Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BYZMr2T6aLB6A41AGIiNRS-f33c.roa
File: BYZMr2T6aLB6A41AGIiNRS-f33c.roa (raw, json)
Hash identifier: o/E3oLZr5nEUX4z+uyf/v3+49yoE3y4bXRuzZkGK4vs=
Subject key identifier: 05:86:4C:AF:64:FA:68:B0:7A:03:8D:40:18:88:8D:45:2F:9F:DF:77
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEA46A1ACBDCC213B37545EBB4E83
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BYZMr2T6aLB6A41AGIiNRS-f33c.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47774
IP address blocks: 193.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ea:46:a1:ac:bd:cc:21:3b:37:54:5e:bb:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05864caf64fa68b07a038d4018888d452f9fdf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:47:ff:f9:8b:7b:37:1d:ff:be:1e:e3:b5:
98:34:1f:51:49:2a:51:2d:d0:fb:58:13:42:c4:e8:
fe:4f:f1:6d:04:02:7f:f2:b2:40:51:18:4f:87:96:
43:9b:04:33:bc:22:c4:e4:ff:e9:e3:0c:c3:3b:9e:
d5:66:8a:9d:ee:e2:63:bf:8b:4f:d9:6a:0e:d1:85:
b9:fd:6d:bc:fb:d5:71:00:bb:e8:0c:3c:5b:cf:a3:
12:04:ec:7e:e4:b1:df:a6:5c:35:10:83:41:e6:be:
27:75:de:7b:16:96:a2:4d:35:c3:c1:56:9c:d2:c0:
f7:b8:8b:8c:9b:e7:c7:6b:91:26:55:0d:be:d2:e1:
29:e6:ff:26:d7:8e:c6:6f:69:4b:ab:c6:6f:3b:4d:
76:67:b1:5c:00:16:c9:47:69:2f:cc:42:05:86:33:
d5:45:e9:ea:bd:4a:3b:d7:a1:3b:3f:8d:54:52:e0:
dc:4a:53:5e:81:57:06:3c:60:25:f4:3a:41:c8:bb:
1d:f3:87:46:8e:8b:ae:b3:fc:61:de:c6:9a:09:74:
18:19:30:a3:5b:f5:6f:52:c0:18:a3:dd:32:8e:77:
4f:4a:c0:c4:d9:92:d2:0d:ec:e9:d8:4b:95:d7:6f:
01:93:2d:89:c4:ac:67:fb:ba:45:bb:17:50:13:77:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:4C:AF:64:FA:68:B0:7A:03:8D:40:18:88:8D:45:2F:9F:DF:77
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BYZMr2T6aLB6A41AGIiNRS-f33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
59:38:30:8b:1f:cc:29:11:3a:40:a3:de:a9:27:4a:16:d8:7c:
4c:74:fa:4b:59:92:56:87:0f:f1:cd:aa:b7:4e:8a:26:99:af:
96:4d:e2:d2:90:bd:96:97:5b:5c:91:79:a7:82:77:84:7a:0f:
24:aa:24:63:81:3c:7a:c7:66:88:04:2a:c1:b8:d0:d3:15:63:
3c:27:2e:be:a8:62:0a:7c:1a:63:4b:61:5e:98:8f:20:e3:47:
5d:e6:50:89:3c:2a:b0:69:4a:c0:ba:2f:61:eb:c6:6d:b2:8e:
d6:15:fd:21:37:f6:70:3d:56:c7:07:a2:51:d5:0a:fe:8c:74:
fd:81:ea:fd:f8:cf:af:6f:ac:0e:e9:79:cc:56:a1:6d:b7:62:
bc:b3:21:d1:fe:87:8b:83:2a:ae:96:bc:e3:9f:eb:86:a1:d2:
49:34:d8:d7:07:fc:55:f8:97:b2:1b:77:89:9f:c4:c0:46:f9:
19:52:05:ce:55:9a:73:90:99:ee:30:80:86:9d:8c:f7:dd:56:
28:42:16:44:41:e2:71:3c:91:23:5c:8f:58:d6:b0:b5:92:33:
e9:2d:01:61:4b:ca:d1:a4:72:5d:45:5b:13:b5:77:45:c8:55:
35:46:8d:36:a2:80:66:26:5f:a8:76:3b:a6:68:b3:85:08:70:
dd:29:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org