75:69:92:0b:24:d8:d8:51:c5:
52:fd:82:b2:b1:47:3b:00:fd:c9:bc:38:1c:10:89:18:2b:37:
ed:f7:7b:93:56:b7:8a:bf:be:a9:83:b9:7b:b5:86:63:c8:eb:
74:73:cd:6e:d6:c7:a7:cf:8c:07:56:3c:bd:03:1a:6c:4f:e4:
a0:53:8f:a2:e2:31:3c:6f:89:ae:8c:02:b8:57:dc:21:6c:d5:
24:02:0f:2e:15:bc:6d:d5:cf:81:b6:e0:a4:25:09:fb:6f:c0:
3b:b5:b9:cd:d2:e6:3c:ae:fb:b0:de:11:63:c2:35:1d:03:f4:
61:ba:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:26 2025 by rpki-client