Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/ozxh01YTrHeW4B7g6-f2s-oawF0.roa
File: ozxh01YTrHeW4B7g6-f2s-oawF0.roa (raw, json)
Hash identifier: uYVqfR2ZSnTXcImG9PdXaK0LWdYEvbThjoUUTuRQTlI=
Subject key identifier: A3:3C:61:D3:56:13:AC:77:96:E0:1E:E0:EB:E7:F6:B3:EA:1A:C0:5D
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 018CC6B7933C843A51A18F70BB20B1841AEE
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/ozxh01YTrHeW4B7g6-f2s-oawF0.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201011
IP address blocks: 91.194.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:93:3c:84:3a:51:a1:8f:70:bb:20:b1:84:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a33c61d35613ac7796e01ee0ebe7f6b3ea1ac05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:8d:9a:6c:ba:e4:1f:5a:1a:07:3d:66:a1:
47:9c:16:ed:1f:6a:58:ea:2a:06:2c:13:ff:98:1e:
4a:c5:c6:f1:eb:e9:89:c0:2e:fd:d3:dd:06:4c:a4:
2d:9c:42:ea:52:78:67:a6:1a:30:13:da:47:f8:43:
92:83:c0:1d:a0:5b:46:80:dd:ff:cc:8e:c9:53:0c:
e3:24:a0:54:fa:a8:e4:1a:ed:87:18:4e:93:47:dc:
08:95:b1:d0:61:b9:90:a6:41:00:c7:d4:8f:b3:79:
fb:e2:32:40:8c:7e:ee:66:87:30:0c:0b:d4:af:53:
ee:47:05:bb:c5:57:a3:a5:17:4b:b3:38:16:39:e7:
7d:53:a4:91:19:dd:f0:b0:ba:19:07:00:3f:74:23:
73:fd:ce:14:08:22:d7:e1:96:51:2d:50:15:ec:79:
0c:61:6e:f3:b9:5b:00:88:1d:5a:55:16:2d:40:98:
62:56:e0:a3:50:a1:d6:98:67:a2:39:75:88:08:db:
58:e4:de:ba:2d:6b:0a:2b:bb:eb:90:c4:12:6f:da:
22:6a:bc:e7:03:b7:9e:8e:22:20:93:97:d7:da:f9:
12:36:22:8f:2b:10:d7:c3:d5:f1:ba:2a:4f:15:55:
60:1e:a0:0d:fa:11:71:0c:8f:3a:3e:8c:b1:bd:30:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:61:D3:56:13:AC:77:96:E0:1E:E0:EB:E7:F6:B3:EA:1A:C0:5D
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/ozxh01YTrHeW4B7g6-f2s-oawF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3d:b0:64:9b:6d:72:6c:91:3f:99:70:7f:1e:5a:0e:5e:8c:
5f:cf:c5:d4:17:bd:f9:12:36:89:13:e0:c0:8e:30:23:1f:32:
6b:f2:c5:d7:33:9d:ea:f8:bc:e0:6b:6b:d9:a2:f8:9c:1c:70:
c4:91:f3:da:3b:b6:cf:60:91:57:89:72:8e:b7:3e:60:11:0d:
61:b2:c8:36:83:52:39:2e:ef:43:40:35:dc:4a:48:db:35:b8:
ac:86:47:cc:93:3a:6a:bd:14:bc:91:0e:26:c9:9d:b5:6c:75:
ff:a3:8d:d7:89:80:62:88:cb:a5:a4:9e:fe:35:e5:7e:bd:f6:
ab:14:d4:e9:c5:1d:4c:8c:a9:b6:f0:ec:ce:b6:43:0f:59:bd:
a5:32:c4:8d:ce:2f:fd:85:b1:40:f9:66:e5:0b:18:86:08:6c:
c0:89:8f:37:38:b8:e8:05:e4:db:6a:a5:65:5b:2c:75:55:cc:
18:34:54:28:06:b1:d6:13:14:2f:1f:98:6a:28:42:75:81:da:
ef:e4:4d:44:51:6d:7c:ac:22:2b:0d:92:44:d0:99:b7:f9:63:
c4:a3:80:b0:43:29:56:9d:9d:e7:8e:a1:d0:2b:14:9d:f8:12:
9f:e2:e6:56:5c:bf:a7:38:a0:5e:b5:a5:18:d3:e2:dd:04:85:
3a:45:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:39:21 2024 by rpki-client on console-ams.rpki-client.org