Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/PIFbvqZsTCVITsXCVJp94hRSd40.roa
File: PIFbvqZsTCVITsXCVJp94hRSd40.roa (raw, json)
Hash identifier: cQLvhNHJgfoGCqvXulMMhioH9SATxRMjiGUXlSo7XxA=
Subject key identifier: 3C:81:5B:BE:A6:6C:4C:25:48:4E:C5:C2:54:9A:7D:E2:14:52:77:8D
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 019425FD9D7E94CEA63587353E908FCD2C4D
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/PIFbvqZsTCVITsXCVJp94hRSd40.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204471
IP address blocks: 217.197.106.0/24 maxlen: 24
2a12:d8c0::/32 maxlen: 32
2a12:d8c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9d:7e:94:ce:a6:35:87:35:3e:90:8f:cd:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c815bbea66c4c25484ec5c2549a7de21452778d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:45:ef:62:24:6f:52:cf:4c:92:37:1d:9d:
1f:d5:12:4b:55:78:49:35:95:52:de:1d:cb:72:52:
d6:45:be:5d:f6:e5:0c:18:aa:9c:fc:87:67:15:ac:
89:b7:bd:fc:0f:d8:b1:79:15:2a:ac:a9:85:3c:00:
14:8d:26:b6:0c:89:f9:e6:19:41:1e:98:3b:fb:90:
4a:10:0b:48:76:69:f3:7b:03:9e:a9:92:87:d0:bc:
1e:a3:45:3c:b9:7c:ae:66:3e:b0:0a:57:8b:41:e1:
6d:97:64:3c:44:05:be:64:74:64:20:2a:2d:67:b4:
e9:19:e2:c3:f0:6f:48:74:51:52:c7:08:c4:68:8a:
4c:fb:9c:84:ef:39:a2:e4:bc:cf:54:da:d8:99:42:
40:99:c1:2e:27:e1:52:3d:5e:49:15:28:3c:a9:b4:
4f:3f:8d:26:17:51:8a:01:6b:69:df:b1:e4:4e:d1:
5d:f2:fe:9a:2f:3a:10:5c:58:13:b2:b9:44:0a:a2:
59:63:8c:44:9c:fc:be:bd:8a:ea:a8:f3:26:b6:67:
0d:58:93:d9:06:ee:fe:ef:3e:95:9d:c1:d7:3d:44:
d9:5e:bd:e5:eb:19:d1:f3:d3:bf:05:3c:86:33:d0:
4d:41:4b:08:26:da:d5:e1:ad:3e:3b:be:bc:eb:aa:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:81:5B:BE:A6:6C:4C:25:48:4E:C5:C2:54:9A:7D:E2:14:52:77:8D
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/PIFbvqZsTCVITsXCVJp94hRSd40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.106.0/24
IPv6:
2a12:d8c0::/31
Signature Algorithm: sha256WithRSAEncryption
53:ea:c5:bc:32:83:66:67:dc:6e:af:bd:6d:66:78:66:37:6e:
3e:cd:52:57:df:61:c1:1f:61:42:a5:61:c2:96:aa:68:53:d3:
94:b9:b6:70:30:7a:ff:10:52:da:b1:e5:45:4b:1f:ce:a1:32:
ec:37:3b:e6:3c:61:fb:91:9d:21:c4:9e:0d:89:9f:ef:f7:bc:
6a:14:8b:4a:ee:e4:da:aa:02:69:9d:52:33:02:00:51:39:a0:
f6:8d:50:85:82:14:ec:76:c9:e7:7f:9f:c9:40:91:bd:f3:20:
96:0f:b8:ed:5b:20:d5:3e:6b:07:c1:1b:4f:17:c1:4e:3b:58:
f2:77:e1:d5:19:18:91:35:8c:8f:00:7b:8b:41:ce:e0:fc:c6:
91:e6:02:34:a4:5c:65:de:dd:95:37:1f:77:00:bb:47:5b:fa:
82:95:6c:33:5e:60:92:21:4b:4b:50:90:ab:b2:6b:eb:3a:d9:
3b:fd:1c:29:23:fb:42:7e:be:bd:53:2f:65:7e:93:6c:2c:6f:
1a:d5:11:15:fe:db:97:a2:6a:f4:6c:f5:5d:7c:97:7c:18:1e:
2f:96:49:39:e1:59:1e:b8:14:54:0c:9e:bb:45:9f:99:c2:b3:
5a:2a:06:d6:9a:75:f9:81:2c:57:4e:24:8a:64:6e:ab:b2:62:
7c:6e:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:06 2025 by rpki-client