Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/eEVdWijZ83cUvIAhRHCWo4hsQAg.roa
File: eEVdWijZ83cUvIAhRHCWo4hsQAg.roa (raw, json)
Hash identifier: 1TkdQDVEdvAvQJirLIK6Jr/zxNccdlctIoDpGAGClXo=
Subject key identifier: 78:45:5D:5A:28:D9:F3:77:14:BC:80:21:44:70:96:A3:88:6C:40:08
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01978275F40ECA9413213CBC972A4265D823
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/eEVdWijZ83cUvIAhRHCWo4hsQAg.roa
Signing time: Wed 18 Jun 2025 09:54:17 +0000
ROA not before: Wed 18 Jun 2025 09:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 212.100.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:75:f4:0e:ca:94:13:21:3c:bc:97:2a:42:65:d8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jun 18 09:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78455d5a28d9f37714bc8021447096a3886c4008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:37:95:d7:82:bb:00:c3:4d:0c:68:31:8a:
c0:d7:d4:cb:33:fe:74:26:66:ec:00:46:b6:e7:0f:
93:d3:bc:fa:fa:e7:c7:13:9d:d6:09:7e:73:3c:fd:
01:33:19:e2:cd:e1:70:3d:55:ee:79:e2:44:aa:d2:
7b:64:8b:da:a9:70:b5:bd:99:d2:15:5f:71:b5:47:
cd:87:fa:25:0c:11:d5:c6:c4:f9:10:4a:ef:3e:2e:
e4:81:f5:ea:2e:4f:f8:ff:34:cc:e2:71:db:da:31:
d2:bb:67:3a:fb:87:fc:98:ff:96:8b:c4:c9:1f:c2:
88:94:65:c6:0a:31:20:fe:a6:31:5d:2d:39:93:79:
ce:20:0a:bc:b9:17:4f:d9:30:c1:60:66:63:d6:b8:
da:1d:6e:85:18:07:a3:bb:b3:6b:6f:ce:1b:6a:6e:
49:7e:a7:dd:2d:9e:3b:d0:db:7e:e9:ac:ab:e7:64:
15:47:98:6c:b6:d9:92:2d:a3:6a:3c:69:06:cd:6c:
3a:ec:2c:0b:c0:57:e4:c9:4e:bd:e8:73:bf:7e:a0:
ab:85:b9:36:a9:d8:c5:f9:25:ee:92:2b:d5:0c:12:
62:06:90:8f:ab:e7:0f:a4:db:b7:29:8c:f7:53:a2:
4e:09:4a:8a:f9:3f:3c:8f:ba:85:fe:02:b1:02:00:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:5D:5A:28:D9:F3:77:14:BC:80:21:44:70:96:A3:88:6C:40:08
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/eEVdWijZ83cUvIAhRHCWo4hsQAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.170.0/24
Signature Algorithm: sha256WithRSAEncryption
33:26:9e:be:a9:a1:8f:f4:08:40:d0:c2:ed:f3:1b:20:57:02:
e8:5c:da:a8:7d:b9:3b:37:55:10:0d:88:2b:d9:61:16:f1:0b:
d1:c5:99:60:1c:e7:3c:54:dd:4d:8e:a9:d8:2b:2f:63:6a:b9:
e5:04:f8:66:2d:9e:6d:8b:83:fa:b0:05:2e:f6:35:c5:94:8e:
11:fa:78:54:bf:dd:18:61:e5:3e:bc:ed:5a:38:35:46:00:1c:
ef:c7:6c:98:8b:8a:f6:2d:dd:2b:78:ab:f1:c5:63:65:81:b9:
57:6f:a9:21:2a:62:a7:e2:0c:6f:7d:6d:67:69:0d:72:7d:4b:
8a:0e:0f:bd:90:3f:41:e0:bc:0f:c9:4f:46:4d:19:17:9a:12:
75:d3:a2:78:cc:a2:0c:98:ef:3c:fb:da:69:a0:f9:38:ed:48:
d7:5a:a2:cc:17:7a:6f:5d:77:ec:15:59:e5:fc:90:e0:28:21:
13:ec:e6:fd:89:d1:8c:42:48:09:64:c0:04:99:b4:6b:22:52:
d9:7d:19:49:53:0c:58:c6:69:8f:36:35:c3:72:6a:76:1b:4f:
5c:12:4a:aa:60:18:54:25:af:ac:9a:5d:6f:ae:f9:d1:6b:c6:
41:d2:ad:aa:1a:b6:85:6a:00:7b:64:ba:63:1b:34:62:ad:44:
fb:0f:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:09 2025 by rpki-client