Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/oI5e-_SAjq5-KOljgvoqOH5qZ1c.roa
File: oI5e-_SAjq5-KOljgvoqOH5qZ1c.roa (raw, json)
Hash identifier: AIZiiItx/uaHOcFi94L5EQmi0wVJ5oU+ej7y5Lf4eHQ=
Subject key identifier: A0:8E:5E:FB:F4:80:8E:AE:7E:28:E9:63:82:FA:2A:38:7E:6A:67:57
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0198D08E4FED5D5DF9060E54177E84D74BE8
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/oI5e-_SAjq5-KOljgvoqOH5qZ1c.roa
Signing time: Fri 22 Aug 2025 06:54:04 +0000
ROA not before: Fri 22 Aug 2025 06:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 212.100.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:8e:4f:ed:5d:5d:f9:06:0e:54:17:7e:84:d7:4b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 22 06:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a08e5efbf4808eae7e28e96382fa2a387e6a6757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:5e:41:c6:10:4f:13:05:10:ae:db:ff:68:
64:9f:bc:d0:57:15:74:03:92:81:96:72:4f:c6:20:
bd:12:ae:74:ed:99:44:1e:88:91:20:dd:34:e3:38:
74:26:a8:04:2b:10:9f:b7:28:df:f3:98:5c:4e:37:
d8:ea:ee:a0:04:f1:38:30:89:c6:f8:0e:9c:02:3e:
93:7b:35:2e:e1:ec:de:5a:1f:2b:54:3c:02:a5:f6:
f4:a9:5a:5c:a7:82:b6:7b:4a:4a:e9:da:83:6d:07:
31:74:87:19:02:d9:46:4f:80:8f:17:d4:84:41:e1:
c2:0e:af:82:23:50:ba:aa:e6:7b:cb:d5:97:93:35:
55:56:92:80:4e:37:25:de:95:62:b3:9a:c6:e4:94:
f3:ff:dc:5c:00:2c:87:4c:71:c1:e0:2a:3c:d6:6d:
ce:1a:f5:74:22:5f:be:c6:e2:bd:5e:47:ff:e8:ba:
46:45:0d:fd:3d:45:2d:ed:02:36:a7:c2:e0:f8:db:
cc:2d:1b:24:5e:8b:2d:30:87:a1:54:57:5d:92:a6:
bf:a6:33:99:18:1a:d4:99:d6:94:0d:ed:90:e9:c0:
01:d5:ba:b8:ef:1f:34:86:b0:5e:08:7b:1b:43:05:
c7:e8:42:8c:8f:f8:cd:d7:32:77:a9:d8:45:df:74:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:5E:FB:F4:80:8E:AE:7E:28:E9:63:82:FA:2A:38:7E:6A:67:57
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/oI5e-_SAjq5-KOljgvoqOH5qZ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.170.0/24
Signature Algorithm: sha256WithRSAEncryption
64:82:18:ee:a0:07:1a:9b:0d:d7:d7:f0:a1:66:85:26:04:7c:
62:ec:0d:f1:09:44:d3:9b:5c:d9:d3:80:92:c5:90:1f:33:18:
20:04:36:b3:3c:fe:17:24:f1:f2:ff:0d:b9:35:9a:13:2e:bc:
ff:d5:40:07:43:35:78:dc:51:fd:68:27:ff:61:26:ef:39:46:
8e:4f:c4:9a:d3:db:6f:db:32:f1:70:40:51:72:35:a1:2c:1f:
42:1e:9d:70:90:7a:8a:7a:49:17:82:e6:6b:a0:4a:07:df:de:
06:65:db:c3:76:bb:38:d1:2e:c0:3c:2d:42:78:49:83:60:4f:
c2:ca:97:86:06:47:e8:64:cb:a3:07:7e:8d:45:7e:9b:44:d0:
03:a0:9b:ec:90:c3:61:f5:41:e4:b0:80:7a:28:73:8c:30:a2:
72:e2:a8:cd:1e:3d:33:9d:81:1c:7a:2f:f3:02:98:47:37:91:
82:67:5f:8b:21:e6:8b:39:ae:1a:bd:0d:7f:c3:bd:88:f8:d4:
3e:29:a3:27:0c:89:fa:83:b8:71:0c:6a:ec:0d:86:70:32:e7:
7c:d2:ea:57:cf:8e:4f:11:ff:25:81:6a:e2:0c:15:66:66:a0:
53:11:f6:58:69:cd:d4:b0:18:82:1c:28:ce:d5:05:b5:1e:94:
4e:d4:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:50 2025 by rpki-client