Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/BYW_7BbL3UqqO1ZETiPpTgLIOxA.roa
File: BYW_7BbL3UqqO1ZETiPpTgLIOxA.roa (raw, json)
Hash identifier: 2zCXY2j0HMtMjMPPdeyw47Tk0MFIs3Uxz6AXg7scrfg=
Subject key identifier: 05:85:BF:EC:16:CB:DD:4A:AA:3B:56:44:4E:23:E9:4E:02:C8:3B:10
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A325E8B6C776B61AC6767D581EA0A
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/BYW_7BbL3UqqO1ZETiPpTgLIOxA.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209250
IP address blocks: 195.168.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:5e:8b:6c:77:6b:61:ac:67:67:d5:81:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0585bfec16cbdd4aaa3b56444e23e94e02c83b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:4c:f2:fe:0f:a5:89:de:3a:7b:f5:49:ff:
c8:5c:1c:36:0c:70:49:de:a2:01:17:40:ab:7c:19:
83:76:73:35:48:c9:f2:86:5a:3b:22:37:da:d1:95:
4a:8d:83:96:43:d6:62:25:e7:4f:7a:dc:e8:83:7c:
46:47:8b:e0:a0:42:36:0b:b9:d2:e1:92:ee:c2:0e:
f9:32:aa:aa:49:3e:8e:bb:68:d1:75:ab:50:b8:3d:
aa:ed:07:45:63:21:3d:83:db:e8:7b:72:8a:3b:71:
35:bc:f1:b6:20:37:fd:a9:f8:6c:8b:93:53:b8:25:
8e:26:44:aa:2b:55:bf:52:f8:3e:b2:83:be:66:c2:
c2:87:f9:4e:9c:92:10:5d:c0:da:0f:e4:30:30:a9:
97:49:85:44:60:19:bd:6e:ef:25:1a:41:19:b4:42:
87:c3:a3:56:e0:17:83:12:41:e7:65:26:d6:c0:57:
bc:42:1d:ad:f7:89:03:cd:6e:94:4f:fa:63:d9:a2:
7c:df:7e:0c:fe:16:f8:f8:7d:98:5e:e1:8f:e5:91:
a9:b7:8c:93:32:17:a5:c3:cb:cd:64:84:43:1e:e4:
98:ee:83:43:2a:9a:ef:2c:82:a5:b4:38:73:45:50:
cd:e1:49:49:a2:4c:37:04:90:98:df:69:7a:51:2f:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:BF:EC:16:CB:DD:4A:AA:3B:56:44:4E:23:E9:4E:02:C8:3B:10
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/BYW_7BbL3UqqO1ZETiPpTgLIOxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5a:de:2d:62:21:da:81:cd:2c:49:0d:c3:66:7e:4b:29:35:
43:72:e7:67:29:2a:41:4c:5c:08:3a:9d:30:eb:c0:fe:d0:95:
1c:90:0e:f8:93:28:05:3f:90:b4:80:90:60:fd:7e:90:72:3d:
f0:fa:da:ca:a1:dc:a4:d4:10:a3:81:06:7e:e3:62:d6:17:96:
92:3f:2f:91:3b:45:25:80:c4:64:23:65:95:10:59:e6:a1:dd:
d4:8f:47:6a:bf:4a:0b:61:6a:db:26:28:5a:44:6e:ae:e1:10:
63:11:49:85:a3:d0:ed:43:54:78:c0:86:7a:84:17:61:5e:45:
83:62:31:40:e1:39:73:de:5d:df:66:ce:af:ca:6a:aa:aa:fd:
20:fb:a3:af:b5:ad:09:a9:5b:2e:5e:ec:e5:e7:08:95:4d:9a:
e5:1e:86:28:88:75:12:78:0e:0b:55:dc:70:5b:49:08:0a:bf:
83:cb:e0:8a:13:ca:b6:5f:4b:18:e2:c8:ba:43:23:c1:26:b9:
7f:56:3b:76:f4:0b:68:7d:fa:fc:68:29:8d:55:5c:a7:e9:0d:
a8:d8:10:0b:fb:3b:69:a1:0e:7c:c5:87:ed:bf:df:53:31:8e:
fd:bd:ca:32:06:f6:86:8e:71:de:3a:9b:c5:e4:d9:e5:13:6e:
70:88:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:51 2025 by rpki-client