Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LZXNMAIh5rxJ27RzY3-HOC44ze8.roa
File: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (raw, json)
Hash identifier: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=
Subject key identifier: 2D:95:CD:30:02:21:E6:BC:49:DB:B4:73:63:7F:87:38:2E:38:CD:EF
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0198089217E2B3F8A3213384C1A078FB13D2
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LZXNMAIh5rxJ27RzY3-HOC44ze8.roa
Signing time: Mon 14 Jul 2025 10:54:08 +0000
ROA not before: Mon 14 Jul 2025 10:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208969
IP address blocks: 45.151.96.0/23 maxlen: 24
94.137.78.0/23 maxlen: 23
94.137.90.0/23 maxlen: 24
2a05:c440:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:92:17:e2:b3:f8:a3:21:33:84:c1:a0:78:fb:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 14 10:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d95cd300221e6bc49dbb473637f87382e38cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:f6:13:ae:32:ac:66:c3:17:c8:79:80:6c:
5f:9d:ed:6f:75:a1:86:27:b0:0a:c7:76:85:ee:62:
55:0f:09:f7:13:38:52:75:9c:f2:38:19:8b:d1:52:
e9:c0:70:7a:7b:89:b4:22:88:ba:f0:e6:54:9b:3b:
47:47:07:de:b7:09:28:f6:f7:07:6a:1a:6e:9d:6e:
36:64:1a:10:6b:5e:20:12:f5:73:f0:5a:82:aa:e5:
ab:13:8a:26:93:ae:ea:81:a9:ee:0c:97:7a:43:66:
72:1c:71:b7:05:4f:3b:fe:f0:1e:ae:1f:02:7a:11:
f2:16:83:f3:93:20:5d:24:fe:c8:40:4c:2a:2b:49:
a6:7a:ff:ad:c6:b4:7b:2e:b9:60:38:5d:4e:89:9b:
56:9c:e1:b1:91:c5:87:a1:79:52:25:4e:6c:0a:fb:
8c:c5:62:b8:97:85:0a:e4:34:27:ed:07:be:ee:74:
db:44:af:17:35:2d:f0:86:a9:aa:9e:34:4e:c5:73:
98:8d:20:47:81:dc:6e:0e:48:23:83:8d:78:76:6a:
59:b8:62:e4:5d:49:db:d9:28:40:95:d7:6b:6d:c9:
50:4a:d2:16:c0:eb:79:48:60:56:c8:7f:e9:90:06:
db:e5:c5:80:33:05:d6:56:83:30:dd:d2:59:f2:8b:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:95:CD:30:02:21:E6:BC:49:DB:B4:73:63:7F:87:38:2E:38:CD:EF
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LZXNMAIh5rxJ27RzY3-HOC44ze8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/23
94.137.78.0/23
94.137.90.0/23
IPv6:
2a05:c440:4000::/36
Signature Algorithm: sha256WithRSAEncryption
61:e1:47:3a:c7:7f:b1:39:ed:f2:00:bf:30:cf:57:68:0e:f3:
f4:c1:0d:02:25:16:c9:b0:5e:d6:55:c3:8d:65:60:b5:2e:6c:
d3:21:76:bd:08:6f:ce:32:b8:39:56:15:46:19:1b:cf:44:03:
b0:e6:44:50:a4:8c:9f:b3:50:94:90:97:80:24:14:e4:46:fd:
04:8e:90:e2:a3:9a:9c:6b:6f:34:44:d6:61:9a:7c:d1:e0:e9:
a7:85:9a:85:3b:dd:74:fa:7e:0e:d8:8d:b3:9e:50:6d:3c:20:
0b:31:97:da:03:4d:ae:b9:0f:d4:5d:c6:df:cb:4c:ae:53:1c:
47:ae:04:31:68:50:b5:d5:f0:d3:b6:28:de:ca:74:f6:8d:f5:
f7:13:bd:e4:40:80:85:23:da:39:68:6a:59:04:bb:ec:7b:dd:
83:7c:e1:37:e0:dd:34:23:21:0d:73:cc:01:ab:da:59:d3:3d:
a3:17:90:28:92:dc:d4:3b:d7:f7:35:69:f5:f6:cd:9d:f1:e1:
e1:3d:a1:8d:01:f8:63:f6:03:bb:5f:9a:0a:04:76:55:37:01:
74:d0:20:b9:d0:14:39:8e:85:44:ac:61:aa:79:d0:18:96:9d:
27:17:85:c9:19:4c:ae:32:a1:d6:ca:c9:67:3a:e7:2c:45:32:
4e:75:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:41 2025 by rpki-client