Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/OU8yvue2-azbRc6beGdL9AoBv10.roa
File: OU8yvue2-azbRc6beGdL9AoBv10.roa (raw, json)
Hash identifier: bXvTetani1Xr48nm/Od6TmHfzkfEvkht4jKzr4sjpck=
Subject key identifier: 39:4F:32:BE:E7:B6:F9:AC:DB:45:CE:9B:78:67:4B:F4:0A:01:BF:5D
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 018CC79351D8C5E0C89A3A0A3CB9113A6010
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/OU8yvue2-azbRc6beGdL9AoBv10.roa
Signing time: Tue 02 Jan 2024 00:29:29 +0000
ROA not before: Tue 02 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51270
IP address blocks: 194.149.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:51:d8:c5:e0:c8:9a:3a:0a:3c:b9:11:3a:60:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Jan 2 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=394f32bee7b6f9acdb45ce9b78674bf40a01bf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:61:4a:e4:7c:17:18:5b:8a:c1:f9:77:a2:
2b:95:4a:2b:da:6e:46:23:68:aa:98:26:7c:5e:36:
67:07:20:22:78:9a:4a:6b:90:ca:18:75:88:fb:20:
a5:e2:ef:14:a9:bf:e9:98:6a:81:3c:13:cb:8a:09:
4c:8a:51:2c:83:9d:3b:6a:02:dd:a8:ff:d6:f5:bf:
3f:45:53:e3:08:4c:8b:94:b6:d6:14:2b:68:e3:91:
60:ed:13:51:f8:8d:1c:30:85:65:05:a0:67:3c:8e:
ab:16:b2:a8:62:21:fb:98:5f:99:04:04:dc:70:f2:
08:c7:05:9f:f7:2e:27:8e:1a:b4:b4:25:8f:ef:aa:
b4:b2:58:fe:ef:da:0c:0f:9a:a3:84:d4:d0:bf:e6:
20:6a:df:be:35:72:9e:d3:1b:8b:92:1d:94:95:15:
5f:06:26:28:85:28:96:65:9c:c8:3f:a4:ef:a5:d7:
97:35:cc:94:8d:91:9c:14:0e:c1:eb:e3:1a:98:32:
6b:7c:3d:4d:09:31:69:fa:09:77:0e:33:39:fa:30:
c7:69:be:ab:04:77:d6:de:46:fe:af:24:7e:c0:28:
ca:63:14:d6:5b:1d:df:8a:da:fa:02:78:64:f7:f9:
5c:00:28:46:04:77:72:f6:66:79:e7:2b:05:7d:a1:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:32:BE:E7:B6:F9:AC:DB:45:CE:9B:78:67:4B:F4:0A:01:BF:5D
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/OU8yvue2-azbRc6beGdL9AoBv10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a8:c5:00:02:22:23:23:15:32:06:1a:8f:33:07:e3:71:d6:
6e:93:25:5e:0a:fd:f9:4e:e9:13:ab:d4:fb:27:ec:57:00:c8:
08:7f:27:d5:dc:17:17:95:81:cd:d0:39:61:84:e8:33:ef:a7:
0e:aa:18:83:3d:2d:77:03:2e:b1:fe:31:44:2e:78:fd:78:6f:
78:18:49:24:38:82:20:00:be:ff:99:fe:24:a8:94:c4:41:80:
0b:1b:d7:21:6b:33:60:14:fa:14:82:b7:17:99:e4:29:06:e9:
4c:5a:5b:d4:46:52:42:18:37:79:8d:17:1f:ce:73:8c:ac:62:
8d:29:a9:01:1f:56:3f:5c:b6:11:47:2b:3b:13:bf:72:19:3c:
d5:8b:65:7c:79:3a:e1:7f:03:64:41:cc:e7:52:ae:05:a8:78:
e0:4b:15:8e:62:41:2d:02:a5:77:59:40:9f:31:ba:1c:85:ca:
cc:fa:1b:b0:c9:db:0b:b4:a8:f9:ba:00:66:8d:af:f2:fb:5b:
6d:24:e6:83:33:0a:70:83:77:c1:96:50:c4:24:a0:e4:ae:54:
22:cf:e9:da:3c:24:d2:fb:d4:58:20:6b:4f:ba:1e:5d:b2:b2:
5f:e7:4a:84:34:1f:35:e4:09:f2:15:76:89:32:78:f4:cd:86:
5a:c0:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:17:49 2024 by rpki-client on console-fra.rpki-client.org