Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/Byj_0x7v8ktTVMnh0WHYhy2pkbs.roa
File: Byj_0x7v8ktTVMnh0WHYhy2pkbs.roa (raw, json)
Hash identifier: yyTKJwUQGZQbsBoTOM0kra6CwFt8EOCIHUmFYn0YsCc=
Subject key identifier: 07:28:FF:D3:1E:EF:F2:4B:53:54:C9:E1:D1:61:D8:87:2D:A9:91:BB
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 018CC26D0762EB7A8A99FE6DEE6763FED53B
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/Byj_0x7v8ktTVMnh0WHYhy2pkbs.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57976
IP address blocks: 137.221.64.0/18 maxlen: 24
37.244.0.0/18 maxlen: 24
185.60.112.0/22 maxlen: 24
5.42.160.0/19 maxlen: 24
2a04:e800::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:62:eb:7a:8a:99:fe:6d:ee:67:63:fe:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0728ffd31eeff24b5354c9e1d161d8872da991bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:9f:fa:03:35:a4:28:d6:bd:d4:97:c1:a2:
9e:1b:0d:1a:1c:52:b6:b7:b7:fa:18:bf:bc:9c:92:
25:76:90:7a:7e:8b:f2:61:71:3a:69:26:04:44:02:
3d:42:c4:0f:2a:97:5d:49:ca:de:7c:8e:8d:c7:f1:
d3:15:ef:21:73:6a:d1:6e:6f:6d:bf:86:74:7e:c8:
43:a3:35:80:ef:68:48:a2:32:28:cb:b7:4b:43:a0:
71:25:92:8b:0e:5f:78:3b:5a:bc:fe:fa:66:0d:2a:
2d:32:b5:71:b3:a8:a8:4d:dc:db:51:93:12:01:43:
24:13:7b:95:92:83:3a:e6:18:1e:7f:a1:fd:73:b0:
1a:24:f2:96:8f:c8:1b:20:bb:c4:7f:9c:21:2d:a1:
62:65:52:da:e3:f9:28:a3:85:fc:1a:80:b9:f1:0c:
39:93:37:2b:ea:29:21:1c:7b:c8:b5:80:3b:b4:7a:
12:78:82:c7:27:64:3e:ef:db:3d:08:1c:15:65:62:
72:3d:a3:58:7f:fd:50:ff:15:2f:38:40:da:92:84:
79:80:ba:dd:1f:6e:30:62:63:6e:20:89:ff:c3:a0:
e9:b6:96:50:c7:22:76:bd:49:81:03:f2:4f:17:15:
f6:88:02:fc:e4:1b:c0:99:0a:eb:1c:eb:d6:80:8f:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:FF:D3:1E:EF:F2:4B:53:54:C9:E1:D1:61:D8:87:2D:A9:91:BB
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/Byj_0x7v8ktTVMnh0WHYhy2pkbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.160.0/19
37.244.0.0/18
137.221.64.0/18
185.60.112.0/22
IPv6:
2a04:e800::/29
Signature Algorithm: sha256WithRSAEncryption
67:ef:e6:7a:c7:0c:fa:df:4a:35:6a:e7:8c:3b:01:3c:2a:a9:
03:64:17:a3:ee:9f:b1:46:ca:95:6e:a1:13:53:51:c2:1f:d5:
66:84:fe:6f:a1:a5:db:53:15:b3:69:59:42:5c:b8:42:ac:0c:
6c:e3:34:00:de:d6:40:00:c2:6d:5a:e9:9f:30:b7:76:f5:9b:
00:d8:34:66:1f:e0:56:31:7a:32:6e:c7:05:d7:c6:ff:ea:35:
55:6e:d3:2f:c5:38:dd:a5:a0:47:d5:3e:53:3b:72:59:4c:74:
64:df:a1:e6:76:c0:70:2f:27:85:29:8c:cc:ab:89:8c:c3:11:
76:32:81:b7:6b:17:36:fb:db:f5:f6:0e:cd:23:43:86:92:33:
b6:23:2c:6d:66:4a:37:b4:01:75:7b:95:cd:c5:a9:db:89:d8:
29:f9:1e:cb:3e:49:48:78:11:59:80:61:67:81:85:ed:70:1f:
d2:c4:f2:51:62:3c:d5:7a:a1:66:4d:b7:97:23:cf:45:d5:34:
bf:aa:95:ad:b0:41:02:b7:31:d2:f0:81:3d:c5:c8:87:69:61:
2d:53:84:5d:52:3e:0b:15:fb:6f:8e:fc:06:6e:9a:f1:f4:d5:
4f:8e:13:11:52:fb:76:7f:cb:3e:5c:cf:c7:b5:4b:4f:d0:a8:
e4:e9:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:36 2024 by rpki-client on console-ams.rpki-client.org