Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JSVJ2MGf76x1SzxAsdX0dvMeM7s.roa
File: JSVJ2MGf76x1SzxAsdX0dvMeM7s.roa (raw, json)
Hash identifier: ZcG+SY0zBmM1qYFbYtR4M4ll3VYwoiXvG5OoGDMTcF8=
Subject key identifier: 25:25:49:D8:C1:9F:EF:AC:75:4B:3C:40:B1:D5:F4:76:F3:1E:33:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019639B6E88F3AEF7E6203C0FEE81E5EC87F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JSVJ2MGf76x1SzxAsdX0dvMeM7s.roa
Signing time: Tue 15 Apr 2025 13:50:10 +0000
ROA not before: Tue 15 Apr 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a0f:2840::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
2a11:5c80::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:b6:e8:8f:3a:ef:7e:62:03:c0:fe:e8:1e:5e:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 15 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252549d8c19fefac754b3c40b1d5f476f31e33bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:00:5c:0f:ac:7b:f7:7a:ec:e7:f9:6b:ce:
33:79:8c:26:a4:7b:0b:78:eb:5f:43:f9:30:94:4a:
28:20:33:d6:72:d3:0b:33:73:24:43:f6:08:4b:1e:
4b:0f:d4:b9:8a:50:35:2b:af:ca:83:9b:8a:6d:d5:
ad:d7:aa:7f:18:a2:81:52:3b:02:c6:e9:c5:a9:38:
54:e3:b8:98:59:2c:bc:48:22:23:3d:b2:cd:f1:a7:
65:10:7a:09:a1:54:9d:18:bd:3c:8e:34:31:6b:80:
7b:3b:a0:f9:ca:18:ea:12:17:d3:7b:a6:77:71:f0:
5c:a4:2c:b1:3d:f8:22:eb:65:ef:56:f0:14:cc:cf:
6f:d8:b4:b3:ac:13:50:2f:1d:7a:e9:7c:49:c9:2c:
70:b9:04:b0:a4:26:b2:74:2c:53:34:82:66:7e:6d:
14:d5:13:72:41:96:59:c2:ff:b7:8e:da:11:2a:6f:
47:94:fe:87:1f:0f:5c:d4:ef:ba:f6:6b:a5:73:5d:
32:2e:9c:ac:23:41:8d:e0:ed:7c:90:94:23:0a:83:
63:9c:98:82:7f:35:70:47:8c:b1:8f:c2:69:4e:da:
ee:70:54:37:cd:9e:06:38:99:4f:23:c4:1f:f2:55:
37:fe:cc:c1:ee:86:be:79:08:dc:27:3a:68:70:db:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:49:D8:C1:9F:EF:AC:75:4B:3C:40:B1:D5:F4:76:F3:1E:33:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JSVJ2MGf76x1SzxAsdX0dvMeM7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2840::/29
2a0f:9e00::/29
2a10:3540::/29
2a10:7900::/29
2a10:7f00::/29
2a11:4800::/29
2a11:5c80::/29
2a11:e580::/29
2a12:2c80::/29
2a12:4b00::/29
2a12:5e00::/29
2a12:d5c0::/29
2a13:9680::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
62:80:86:30:ed:f0:5e:14:bb:99:c4:45:54:c9:58:7e:34:c0:
bc:cd:77:8b:58:b2:7a:76:42:d2:1e:bf:38:fa:41:c2:d9:ec:
8c:b9:ff:08:17:d3:c1:be:31:fa:88:d4:2c:29:08:32:d2:69:
d6:b4:0b:0c:7b:e3:a9:e5:89:81:ce:50:4e:d1:5d:3f:ea:6d:
77:7a:f1:00:67:37:5f:2d:a8:5d:0d:51:99:27:4d:a9:db:8e:
26:19:a1:94:f6:2d:a1:a2:54:1e:bb:33:22:1b:be:f9:74:c7:
ef:d3:ed:bc:bc:b3:7b:d0:af:9d:0e:f8:a3:ea:63:93:e2:14:
d1:22:36:8d:c7:65:4b:bd:fe:8c:cd:cd:74:19:ca:9e:21:c6:
89:a7:01:40:4f:f0:f1:30:d0:e2:20:31:49:23:4f:ca:c2:69:
ec:88:4a:ec:90:32:3b:5f:fc:fb:9a:9f:b4:8a:9c:c4:6a:4d:
15:9b:2e:f8:62:0e:b2:40:ae:23:7d:6c:9d:af:f8:79:0d:38:
22:e4:c0:b8:9f:db:dc:da:6c:b6:35:f0:fb:97:4b:16:55:45:
08:be:70:a0:f6:17:d6:31:16:fe:5b:80:0d:99:53:bc:03:5f:
34:af:e0:67:dc:6a:08:02:b7:e8:ba:32:96:82:25:ae:fb:70:
dd:30:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:17 2025 by rpki-client