Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Lu76Y9Smh45WB63k1kFuTdEUEho.roa
File: Lu76Y9Smh45WB63k1kFuTdEUEho.roa (raw, json)
Hash identifier: OnpzEXl/HnMZNzqcmNMVvatlRcG3aHMFwrKsS9eDZQc=
Subject key identifier: 2E:EE:FA:63:D4:A6:87:8E:56:07:AD:E4:D6:41:6E:4D:D1:14:12:1A
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019818EC24F848BD3AB609A0D7969B4003B8
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Lu76Y9Smh45WB63k1kFuTdEUEho.roa
Signing time: Thu 17 Jul 2025 15:06:25 +0000
ROA not before: Thu 17 Jul 2025 15:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214049
IP address blocks: 212.100.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:ec:24:f8:48:bd:3a:b6:09:a0:d7:96:9b:40:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jul 17 15:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eeefa63d4a6878e5607ade4d6416e4dd114121a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:79:35:23:88:e4:0e:20:4c:2d:2a:23:c1:
e5:89:4e:13:fe:07:ff:7c:0d:8a:66:87:fd:94:f5:
f8:fe:c9:27:8a:d9:8a:95:c2:f5:66:10:66:28:c7:
d9:0f:d3:16:c5:e9:c3:06:97:63:3e:58:5a:3b:5c:
a8:14:6d:1b:1e:57:c2:60:0c:24:83:d7:7d:ba:e8:
95:b0:87:89:3c:9a:b3:d4:3e:08:8a:ce:36:30:bc:
b3:89:d9:3b:d0:9d:45:b1:76:db:a2:9a:95:55:37:
21:be:53:e4:c8:bc:9a:35:34:11:d0:8d:a4:cd:f4:
fe:ff:7f:b3:a5:18:5d:ad:ea:eb:83:79:ab:99:7d:
85:21:f8:bd:a2:cf:3f:ce:41:75:ab:ba:ca:30:42:
0c:3b:a9:46:bf:46:54:10:33:9a:f1:a4:8d:11:1c:
5e:66:b2:e2:66:0f:9f:2a:dc:71:c8:8d:59:75:31:
d5:4a:2c:1f:5d:a1:9e:0d:2a:ac:67:1d:70:17:8a:
02:78:8b:72:2a:14:0f:83:2b:d1:16:2a:4b:8a:d7:
2c:4e:cb:c2:f5:24:39:ae:0e:af:1d:6a:81:c1:c2:
87:eb:f7:21:48:4a:08:7b:bb:53:b4:fc:d1:35:ea:
08:fb:f2:ce:28:84:78:a8:44:78:5c:38:cb:97:4f:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EE:FA:63:D4:A6:87:8E:56:07:AD:E4:D6:41:6E:4D:D1:14:12:1A
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Lu76Y9Smh45WB63k1kFuTdEUEho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.188.0/24
Signature Algorithm: sha256WithRSAEncryption
67:25:03:28:4f:2a:d2:20:7b:13:8f:47:36:48:21:f7:8f:d7:
29:9a:a7:dc:44:fb:97:9f:06:02:f8:58:39:24:45:ae:aa:51:
4d:51:41:27:db:17:0f:b2:57:5d:b1:db:0b:1a:5d:c8:3b:3b:
e3:2b:b8:30:45:e4:38:d1:51:73:d0:91:c2:7b:ed:c6:9d:4e:
a1:ee:b2:dc:03:94:0d:c5:60:8d:b3:c6:21:e1:5f:04:e6:7e:
f3:41:e3:dc:9e:c6:9b:6b:a9:b5:07:95:f1:e4:6c:05:dc:2d:
82:4d:9e:21:48:77:b2:d6:b7:d0:05:fd:18:25:72:4f:af:16:
1f:7a:48:11:f8:20:31:1c:b4:22:25:5c:7f:5d:e4:0e:1f:5a:
d4:58:89:97:aa:28:95:6e:a3:bf:62:7d:31:36:1d:89:25:2a:
0a:e2:96:83:d1:62:6d:42:49:d2:0d:2d:85:78:ad:7f:56:38:
4f:b5:4c:46:33:15:4e:4d:ef:87:b5:09:0f:11:24:cf:68:e3:
d4:4c:2a:4c:18:ba:28:8b:e1:6e:8e:88:7d:83:e7:39:7c:61:
89:5a:38:1a:26:b1:3d:ad:52:5a:50:61:b3:24:0e:20:0e:00:
52:5f:56:08:21:39:8c:90:1e:35:fa:82:36:0e:7a:94:29:04:
88:52:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:10 2025 by rpki-client