Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/BAYMWjNPc4aT81JQhPjrXO_Der8.roa
File: BAYMWjNPc4aT81JQhPjrXO_Der8.roa (raw, json)
Hash identifier: YsTym/cQQpBW+FW29Hxq1d2mklEHgl7mYTZMzFsEcn0=
Subject key identifier: 04:06:0C:5A:33:4F:73:86:93:F3:52:50:84:F8:EB:5C:EF:C3:7A:BF
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 018CC6B830587616456E800BB122489731A5
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/BAYMWjNPc4aT81JQhPjrXO_Der8.roa
Signing time: Mon 01 Jan 2024 20:30:08 +0000
ROA not before: Mon 01 Jan 2024 20:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 91.220.231.0/24 maxlen: 24
2a0a:ed80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:30:58:76:16:45:6e:80:0b:b1:22:48:97:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jan 1 20:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04060c5a334f738693f3525084f8eb5cefc37abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:a5:5a:e7:5c:68:35:fb:4d:ba:d1:2d:15:
b9:4c:51:c6:42:ec:18:ca:12:29:4a:45:52:1e:f2:
97:c5:8a:4d:05:fd:87:c6:71:c5:20:9a:c6:fe:a5:
1f:93:82:4c:4b:e7:c2:0e:00:c7:37:c1:99:8e:85:
a9:cd:b1:6c:68:61:98:4b:28:33:ae:70:5b:31:7e:
89:15:d9:de:0d:74:eb:a2:ed:71:3f:dc:19:4e:1a:
8c:69:2c:99:1c:43:6e:54:f5:8c:b7:25:a0:ed:4d:
3a:1b:19:8d:97:b9:ba:a0:7e:13:15:b7:71:67:b0:
8d:d7:cc:fc:12:cc:e5:14:7c:89:14:16:6c:1a:e6:
8d:1a:90:ae:36:0b:62:88:8c:30:8b:4d:08:eb:8b:
93:f9:42:af:74:a1:37:d1:aa:92:9e:be:ed:45:6f:
c1:8c:9c:63:8a:cb:8f:70:0c:46:74:bd:8b:1c:4c:
64:f5:6b:18:eb:4b:a7:b8:98:6a:20:16:f2:de:5d:
8d:de:32:70:1a:5f:21:4b:c7:9d:7a:41:65:89:cc:
46:a5:a0:58:82:76:df:f8:da:32:b5:45:80:50:93:
53:43:10:b0:0f:b8:f7:4a:b3:67:ed:ed:8f:fc:1c:
7d:9e:1e:45:56:58:c9:e2:54:0f:e7:1a:0c:d0:2f:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:0C:5A:33:4F:73:86:93:F3:52:50:84:F8:EB:5C:EF:C3:7A:BF
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/BAYMWjNPc4aT81JQhPjrXO_Der8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.231.0/24
IPv6:
2a0a:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
00:c5:4a:ee:0a:16:31:89:42:ff:34:d3:52:ed:6e:99:87:44:
be:fb:51:61:3c:dd:0d:f1:c8:ff:d0:f3:e9:7f:43:e5:d8:af:
8c:e3:ca:5e:38:9b:0b:3b:da:78:fd:a4:d3:34:1f:19:d2:8d:
85:0f:1d:dd:75:60:35:3c:77:3c:85:07:c5:f0:d5:66:36:78:
e4:f1:b3:76:0c:50:a7:03:2a:bb:53:a0:88:4a:c3:df:4f:29:
65:0f:e5:40:8b:3e:6b:98:e0:9d:22:90:9b:a5:c1:ce:f2:e0:
60:10:04:32:fb:85:1a:75:d3:e5:a5:10:a4:5b:20:d6:49:e1:
02:fc:db:49:41:a4:ce:c5:42:f7:46:e5:a8:13:0a:73:d2:90:
7a:3c:b1:29:ea:1a:5c:95:73:5c:0d:0e:f2:0e:e1:bf:d2:0b:
33:cc:9e:5d:7f:23:01:c8:20:42:1a:5f:85:37:89:de:a9:61:
5f:7f:77:91:d9:b5:b6:eb:81:f8:1b:78:ec:ee:9d:13:0c:71:
a3:76:49:ab:d4:52:fa:24:ac:4f:4c:da:d6:94:64:11:ed:58:
51:8a:a9:97:71:ec:71:bb:7c:cf:05:45:3a:b6:11:b5:ef:93:
f6:d6:e9:e5:cd:14:8c:8c:b6:b6:38:73:0b:85:04:33:b9:be:
8b:f8:de:99
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGuDBYdhZFboALsSJIlzGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjQwMTAxMjAzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDA2MGM1YTMzNGY3Mzg2OTNmMzUyNTA4NGY4ZWI1Y2VmYzM3YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl12lWudcaDX7TbrRLRW5TFHGQuwY
yhIpSkVSHvKXxYpNBf2HxnHFIJrG/qUfk4JMS+fCDgDHN8GZjoWpzbFsaGGYSygz
rnBbMX6JFdneDXTrou1xP9wZThqMaSyZHENuVPWMtyWg7U06GxmNl7m6oH4TFbdx
Z7CN18z8EszlFHyJFBZsGuaNGpCuNgtiiIwwi00I64uT+UKvdKE30aqSnr7tRW/B
jJxjisuPcAxGdL2LHExk9WsY60unuJhqIBby3l2N3jJwGl8hS8edekFlicxGpaBY
gnbf+NoytUWAUJNTQxCwD7j3SrNn7e2P/Bx9nh5FVljJ4lQP5xoM0C9tcQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAQGDFozT3OGk/NSUIT461zvw3q/MB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvQkFZTVdqTlBjNGFUODFKUWhQanJYT19EZXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9znMA0E
AgACMAcDBQMqCu2AMA0GCSqGSIb3DQEBCwUAA4IBAQAAxUruChYxiUL/NNNS7W6Z
h0S++1FhPN0N8cj/0PPpf0Pl2K+M48peOJsLO9p4/aTTNB8Z0o2FDx3ddWA1PHc8
hQfF8NVmNnjk8bN2DFCnAyq7U6CISsPfTyllD+VAiz5rmOCdIpCbpcHO8uBgEAQy
+4UaddPlpRCkWyDWSeEC/NtJQaTOxUL3RuWoEwpz0pB6PLEp6hpclXNcDQ7yDuG/
0gszzJ5dfyMByCBCGl+FN4neqWFff3eR2bW264H4G3js7p0TDHGjdkmr1FL6JKxP
TNrWlGQR7VhRiqmXcexxu3zPBUU6thG175P21unlzRSMjLa2OHMLhQQzub6L+N6Z
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:03:44 2024 by rpki-client on console-fra.rpki-client.org