Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/JwcsFNQrZCdoPIC0dUAZcHysppo.roa
File: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (raw, json)
Hash identifier: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=
Subject key identifier: 27:07:2C:14:D4:2B:64:27:68:3C:80:B4:75:40:19:70:7C:AC:A6:9A
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 0196CFA74E0428A7B6259D6CB8D49FF8D117
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/JwcsFNQrZCdoPIC0dUAZcHysppo.roa
Signing time: Wed 14 May 2025 16:36:10 +0000
ROA not before: Wed 14 May 2025 16:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213539
IP address blocks: 2a14:cb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:a7:4e:04:28:a7:b6:25:9d:6c:b8:d4:9f:f8:d1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: May 14 16:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27072c14d42b6427683c80b4754019707caca69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:06:fa:e3:0f:36:67:78:8d:52:22:5f:b2:
ac:be:fa:3c:11:91:8f:4f:7e:a9:68:81:4a:e9:97:
e5:a4:6b:fa:2a:7d:a9:7a:de:a5:c8:39:26:a8:ed:
f7:52:81:42:fe:3c:19:21:2b:56:57:36:3f:e3:4c:
cb:37:99:a2:55:7d:5f:9f:15:95:98:dc:c6:4e:80:
da:50:a1:86:62:7d:9f:33:ea:e5:1a:bc:d0:7d:17:
46:48:44:d4:ee:a0:2f:61:ab:53:f6:36:0b:8f:d5:
2a:b2:10:26:eb:bc:14:14:00:2d:84:5e:f3:7a:73:
83:9f:2f:b8:69:b9:c6:42:39:1b:85:86:bf:bc:31:
9b:0c:4b:41:2a:b3:e8:52:2c:80:90:d2:59:48:cc:
50:34:b2:84:b1:ce:ea:8b:c1:2b:a1:9c:31:91:45:
86:2e:48:17:dd:73:d2:27:a8:4b:6b:8e:b6:bf:b5:
d0:5a:bd:bf:b8:03:b7:02:d9:c4:ec:33:d6:a6:8f:
85:a7:9e:ad:08:d6:5a:76:a6:99:ae:41:a5:78:a2:
41:9d:94:98:52:08:04:2a:03:a9:38:61:42:00:9a:
15:bc:be:4e:ce:56:d9:54:a3:6a:2d:f8:10:9a:12:
8e:f8:52:b7:a0:4e:f8:d3:ca:69:79:df:e1:2f:70:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:2C:14:D4:2B:64:27:68:3C:80:B4:75:40:19:70:7C:AC:A6:9A
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/JwcsFNQrZCdoPIC0dUAZcHysppo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
81:34:62:e0:d9:d8:b1:d0:25:bb:ab:7b:35:02:51:81:36:1b:
57:69:8d:87:bb:5e:3e:7e:1f:43:35:dc:bd:00:5d:ce:05:d9:
d1:b4:d2:f5:c3:b0:9c:28:07:42:c3:01:d6:27:7f:00:6d:40:
7e:33:9c:3b:da:f1:30:3d:b2:4c:ac:41:b2:21:33:09:d1:b6:
4d:1b:8a:39:59:b4:00:06:c1:61:45:06:be:85:d6:9e:e7:e0:
c7:89:84:6f:88:be:d2:53:82:f9:79:1d:1b:fc:1e:05:27:05:
4b:63:e1:e7:8f:74:be:86:81:b1:08:f7:d9:66:12:25:83:3b:
c3:df:ef:45:03:fc:d1:9b:5a:a9:4c:12:63:d0:5c:d2:34:31:
61:ba:d2:03:71:00:5f:9b:51:5e:34:9a:ad:e3:f2:2f:18:74:
34:9d:12:5c:67:0a:16:14:e4:fc:bc:25:f7:62:7e:93:18:43:
56:8c:ea:ef:d1:12:6b:4d:79:e4:ec:0f:52:83:69:49:05:3b:
e2:72:d6:e8:8a:10:16:dc:82:d3:b4:10:c1:34:77:f8:a0:4e:
b2:7a:d5:72:a3:30:99:c7:c9:0d:e1:76:ee:db:6c:ef:ce:f9:
60:8f:87:14:6e:40:f9:7b:cb:25:7c:1c:16:f0:75:36:f8:d2:
97:d0:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:29:10 2025 by rpki-client