Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/lexK-PZGa0dRIxHrAucmPZfoZH8.roa
File: lexK-PZGa0dRIxHrAucmPZfoZH8.roa (raw, json)
Hash identifier: BTYzPVVTX+QrUsB9dt95kpnERBtDlHXeueDyzr/RAhM=
Subject key identifier: 95:EC:4A:F8:F6:46:6B:47:51:23:11:EB:02:E7:26:3D:97:E8:64:7F
Certificate issuer: /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial: 019712C959BD83F186D6E414083E94556EE1
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/lexK-PZGa0dRIxHrAucmPZfoZH8.roa
Signing time: Tue 27 May 2025 17:27:54 +0000
ROA not before: Tue 27 May 2025 17:27:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26356
IP address blocks: 160.211.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:c9:59:bd:83:f1:86:d6:e4:14:08:3e:94:55:6e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
Validity
Not Before: May 27 17:27:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95ec4af8f6466b47512311eb02e7263d97e8647f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:d3:0d:36:d2:fc:eb:22:44:1c:85:9b:e0:
fd:a1:1a:c6:d4:1b:7e:9c:64:eb:b0:21:9b:52:15:
6f:15:84:ee:ed:ac:13:22:18:aa:c0:42:b3:19:ad:
f4:e9:e2:d6:92:96:f8:ba:15:8a:77:52:b8:17:60:
c5:cf:51:85:72:08:1a:f8:6f:e8:42:90:c7:8e:6e:
85:4e:f6:5b:b9:7e:4c:8d:74:47:fc:79:12:c4:f6:
7b:60:0d:bb:6a:07:c8:4d:e6:93:dc:a3:34:a9:6a:
a8:85:07:19:2d:7e:5e:66:bd:2d:8f:fa:54:aa:fd:
80:ae:7c:17:a4:80:fa:5d:59:3f:20:cc:e0:86:2c:
50:03:fa:4a:23:eb:5a:85:4b:c0:28:bc:20:70:82:
87:80:7b:3a:45:19:be:a9:45:98:40:85:01:a8:0e:
c6:5b:2b:0a:8f:25:aa:f9:7d:45:2e:f3:9c:4b:a1:
48:ba:80:81:a2:58:d5:ed:55:ad:5b:d0:83:70:b2:
1e:d3:5b:33:53:0a:6a:9e:3b:07:12:f4:1d:83:59:
81:55:f2:81:a1:e2:72:35:66:74:a7:31:ed:c3:c3:
e6:f9:d6:10:0b:04:a6:f0:48:37:38:41:85:10:3b:
ea:69:2c:2d:2d:50:96:46:6c:04:56:95:f3:a6:b3:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:4A:F8:F6:46:6B:47:51:23:11:EB:02:E7:26:3D:97:E8:64:7F
X509v3 Authority Key Identifier:
keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/lexK-PZGa0dRIxHrAucmPZfoZH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:32:72:a8:b6:fe:16:0c:64:f8:e7:24:ec:1e:91:4d:d5:76:
c1:b3:b2:1b:7b:98:df:b2:a2:10:1f:9e:4e:e1:5f:81:35:83:
49:b5:84:55:9b:a1:f2:6f:d4:b6:e2:40:7f:0f:f0:48:bf:e6:
b3:d7:1b:e7:ef:0a:1e:4e:75:fb:3f:96:81:ba:e1:b6:99:96:
da:06:32:eb:1d:15:0f:1b:db:8b:f1:74:18:7a:23:7e:d9:05:
74:f4:d5:c2:8f:57:44:8d:a8:25:0d:f6:03:3f:dd:40:38:f6:
1a:9b:f8:2a:77:1a:4f:90:07:c5:28:13:81:56:e5:2d:83:2b:
14:c4:9f:24:f2:16:4e:e2:40:6d:47:eb:b4:a7:de:69:9d:ee:
38:45:91:1c:50:04:57:91:c7:ab:b3:a2:78:0f:0b:d2:f2:2c:
24:dd:f8:6d:13:f9:7f:38:e9:7a:7c:a0:0b:cf:9e:80:80:02:
cb:69:aa:ea:84:37:2f:c1:e2:ed:8e:8e:50:0b:ea:6c:3b:00:
fd:4b:df:8d:67:4f:6c:ac:37:89:ed:a2:54:c7:03:a1:71:53:
2b:b8:94:d3:ea:2d:51:97:9d:68:3c:54:c4:a0:5c:4a:b8:f7:
24:45:6d:65:a3:66:a1:6e:21:93:5a:ca:dc:44:49:89:4f:d7:
67:13:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:27:08 2025 by rpki-client