Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lcrkcIq777iCmLvT9zOg3coCBVc.roa
File: lcrkcIq777iCmLvT9zOg3coCBVc.roa (raw, json)
Hash identifier: Mk5Asu3mTdS1VATOmAHrPbkZ2H6b/HppJgq0Z/L/sqg=
Subject key identifier: 95:CA:E4:70:8A:BB:EF:B8:82:98:BB:D3:F7:33:A0:DD:CA:02:05:57
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0198A9436C0D7D52C2E91242129C31B1D21D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lcrkcIq777iCmLvT9zOg3coCBVc.roa
Signing time: Thu 14 Aug 2025 15:47:04 +0000
ROA not before: Thu 14 Aug 2025 15:47:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.123.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:43:6c:0d:7d:52:c2:e9:12:42:12:9c:31:b1:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 14 15:47:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95cae4708abbefb88298bbd3f733a0ddca020557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:68:bd:77:f0:38:c2:e5:05:4f:0b:5a:90:
a6:0c:b2:71:b2:a7:a3:af:06:b4:bf:49:f8:df:35:
00:6e:e6:ce:c5:91:77:5d:56:3d:e0:fa:f6:e1:9f:
61:04:ad:92:0d:22:43:e6:e8:04:55:0b:93:9d:e2:
b8:34:43:68:09:84:71:59:67:94:5f:64:ec:e4:ef:
af:7b:2c:76:d0:33:ec:4b:ab:85:f5:31:db:c5:c6:
0f:57:f6:8a:34:ca:f7:e2:41:3d:5f:80:d7:96:82:
52:5c:26:ab:8d:50:79:83:14:fc:4c:86:ce:93:3d:
76:91:d6:d0:74:94:7d:45:45:46:2d:6d:21:05:64:
81:49:25:65:d9:9f:6b:2a:cb:45:db:19:48:3f:b7:
68:18:c4:40:89:ef:36:fc:31:5c:b8:27:61:03:df:
13:50:e3:d5:bf:c2:a8:f3:33:a8:2f:39:7b:54:49:
cc:36:e7:09:57:d0:10:0f:77:34:bd:ed:21:3d:72:
7a:d2:b2:b4:16:15:01:5e:25:c9:42:d1:aa:f1:51:
fa:e4:d0:05:27:e2:ad:88:a7:80:4d:6d:10:62:b6:
2b:e9:a8:9a:6b:1a:a8:ba:15:e0:24:8f:08:b7:62:
29:86:02:b5:7f:2f:ea:0e:1b:96:3d:0e:bc:d3:af:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:E4:70:8A:BB:EF:B8:82:98:BB:D3:F7:33:A0:DD:CA:02:05:57
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lcrkcIq777iCmLvT9zOg3coCBVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.123.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3e:fd:8b:de:d2:37:a4:4a:55:3f:5c:f8:b6:10:0c:00:04:
96:e0:6c:b5:5b:49:c0:36:5d:a4:8d:f9:86:c3:bd:16:5e:e0:
c5:30:3a:e3:81:c2:ef:3a:e7:6d:b4:0d:b9:25:08:4e:b8:5b:
83:9c:c9:46:b0:24:53:e5:4e:cc:80:24:b2:8c:31:e1:b3:83:
59:ff:57:ad:6d:02:66:0a:f6:65:c0:ee:63:82:e9:2c:6d:e8:
fc:e9:b4:5b:0d:d0:b8:05:29:ba:32:0f:9d:3a:40:3d:5b:11:
b3:d2:f5:b3:1a:fc:49:ca:0f:f7:79:06:e9:82:91:ae:ca:7d:
df:04:da:33:e3:6c:45:0b:de:f5:5e:29:a7:4c:4e:e1:02:56:
2c:2a:5b:99:7e:05:3a:63:1d:fb:58:b6:4e:36:f6:38:24:6a:
de:10:66:ee:37:86:0f:07:d1:58:c0:0a:f2:96:ce:19:0e:84:
92:95:77:a3:5b:ca:ec:d3:6f:f5:ac:cc:3a:c3:4a:04:25:fc:
ba:8e:dd:d0:33:59:1e:e9:31:20:05:e4:ff:b9:bf:c8:7a:7f:
2c:54:30:6f:c1:9e:34:ad:80:e9:01:7b:80:fe:c3:d1:36:1f:
6d:96:3b:c9:d9:82:c0:98:37:a8:d2:08:69:d9:fa:1a:a7:a0:
d9:95:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:44 2025 by rpki-client