Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa
File: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (raw, json)
Hash identifier: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=
Subject key identifier: F1:74:7B:87:7E:A0:7B:C9:E6:6C:33:7B:5B:D2:8F:B3:C0:5B:27:77
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019735377B4C47AED93A711E9EE5A8174756
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa
Signing time: Tue 03 Jun 2025 09:55:17 +0000
ROA not before: Tue 03 Jun 2025 09:55:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 37.252.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:37:7b:4c:47:ae:d9:3a:71:1e:9e:e5:a8:17:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Jun 3 09:55:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1747b877ea07bc9e66c337b5bd28fb3c05b2777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:18:9a:4c:6d:00:81:71:aa:20:6f:46:7d:
90:be:66:cf:a5:6a:d4:7f:02:82:ee:d6:93:c7:87:
c5:56:f4:5a:a3:a8:b7:3a:9a:8d:08:2d:29:f1:1b:
22:f5:ae:a2:de:de:38:03:3c:a4:3d:ce:09:74:85:
da:9b:a0:19:b0:47:8c:95:bd:61:5f:81:8c:7a:7c:
b2:65:cb:f8:a0:d9:44:05:f3:a0:31:c4:18:2c:75:
30:a6:35:d1:ef:f2:50:33:03:84:73:24:9c:c2:2e:
5f:ed:86:30:66:c2:de:0e:09:81:16:58:70:79:48:
41:08:35:f3:07:80:af:03:9e:59:6b:ea:e6:c0:ed:
15:1b:3c:e6:82:c4:37:84:ea:2a:8c:82:27:3a:dc:
a3:fa:27:b0:26:1f:b6:6a:d1:ba:90:60:0d:78:0a:
d7:ad:c4:ea:bc:98:36:30:d3:b1:68:a6:d1:5c:94:
96:79:b8:8c:ce:d3:eb:03:38:05:e5:32:87:35:32:
57:61:fc:3d:8f:f3:e4:94:3f:b7:36:e1:c6:b2:7e:
5d:53:ff:51:9e:de:a6:a9:db:48:c7:82:ea:cb:bf:
3a:a2:f0:5a:a4:2e:61:51:fc:aa:71:f8:1d:ef:d9:
a5:f3:0e:8f:5c:f0:5a:88:95:24:dd:52:b0:41:60:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:7B:87:7E:A0:7B:C9:E6:6C:33:7B:5B:D2:8F:B3:C0:5B:27:77
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.192.0/21
Signature Algorithm: sha256WithRSAEncryption
84:ae:38:a2:19:24:d2:73:b3:8b:a1:e1:e1:2a:23:26:71:17:
fc:68:f7:6b:35:a5:7c:bc:67:73:f3:bf:64:c1:c4:ee:69:6e:
91:8d:b1:49:c8:26:07:e2:3e:a3:07:1e:80:fa:ef:ce:86:ae:
7c:a1:12:3c:7f:22:66:eb:13:de:6c:0f:fe:63:c3:52:fa:2f:
5e:b6:21:9f:d4:ea:ff:fc:93:3b:4f:46:fc:e7:8c:e0:30:e3:
50:7c:7e:77:cd:b9:55:24:aa:16:3a:9b:9b:3f:d7:98:52:0b:
9b:43:05:45:2a:22:5c:12:91:04:87:f0:f8:3f:5b:82:4c:fb:
29:65:0c:94:05:84:ad:ef:a2:21:0b:6a:64:ec:99:c1:23:65:
6a:08:68:03:c0:0a:1c:da:6b:9d:c5:b5:04:3e:04:11:f6:ed:
9a:61:d5:c0:3b:58:07:6d:c1:c3:e7:bf:5e:87:41:4f:4c:7c:
df:a6:1b:d1:61:5c:8e:1c:05:80:72:53:5b:e1:b9:7d:c7:2d:
30:60:d7:53:c1:b5:d6:83:11:a0:5d:07:7e:11:aa:b2:10:f2:
78:b3:fb:cb:62:78:67:f6:89:8d:4b:b7:6d:74:9f:15:90:04:
e1:51:01:2d:3d:fc:e5:21:e8:d0:a6:ee:94:ec:07:dc:84:9f:
db:73:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:55:53 2025 by rpki-client