Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BBjQDtjU4RjtZKKRvVC01fwnNLM.roa
File: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (raw, json)
Hash identifier: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=
Subject key identifier: 04:18:D0:0E:D8:D4:E1:18:ED:64:A2:91:BD:50:B4:D5:FC:27:34:B3
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F893282BCC77D7A7B1DC50807A681
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BBjQDtjU4RjtZKKRvVC01fwnNLM.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205656
IP address blocks: 212.111.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:89:32:82:bc:c7:7d:7a:7b:1d:c5:08:07:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0418d00ed8d4e118ed64a291bd50b4d5fc2734b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:fd:43:e2:04:49:18:0b:2d:b7:a5:c6:c9:
b3:b3:de:bc:47:0e:43:16:6b:89:42:45:32:f8:43:
40:6f:96:19:a9:1f:bc:c2:23:8a:69:c0:0d:13:97:
4f:d2:ac:3d:35:40:f5:0b:ed:85:6f:2e:19:be:2a:
cf:60:ef:22:3a:8b:72:8c:29:7d:10:43:4e:aa:47:
dc:fa:41:93:f4:42:28:fc:b2:2e:39:bb:b7:86:bc:
1e:99:4f:51:72:14:e6:b9:41:3b:78:ef:fb:0a:95:
58:da:a9:3f:26:cf:15:a6:fa:33:76:40:f1:de:b6:
69:0a:01:eb:ea:98:e1:13:7c:98:f6:be:7e:b9:b4:
1b:9a:ea:fb:7f:dc:4f:d4:b9:df:f7:e8:f2:29:05:
64:c5:d1:08:63:36:2f:03:8e:b7:e6:be:1b:ef:5f:
6a:05:44:da:9d:2a:92:d6:0b:5a:3e:ae:c1:29:52:
9f:7a:9f:71:84:67:1b:91:e2:1b:50:4a:20:fc:fc:
4a:d6:e1:7c:13:4c:9a:51:03:d8:33:6b:ab:da:b3:
81:d5:da:0d:83:1b:4b:6c:ef:79:aa:2b:d5:bd:b9:
7b:fc:ac:0f:50:6a:a6:71:8c:38:da:f8:1c:8e:b0:
1e:c6:ba:81:a4:65:b7:cd:32:ce:03:f2:45:50:96:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:18:D0:0E:D8:D4:E1:18:ED:64:A2:91:BD:50:B4:D5:FC:27:34:B3
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BBjQDtjU4RjtZKKRvVC01fwnNLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.205.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f8:dd:4f:d7:d3:34:56:fa:7e:e6:71:58:d2:b2:fc:9d:ad:
79:29:54:8b:5f:d3:fc:46:c8:c2:1c:c1:05:51:e5:10:fe:fb:
7c:cb:16:b9:a0:52:50:7a:31:0e:84:cc:9b:37:94:ec:92:cb:
2e:47:a5:77:a0:9f:09:b2:43:3e:89:bb:7b:bd:04:c6:5b:f5:
37:80:70:8c:1f:42:1a:f3:d0:8e:50:e3:dd:4a:31:29:30:9d:
ed:be:fd:46:35:f1:7e:a7:98:ef:d6:22:69:9b:e4:e6:6b:7d:
c1:2f:0d:b2:0e:e0:7f:31:20:5a:41:0b:e8:11:d9:92:7a:a8:
4c:86:00:ef:a0:1f:75:4c:71:92:28:33:02:dd:b8:f6:bc:f8:
a4:8f:ca:5b:d6:7c:58:ec:3a:be:5c:32:46:dc:03:92:33:9c:
93:e6:9d:6c:c8:17:13:60:72:80:65:7c:bc:e2:fc:74:bb:d0:
19:b0:8c:fd:b0:b3:c6:ac:9f:2a:cd:d4:7e:39:a9:59:aa:f0:
f5:4b:e9:1e:a4:d5:13:7a:a0:e4:f3:0d:4a:bd:7c:d3:4a:a8:
10:49:f1:28:34:4c:2e:f9:9a:d3:c7:9f:30:20:b4:d9:77:d1:
23:da:ed:f3:a0:f7:76:b2:dc:ab:9c:de:9e:a8:d4:8c:d7:12:
35:8b:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:21 2025 by rpki-client