Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PFI0DihducPS__RwkMjS337yxW8.roa
File: PFI0DihducPS__RwkMjS337yxW8.roa (raw, json)
Hash identifier: lGh8cMoN1ckTF8VN82a5hgttC4W2hThT6NQKwsWmkmk=
Subject key identifier: 3C:52:34:0E:28:5D:B9:C3:D2:FF:F4:70:90:C8:D2:DF:7E:F2:C5:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197C9AF111DB74642D3D2E6DBC8CB23E4C4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PFI0DihducPS__RwkMjS337yxW8.roa
Signing time: Wed 02 Jul 2025 05:49:42 +0000
ROA not before: Wed 02 Jul 2025 05:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216194
IP address blocks: 94.156.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:af:11:1d:b7:46:42:d3:d2:e6:db:c8:cb:23:e4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 2 05:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c52340e285db9c3d2fff47090c8d2df7ef2c56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:7a:47:eb:ac:83:7b:f5:cd:33:10:6d:05:
a3:9a:8a:5e:9f:f8:c8:aa:c6:ef:e2:e1:92:c8:d6:
6c:03:52:1c:e5:36:ec:ea:e8:8c:d9:33:66:0c:4f:
30:09:6f:ca:99:1d:b3:25:43:29:7d:24:da:5f:e0:
88:9b:7b:58:7d:ce:20:d6:6a:e7:cf:80:2b:f2:88:
32:d6:c5:ea:44:3e:d5:01:5f:38:c3:39:1b:b3:72:
ea:c4:7c:39:7a:31:ca:33:aa:bc:05:d6:d8:fa:fe:
40:4b:c1:57:72:14:1f:b7:1c:d2:73:17:e3:e4:24:
f8:51:f1:0b:be:43:9e:56:19:ef:d1:53:2d:1e:a1:
25:9b:95:5b:9a:65:72:d4:e1:9e:b7:8f:60:91:cf:
46:7f:9c:02:32:13:56:5f:8a:2f:cc:ca:d7:89:55:
fd:b8:f1:81:49:8b:d7:97:51:b9:c2:b3:34:aa:19:
33:96:d4:79:26:a0:f9:bf:6f:5c:59:83:88:34:70:
63:29:f5:41:2a:7f:ba:36:14:18:76:5e:23:3b:38:
b1:9c:6e:de:8b:04:d0:a6:81:81:bc:06:e7:c6:3f:
05:7b:f8:e9:b1:88:d9:49:7b:53:41:44:10:49:20:
b9:72:c6:6b:3f:aa:b0:ae:ce:95:7c:90:48:15:5f:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:34:0E:28:5D:B9:C3:D2:FF:F4:70:90:C8:D2:DF:7E:F2:C5:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PFI0DihducPS__RwkMjS337yxW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:77:ff:9f:35:c8:d8:4c:dd:41:8b:14:92:28:6e:5c:f6:b1:
fb:13:47:c3:2e:8a:cb:aa:50:33:2a:e3:9a:f6:1b:df:2b:ab:
4f:f3:c1:06:e8:3c:b8:2b:8f:89:e3:4d:81:c9:83:ad:85:b6:
4a:45:47:9f:54:26:ed:6c:0d:e6:cc:68:8a:e9:19:8e:03:c1:
4c:85:57:a1:07:81:7b:cc:d3:a7:1b:d1:eb:1f:04:66:78:c7:
78:1f:5d:98:4c:9f:3a:ee:3d:40:be:8d:13:45:42:18:1d:9a:
1e:6b:11:00:7e:eb:90:20:9b:72:12:bf:88:b0:ec:e8:f4:0a:
f9:40:fe:c8:15:1f:5a:15:84:70:a3:2d:0a:40:8b:a0:ba:37:
14:6e:2c:a3:d2:de:02:8c:0b:ff:b5:2b:a4:e3:e7:c4:f1:2b:
84:e4:5a:14:65:8e:c3:69:75:53:ce:ee:b0:d0:1c:b9:39:c1:
61:a6:c4:f2:81:a2:ab:04:0b:d0:4a:bc:72:4a:15:50:e5:c7:
2e:08:6e:75:3c:49:4c:f2:eb:69:b6:48:20:7e:db:23:24:4e:
11:8a:47:31:75:77:5d:25:e2:11:77:1c:a4:85:53:6f:1b:4e:
74:0b:c5:55:dc:e8:34:3a:77:45:9e:5c:22:69:21:6a:1a:50:
53:e7:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:54 2025 by rpki-client