Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/BYRLH_KWuBvy2HeSIwc3x4SSD3s.roa
File: BYRLH_KWuBvy2HeSIwc3x4SSD3s.roa (raw, json)
Hash identifier: URVxVwh6Gz7Bvfq8lTkA0CCC0h+VNcHdvstCsuiy3A8=
Subject key identifier: 05:84:4B:1F:F2:96:B8:1B:F2:D8:77:92:23:07:37:C7:84:92:0F:7B
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 018CC501120CAB18D3A49EE6F6312FC8949B
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/BYRLH_KWuBvy2HeSIwc3x4SSD3s.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.15.16.0/24 maxlen: 24
194.15.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:12:0c:ab:18:d3:a4:9e:e6:f6:31:2f:c8:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05844b1ff296b81bf2d87792230737c784920f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:8a:04:76:30:64:76:33:2a:ed:81:85:ec:
85:71:9b:d1:04:dc:ac:37:64:d2:b5:69:cd:0a:aa:
08:55:aa:41:a7:02:06:86:2e:8f:ff:81:ef:04:17:
98:a2:2d:99:ae:f4:99:7a:67:ea:6e:59:8b:69:e7:
b0:27:a0:5a:bb:13:a8:29:cc:a2:d7:9c:fd:a9:41:
a6:ec:ec:08:8a:9c:58:cd:c1:36:87:13:0d:f3:16:
76:b5:7a:74:98:4e:b9:da:97:30:26:de:eb:97:a4:
5f:14:4c:04:2d:27:a8:48:c9:7c:8b:08:bd:4f:ff:
4f:f0:9b:c4:a6:b0:b0:0c:91:f1:4b:72:c6:56:0b:
e0:d3:76:2c:c1:36:8c:c6:f3:cf:d5:6f:c2:14:5e:
63:d4:c8:cc:05:26:84:3f:69:db:40:13:74:05:e6:
18:32:29:9b:83:61:70:d1:42:bd:0d:a6:82:12:50:
1a:41:b2:44:b2:e9:c8:a5:61:d0:4d:c2:ca:99:03:
3b:50:78:e5:e0:70:c2:9b:a6:51:72:05:06:3e:86:
c7:91:4a:5d:cc:97:c3:0c:75:74:68:59:85:e6:e0:
3d:b8:3f:2a:1f:53:b6:51:d2:c0:8c:59:09:26:09:
22:ce:ef:6a:38:a6:61:6f:0a:c3:b6:11:71:95:9f:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:4B:1F:F2:96:B8:1B:F2:D8:77:92:23:07:37:C7:84:92:0F:7B
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/BYRLH_KWuBvy2HeSIwc3x4SSD3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.16.0/24
194.15.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:72:b5:c3:7a:5a:b9:8e:80:bc:f0:bb:75:74:82:81:75:c4:
0f:a5:85:0a:24:84:03:61:fd:a7:a4:aa:5e:f9:89:e1:1a:16:
c9:bd:2a:5c:7a:6b:c2:47:5c:47:b9:6b:e7:a0:5f:57:6e:d3:
ad:98:d6:98:a8:68:a6:34:56:a9:0e:ce:d0:f8:ad:1c:6b:2d:
68:74:0f:69:d6:48:d0:21:a3:5d:93:3a:fc:7a:e5:09:1d:fe:
71:3c:f8:cc:52:56:e3:77:7a:70:f2:ea:6c:2b:43:eb:a1:34:
90:1a:2f:e3:8c:6f:9a:72:b1:6a:9f:ac:b8:14:4d:1c:55:05:
d4:8c:f9:16:6b:93:a7:be:d3:aa:85:4a:a4:17:5c:d4:b3:2a:
0b:91:68:4f:e8:46:35:1f:32:79:20:81:5e:8b:1d:db:4e:e4:
17:cd:e3:4b:5d:9f:f1:6c:80:49:8f:cf:e0:e8:18:8d:e9:78:
3b:ea:97:fb:cd:27:b1:85:be:47:13:33:50:4c:9b:f1:bc:0d:
c0:64:f9:07:9c:e7:f7:88:01:88:0b:db:1a:1d:07:1c:7b:3a:
a3:77:96:e7:b3:f4:2d:5f:1c:25:63:45:c9:77:51:29:a6:80:
42:0e:0f:17:9b:e6:11:35:91:b9:90:88:9a:34:6b:2e:9e:48:
17:44:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:28 2024 by rpki-client on console-ams.rpki-client.org