Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/bycUBAAoDdbd3Ywhozb1CxrNJmI.roa
File: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (raw, json)
Hash identifier: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=
Subject key identifier: 6F:27:14:04:00:28:0D:D6:DD:DD:8C:21:A3:36:F5:0B:1A:CD:26:62
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 0194274854EC1DA874609CB93A0616BBA63B
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/bycUBAAoDdbd3Ywhozb1CxrNJmI.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212587
IP address blocks: 194.31.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:ec:1d:a8:74:60:9c:b9:3a:06:16:bb:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f27140400280dd6dddd8c21a336f50b1acd2662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:91:11:25:05:48:3a:0f:ce:4d:0c:0d:19:
8a:5f:a5:34:d2:8b:f8:e0:f9:be:4e:e9:1d:dd:9d:
6f:a7:d6:aa:bd:2f:32:a5:1b:d5:29:5d:63:6a:30:
af:e6:c3:42:4e:89:5c:20:1b:28:6d:d3:e9:95:b4:
f8:e6:50:97:e9:ec:2b:75:e6:8f:5a:2a:c7:27:b2:
eb:29:5b:de:26:77:0e:a2:86:2f:62:be:6d:21:bf:
cd:5d:18:44:4e:a3:dd:59:9a:94:8a:54:fd:b8:25:
3e:7b:12:dc:02:61:9d:48:f8:60:fa:75:07:8f:67:
4d:41:a3:55:7d:a3:b0:6e:82:a6:51:39:23:ae:8a:
40:52:74:c4:d8:84:6b:f1:8a:be:4b:0e:e3:65:60:
7c:43:1c:7e:6e:f2:ea:28:99:22:0a:99:36:c1:e5:
14:c6:37:38:a6:a4:51:56:c6:32:29:bf:5a:47:85:
62:b7:ed:c1:15:43:ca:70:77:88:b6:6f:19:66:dd:
40:1b:d7:68:9b:fd:ce:0f:35:5c:af:61:d9:22:24:
a4:ef:c5:43:20:6b:f1:5a:d9:cc:2c:d5:a5:be:ce:
80:0c:a9:fa:e6:81:b2:02:cd:70:2e:ad:d8:cb:4e:
ab:bd:5d:d7:8c:79:b7:37:74:a1:3b:e5:46:66:7a:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:14:04:00:28:0D:D6:DD:DD:8C:21:A3:36:F5:0B:1A:CD:26:62
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/bycUBAAoDdbd3Ywhozb1CxrNJmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:9a:6f:79:6c:d1:53:6b:87:b0:8b:03:29:30:fe:c3:be:a0:
6e:20:5a:ff:35:b1:24:43:0d:02:28:3d:79:2a:fc:e0:a9:e0:
2b:2c:ae:60:85:bc:64:91:e0:af:a4:5f:ba:bd:de:6d:1a:a0:
cc:d5:f1:ba:15:a1:ed:39:83:b4:d2:89:3a:e3:3b:9d:c8:30:
2b:87:71:35:60:c7:da:78:b6:f3:3f:cf:c9:66:f5:68:fb:ba:
4c:69:9b:6c:bb:af:0b:68:0c:3e:62:00:05:49:69:7c:c3:ee:
59:68:9a:9e:f3:e1:47:95:1a:ed:2b:ba:46:6d:b6:3e:77:c1:
96:8a:7d:a2:54:08:15:2e:8b:bb:a4:a1:7d:bf:ea:e0:bc:db:
f4:06:19:d9:6e:e5:5d:71:86:7c:3c:f8:ff:e4:f9:a7:f4:a6:
11:4f:85:5e:92:f3:55:d5:c2:29:94:3b:b4:1d:f2:2f:3c:39:
d1:c2:48:39:9b:a4:5f:b3:82:c9:be:53:f6:92:86:0c:d4:2e:
86:98:c7:07:37:9e:d2:a8:1b:29:1b:46:cc:41:63:aa:92:e0:
80:6d:40:cf:ce:a4:13:56:c9:70:f9:98:d1:f5:fc:f2:16:75:
44:6f:51:8b:b7:c8:d9:0d:bc:c4:f1:ab:8d:1a:12:6d:38:65:
07:b1:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:25 2025 by rpki-client