Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/QmEtXnxni64LXvJFwA6MMDcAu1k.roa
File: QmEtXnxni64LXvJFwA6MMDcAu1k.roa (raw, json)
Hash identifier: 3NPfuMNUnXqDQgXgSTxpr9DaQKC151otP9r/uagdYV4=
Subject key identifier: 42:61:2D:5E:7C:67:8B:AE:0B:5E:F2:45:C0:0E:8C:30:37:00:BB:59
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01977E9585E74B9E2198CFC3B91408A8853C
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/QmEtXnxni64LXvJFwA6MMDcAu1k.roa
Signing time: Tue 17 Jun 2025 15:50:17 +0000
ROA not before: Tue 17 Jun 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 212.100.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:95:85:e7:4b:9e:21:98:cf:c3:b9:14:08:a8:85:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jun 17 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42612d5e7c678bae0b5ef245c00e8c303700bb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:37:35:37:c3:7b:f6:1e:50:d5:d6:94:e7:
6b:dc:2a:c3:b7:0a:13:5a:e8:c5:aa:26:40:0d:60:
a0:d0:7c:0a:9f:2e:96:c7:a3:44:e5:20:9e:44:cf:
7b:7d:76:b5:66:65:31:90:7d:bc:df:6b:92:e4:cd:
00:c6:d1:fe:5c:19:1d:ea:2b:09:8c:a4:4d:5c:1f:
58:18:16:17:eb:36:87:85:46:0a:4d:ee:76:c2:cb:
ec:6b:b9:7d:32:02:17:cb:19:7f:63:a7:26:ea:6b:
50:e1:db:e5:42:1d:1e:79:f7:b7:95:98:c1:ba:fe:
a6:0b:64:7d:3e:38:11:86:b9:d4:eb:1c:a4:dc:cd:
e6:60:77:bc:2d:47:6c:e4:3b:4b:dc:c9:09:7d:82:
d0:0c:75:48:a8:e1:7e:7e:07:6d:14:5b:13:58:30:
75:a5:3b:db:be:72:7e:5e:09:a7:78:68:cd:92:6e:
9e:3b:cb:c7:14:25:cd:fd:54:6b:ac:f2:cf:73:54:
59:a8:18:0a:e2:65:e1:64:52:82:fb:a3:72:03:99:
ef:be:ef:30:95:24:d9:38:44:3c:7a:2d:45:05:4b:
82:36:f0:46:91:29:3f:7e:06:f4:09:77:7f:72:49:
16:58:e7:33:9b:cf:83:f6:02:78:24:00:62:3c:ab:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:2D:5E:7C:67:8B:AE:0B:5E:F2:45:C0:0E:8C:30:37:00:BB:59
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/QmEtXnxni64LXvJFwA6MMDcAu1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.189.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2d:b1:3c:ce:82:81:40:ee:43:0a:3b:c2:9c:a5:38:ab:16:
59:00:60:38:59:20:27:d0:b3:59:e1:d9:7a:ce:e5:eb:e4:55:
f0:ae:41:ae:bf:aa:09:bb:6d:d4:16:ea:12:15:70:21:59:ce:
97:01:46:44:2f:45:c8:ea:5a:bf:1f:3c:68:9e:6e:09:43:16:
b2:e6:f7:80:7b:30:35:52:3e:af:37:7b:2b:a2:7b:5f:e7:9e:
65:ff:f4:e7:b2:94:a7:e8:f0:fc:82:c9:7a:fd:40:ba:27:7d:
49:b9:56:5d:35:95:1f:71:dd:b2:b9:9d:56:a6:6e:00:5d:74:
e2:bb:95:99:f6:b3:70:62:aa:56:84:34:99:90:4f:9c:30:88:
92:cd:4e:28:bb:84:c3:2f:cb:93:97:4d:6a:7a:ae:f9:24:c9:
bc:11:0e:6a:54:66:e2:ed:1d:77:34:eb:ea:2c:c6:37:72:0c:
f6:b9:7f:67:7e:63:61:b6:06:d7:83:a7:a0:e6:de:5e:1a:1b:
91:26:e5:7f:c5:a5:14:34:df:43:60:ae:b1:42:e6:92:38:29:
f6:06:ee:ee:e7:c6:3f:42:d0:10:58:63:9e:68:51:eb:19:83:
fa:68:ea:11:8b:fd:76:90:ff:d1:2c:a1:26:42:da:d2:c9:f9:
6d:0c:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:35:14 2025 by rpki-client