Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/BYB_srbbOAl2KI7rAModEgAfjW0.roa
File: BYB_srbbOAl2KI7rAModEgAfjW0.roa (raw, json)
Hash identifier: fkE0XKSgV9f0HrQtqm9ZplkylvO/3/62WPSe40crOp4=
Subject key identifier: 05:80:7F:B2:B6:DB:38:09:76:28:8E:EB:00:CA:1D:12:00:1F:8D:6D
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 018CC94E0C7109477CCC0B87E051A86D4453
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/BYB_srbbOAl2KI7rAModEgAfjW0.roa
Signing time: Tue 02 Jan 2024 08:33:04 +0000
ROA not before: Tue 02 Jan 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 158.255.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0c:71:09:47:7c:cc:0b:87:e0:51:a8:6d:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05807fb2b6db380976288eeb00ca1d12001f8d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:24:ac:d6:c0:f7:4c:44:84:69:23:db:c4:58:
62:1c:83:e4:a6:ac:3f:69:09:63:07:a1:40:aa:9f:
be:72:7c:ba:e9:ae:a1:b1:60:50:c3:9d:68:dd:04:
03:96:ee:40:7f:2d:ff:75:19:0b:75:db:cc:63:57:
84:3f:2d:8a:e4:8f:d8:8b:ae:b0:61:ce:38:a3:9d:
bc:b0:ab:65:5a:f2:5d:1e:eb:67:03:78:21:cf:10:
5c:33:85:7d:a2:22:3d:80:32:47:3f:21:54:f2:34:
ce:63:d4:1e:9b:07:18:06:17:eb:1e:9d:f4:da:12:
d4:78:13:29:a6:16:b0:0e:f2:a5:c3:1d:02:8a:79:
7e:91:7d:0b:41:a7:c3:c2:0b:51:bf:49:b9:e2:6f:
a2:7e:08:c5:7b:e3:53:a2:bb:00:63:44:4c:80:48:
48:32:c6:88:d0:84:2c:e8:9c:70:d6:5d:68:d5:31:
ba:17:37:3f:82:15:ea:9b:cd:8a:95:3b:ff:df:5c:
3b:64:dd:19:98:f1:3a:04:11:c2:37:40:2d:1c:31:
a8:04:c4:9c:b7:74:44:d0:55:c7:f8:25:5a:37:c1:
25:30:ba:a1:64:01:a4:5c:3a:69:b7:75:34:aa:a6:
1c:8b:ab:82:c8:d1:d2:f6:6b:4a:ff:35:9a:4a:d6:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:80:7F:B2:B6:DB:38:09:76:28:8E:EB:00:CA:1D:12:00:1F:8D:6D
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/BYB_srbbOAl2KI7rAModEgAfjW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:02:0f:2d:ca:ea:b1:0f:98:d1:63:1c:3e:bb:4f:53:e3:7e:
c5:67:8e:77:89:92:72:fe:9d:f7:40:a4:63:42:eb:2f:7d:e5:
8a:03:18:8e:35:3b:e5:15:7f:09:5f:81:8f:c8:82:be:ab:a7:
79:90:46:d6:b7:41:35:18:f0:08:ae:21:2e:aa:0b:b1:f9:66:
f3:02:3a:8b:87:b3:36:af:3a:ca:f5:dd:c3:f3:f7:65:75:e8:
3a:f2:aa:1e:f5:c1:72:fa:24:7f:e6:5b:49:3f:85:69:ff:8e:
42:3d:46:fe:1c:72:ea:8c:cb:7a:61:d7:02:ac:08:82:73:89:
21:4f:49:b4:35:50:f4:4a:25:cf:be:2f:0a:bd:00:eb:85:f4:
49:fa:1d:f8:2e:c4:24:b5:cd:25:2d:ad:a9:67:9b:cc:e9:6a:
b2:e8:d3:d5:b7:af:c3:6f:89:06:7a:5b:f1:44:3a:13:88:27:
a1:64:66:f8:0d:c9:d7:f5:7c:1e:9d:c4:55:a5:28:62:7e:2d:
2e:ac:8c:3f:0e:34:63:14:4a:95:38:f7:f5:4e:59:89:4d:8b:
70:7a:28:04:2c:b9:5f:1f:43:44:b5:e9:de:62:85:06:3d:72:
37:8c:8a:8f:45:4a:48:73:a1:72:e0:d9:12:98:c6:b6:63:89:
08:5a:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:48:43 2024 by rpki-client on console-ams.rpki-client.org