Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/LxxGukBlqMxcGz3JxyW5KSOubSQ.roa
File: LxxGukBlqMxcGz3JxyW5KSOubSQ.roa (raw, json)
Hash identifier: yB3fzx0x5vvOt9wxFr4TL+wrywW/E7cmkSxw6jPON9U=
Subject key identifier: 2F:1C:46:BA:40:65:A8:CC:5C:1B:3D:C9:C7:25:B9:29:23:AE:6D:24
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0197F38BB4475183375F0458B3A860E87F3B
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/LxxGukBlqMxcGz3JxyW5KSOubSQ.roa
Signing time: Thu 10 Jul 2025 08:55:08 +0000
ROA not before: Thu 10 Jul 2025 08:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 212.100.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:8b:b4:47:51:83:37:5f:04:58:b3:a8:60:e8:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jul 10 08:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1c46ba4065a8cc5c1b3dc9c725b92923ae6d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:2f:9f:29:dd:80:b3:23:2b:c0:42:75:9b:
7d:8b:de:ba:b1:62:23:50:44:85:89:8e:9f:5c:c9:
5e:62:4a:10:97:21:e8:9f:33:10:a2:94:ed:14:ed:
b5:b3:d5:56:2a:ca:51:c5:c1:ee:d6:7c:eb:17:b4:
8c:e2:dc:3e:da:08:4b:9a:06:db:4b:57:8e:01:05:
6a:0d:12:11:10:16:4a:9e:2c:35:7a:fd:68:ad:2e:
2f:c3:e8:c9:02:68:17:1a:b8:df:5c:14:97:47:ef:
47:61:7c:18:65:cd:d5:7a:d8:62:ec:f8:2b:82:8e:
d9:3c:aa:ca:ce:a0:82:28:77:ad:fe:00:d5:cf:c0:
73:c2:dd:f9:d6:ec:85:93:80:58:c6:97:f7:82:1f:
56:b1:3f:9a:5e:69:96:ee:0d:d7:36:36:72:ef:b2:
a5:2d:c5:b6:1c:59:1e:bf:7c:6f:12:5b:21:6f:cb:
31:ef:b9:c7:52:4d:6c:d7:47:51:66:f1:a6:70:3e:
00:d3:f2:57:36:c6:e1:4f:d0:dd:26:b4:7a:eb:16:
42:5f:4b:4a:25:e7:53:23:b7:e3:ad:39:9c:bc:82:
a0:60:bd:32:de:f5:93:0f:80:8d:77:00:92:2b:8f:
6d:b1:27:62:20:a9:2c:cb:10:ee:31:1a:e1:3f:a4:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:46:BA:40:65:A8:CC:5C:1B:3D:C9:C7:25:B9:29:23:AE:6D:24
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/LxxGukBlqMxcGz3JxyW5KSOubSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a1:5c:21:ed:7b:3c:fb:87:e3:16:10:a6:36:60:77:f8:9d:
db:44:3f:21:b6:6a:ef:3c:11:4d:fb:3e:c3:39:39:f7:54:cd:
08:d5:7e:06:07:91:58:8f:da:5d:64:92:f4:d3:cb:4e:6e:b7:
34:8d:76:1c:d0:d7:b4:51:fa:cc:31:ec:fd:af:3a:03:62:3b:
d9:0c:98:d8:02:a6:df:ef:66:79:fc:cd:74:76:5b:ba:86:80:
93:14:4f:2d:96:a0:d8:4c:46:29:1d:70:da:67:5b:27:db:84:
28:c6:9e:3e:de:38:6e:ac:b6:77:e0:e7:11:4c:96:a1:59:1b:
d8:f9:14:a4:3a:1d:c0:d4:60:a2:da:1a:85:61:1a:1b:16:c1:
58:e4:95:3b:d9:e1:ff:08:4b:2f:e3:42:cd:74:71:da:ed:45:
67:f7:a1:02:10:f7:f8:ac:0a:24:5e:db:13:f8:ed:e9:62:a4:
f8:fa:ab:70:c0:71:e3:bc:5a:0c:ac:68:19:17:d5:ec:09:d7:
b0:a8:2f:ad:99:eb:5e:41:e1:8d:b0:eb:4d:b8:4d:b4:1f:c7:
8f:e9:04:ba:b3:ca:de:81:8d:ae:6f:f9:5b:51:9d:54:cf:68:
2b:6d:57:f2:d6:ab:ac:91:dd:03:57:1d:89:f2:74:50:3f:32:
5e:b3:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:56 2025 by rpki-client