Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/bbiCAC8k2CawpBPgM6fTMAmYAY0.roa
File: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (raw, json)
Hash identifier: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=
Subject key identifier: 6D:B8:82:00:2F:24:D8:26:B0:A4:13:E0:33:A7:D3:30:09:98:01:8D
Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial: 019420682E2DDE8A8AD03E1B3547E71EBEF9
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/bbiCAC8k2CawpBPgM6fTMAmYAY0.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204122
IP address blocks: 31.170.96.0/24 maxlen: 24
31.170.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2e:2d:de:8a:8a:d0:3e:1b:35:47:e7:1e:be:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6db882002f24d826b0a413e033a7d3300998018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:3b:1c:44:48:6f:1e:b1:d7:82:09:06:44:
59:0f:c6:29:88:48:db:10:53:82:de:6b:75:3e:c0:
de:41:ea:65:3d:87:0b:be:9c:60:13:db:06:89:3e:
c8:f1:ec:8a:93:ab:23:7d:74:e1:58:f5:c3:af:37:
10:c0:56:a0:01:12:06:9f:a3:84:91:90:25:0a:18:
3c:ec:34:32:5d:9a:a6:23:69:62:49:88:eb:0a:95:
08:01:cc:f5:12:2c:9b:0a:15:1c:ed:86:68:cf:61:
66:7a:5c:ee:3c:23:35:e0:a2:1f:11:a8:f4:81:e3:
ed:09:1c:d8:e9:ec:af:f8:42:5f:50:14:af:3c:dc:
16:cd:97:75:9f:e1:41:57:84:81:b3:ab:be:60:d6:
14:86:78:5f:19:a9:7d:45:39:e1:e4:a2:0a:ab:03:
5d:4f:b7:59:82:11:a0:d3:6d:07:a1:1e:f5:cf:15:
b6:eb:45:13:9d:ed:f2:4f:e0:65:78:ad:91:c6:4f:
81:65:32:f4:52:8b:8f:9e:a7:99:a6:3b:ec:42:f8:
50:96:71:df:05:bf:74:b7:6f:74:e3:79:03:72:7a:
c6:b8:64:b9:2d:20:31:20:dc:2f:c7:98:31:67:18:
d9:26:ba:a1:fa:da:e2:8d:4f:83:95:98:2b:80:0c:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B8:82:00:2F:24:D8:26:B0:A4:13:E0:33:A7:D3:30:09:98:01:8D
X509v3 Authority Key Identifier:
keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/bbiCAC8k2CawpBPgM6fTMAmYAY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.96.0/23
Signature Algorithm: sha256WithRSAEncryption
20:a6:be:a7:58:ae:87:8b:32:c0:be:17:fb:d1:04:b2:b6:9f:
d2:1c:dc:6b:19:62:55:b4:8a:df:4a:8a:ea:62:1f:ac:8e:27:
14:70:58:9d:8c:9e:eb:af:56:39:4a:c1:76:c4:fa:91:42:3f:
91:5e:ce:3e:7e:57:7e:b5:48:2c:7a:2f:1b:4c:f0:7f:53:32:
fa:8d:3e:b7:70:0b:7e:67:0b:93:e2:0e:89:96:49:e9:ba:8c:
59:bc:36:23:34:9a:4e:53:cc:18:5e:13:81:08:58:e2:3a:5a:
55:93:d5:69:ba:4b:f2:82:49:d1:d7:5a:74:b3:4e:6a:4d:a3:
76:ae:51:3d:e9:b4:a8:be:90:df:2d:78:64:68:54:f5:b5:ae:
fd:f8:c9:d0:78:b9:26:2b:f4:00:5c:91:c4:73:94:15:5e:e5:
96:56:48:13:84:f0:d4:57:61:3b:58:9e:67:72:a6:ee:20:da:
e3:4f:bc:ac:fc:bf:3d:e3:97:ea:e5:7d:4e:f8:e2:25:5b:06:
0c:e2:88:15:5c:8c:39:c9:dc:73:9f:7a:24:05:ca:4f:87:d7:
cc:70:ad:af:4a:07:cc:be:d5:f7:72:4e:16:d3:f7:6f:60:c4:
80:dd:39:dc:33:0a:76:5c:da:71:1d:43:60:86:ff:15:2c:bb:
2e:1e:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:32 2025 by rpki-client