Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/03JJTsh3_NxSyDqdFphknmP33b8.roa
File: 03JJTsh3_NxSyDqdFphknmP33b8.roa (raw, json)
Hash identifier: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=
Subject key identifier: D3:72:49:4E:C8:77:FC:DC:52:C8:3A:9D:16:98:64:9E:63:F7:DD:BF
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019735377AE70DD893C3843D5630942449F8
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/03JJTsh3_NxSyDqdFphknmP33b8.roa
Signing time: Tue 03 Jun 2025 09:55:17 +0000
ROA not before: Tue 03 Jun 2025 09:55:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 37.252.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:37:7a:e7:0d:d8:93:c3:84:3d:56:30:94:24:49:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Jun 3 09:55:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d372494ec877fcdc52c83a9d1698649e63f7ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:2f:67:59:7c:7f:91:e0:dd:c2:07:5d:71:
cb:64:3a:81:aa:8f:be:71:a6:9a:0c:64:cc:aa:b6:
5d:94:24:0e:6d:58:62:17:cb:43:c5:30:44:04:45:
59:4e:2a:da:06:d3:e7:26:21:f9:4f:81:bd:7a:d3:
82:ff:fe:6f:83:25:bb:fc:34:fc:75:32:97:67:da:
63:21:66:f1:b8:c9:7c:44:fa:a9:2b:e5:ae:b4:19:
3b:cf:75:bd:85:86:67:8e:07:ca:97:e7:ed:4f:c4:
05:32:5e:c1:f1:5a:8a:33:57:2c:dc:f9:79:3d:7c:
a2:a2:53:bc:01:92:2c:17:a6:61:42:b4:83:10:82:
f2:db:58:92:7b:8e:62:8a:43:92:19:5e:4a:a8:72:
33:f5:a2:2e:65:14:ba:81:33:9a:fe:36:1f:5d:1f:
ac:f5:15:cd:22:81:20:09:5d:d3:65:f7:49:6b:62:
02:dc:f0:c7:db:6d:05:1d:a5:75:ca:bd:c6:e8:74:
67:eb:35:59:9d:0d:90:ae:71:a1:f2:bd:d6:64:db:
a8:e7:4a:d5:62:60:22:59:c0:e5:c2:44:0b:79:93:
7c:28:1f:9b:1a:14:4d:9f:7e:27:6e:22:78:11:95:
68:52:3d:10:53:50:91:e1:5b:1c:ad:1f:f0:11:73:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:72:49:4E:C8:77:FC:DC:52:C8:3A:9D:16:98:64:9E:63:F7:DD:BF
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/03JJTsh3_NxSyDqdFphknmP33b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.192.0/21
Signature Algorithm: sha256WithRSAEncryption
82:0d:d4:98:d7:57:97:90:65:dc:e4:31:70:88:ef:78:53:23:
9d:48:94:56:61:c2:1b:c7:43:f3:33:ca:db:16:50:87:da:a1:
10:7c:1d:5f:05:23:d8:70:8e:3d:27:cd:9a:1b:ea:25:2c:01:
46:45:39:50:8c:87:f7:af:c6:f7:41:e8:43:07:51:8f:5c:26:
73:a2:1a:f4:50:26:f4:bb:1e:42:4d:8b:72:0b:77:0b:0e:cf:
00:2c:77:6d:d2:f5:23:ba:61:d4:30:e2:1f:3c:16:f7:08:ac:
73:29:54:fe:4d:01:d5:52:60:67:42:b7:fa:a5:ee:39:8a:46:
44:a8:2a:87:ca:65:a7:bb:c1:12:5c:d5:24:af:e4:90:ba:e0:
41:51:1f:05:0a:3b:8c:33:57:2a:4b:d0:79:57:64:44:c7:1e:
68:23:08:16:ec:60:76:12:34:da:86:0a:d1:be:2c:00:34:d7:
06:14:a7:c1:a6:22:27:77:e1:f9:82:70:f4:7b:36:74:3b:30:
63:1a:78:bc:7e:4a:6b:dd:db:2e:69:25:4f:79:c8:26:84:47:
5a:ac:87:5a:ef:6f:03:c0:82:3f:11:c6:54:60:53:be:2f:d9:
65:8b:f0:8e:2d:54:57:33:76:a6:58:9f:ce:c4:b6:6f:1c:71:
e1:c1:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:13:43 2025 by rpki-client