Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/kt_AXjE56jabMm8UWcyBpxYP1g8.roa
File: kt_AXjE56jabMm8UWcyBpxYP1g8.roa (raw, json)
Hash identifier: S+qDpuHYeTKnIAsCxtbZbtmjuh5HRlLV1n6OVtc0cic=
Subject key identifier: 92:DF:C0:5E:31:39:EA:36:9B:32:6F:14:59:CC:81:A7:16:0F:D6:0F
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 018DAE11D964EB58850F20E13017C26A1BFF
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/kt_AXjE56jabMm8UWcyBpxYP1g8.roa
Signing time: Thu 15 Feb 2024 18:40:21 +0000
ROA not before: Thu 15 Feb 2024 18:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 85.208.248.0/24 maxlen: 24
85.208.249.0/24 maxlen: 24
85.208.250.0/24 maxlen: 24
85.208.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:11:d9:64:eb:58:85:0f:20:e1:30:17:c2:6a:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Feb 15 18:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92dfc05e3139ea369b326f1459cc81a7160fd60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:09:72:14:b3:4f:e2:03:24:b4:56:f9:da:
28:b5:2e:98:18:3f:ca:8e:31:7a:81:af:65:e7:76:
d1:0a:aa:c1:6d:bd:a2:f9:c6:19:98:65:52:14:d5:
b8:86:0f:0b:8f:20:61:13:ee:36:b7:b6:2e:a4:cf:
14:cc:fb:16:2d:86:de:05:d8:1d:e4:2e:6b:bb:0b:
b1:fe:32:dc:ee:14:1a:37:52:e6:c7:3e:4c:0b:17:
c5:07:61:87:19:5e:d2:2c:a1:4c:15:09:46:3a:b1:
62:bc:c8:0b:fc:87:f5:ec:fd:dc:ad:21:13:59:b9:
10:c7:dc:b8:db:f4:79:27:fa:aa:04:0c:66:65:2b:
22:19:45:7d:26:d4:cc:99:52:eb:fb:46:a7:74:6c:
58:02:53:54:38:e0:bb:67:5c:ec:8e:8e:0f:a5:bf:
7b:c7:4c:ab:65:5b:85:f6:41:56:95:dc:34:fa:32:
c8:51:d6:02:23:f5:17:68:55:51:a0:1a:d4:9c:27:
66:e6:fe:3a:2c:b3:6c:df:04:a5:c4:ae:fa:cb:d4:
44:ed:9f:74:de:39:60:ca:d6:21:68:17:a9:cd:ff:
80:83:21:66:67:6c:1b:08:e2:24:47:c2:4a:ed:85:
ee:d6:8e:7d:c4:83:7c:a8:e0:39:19:43:1c:42:33:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DF:C0:5E:31:39:EA:36:9B:32:6F:14:59:CC:81:A7:16:0F:D6:0F
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/kt_AXjE56jabMm8UWcyBpxYP1g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.248.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ee:93:84:0c:b6:27:94:9a:05:6a:ff:9d:9c:b7:70:9d:23:
54:fe:03:31:f4:64:67:0f:51:c0:e6:f1:53:6c:fa:8b:b4:b1:
3a:50:e1:83:42:c2:b4:a8:57:ae:75:83:a6:b7:6d:95:71:c7:
bd:f9:7b:d6:e7:44:83:ac:ed:4e:0f:f1:8c:4c:83:9a:a6:6f:
bb:bf:31:07:c4:0b:46:2b:88:79:31:c1:c8:49:fe:c2:86:ba:
48:cf:f7:2a:59:1c:b9:a4:16:18:f6:06:ce:3e:b5:40:c3:3e:
97:48:2b:9e:76:1c:1d:db:b4:06:7f:4a:52:00:70:89:fd:d8:
29:74:4f:35:c7:cb:c9:68:b4:db:37:26:ce:65:94:81:ff:a1:
0a:3e:de:a2:11:bd:bd:31:e4:70:d9:df:10:69:a3:4f:82:3b:
e5:e9:b6:91:48:b5:3e:10:f4:98:02:af:97:9c:54:b8:d5:79:
e6:27:30:ff:10:a0:d6:86:7c:b8:30:51:bb:8c:83:7c:75:68:
b2:fd:69:00:a1:4f:65:50:14:c2:c4:ae:b1:6b:87:b7:85:de:
4a:76:1c:85:d6:1b:d4:8e:22:a9:cc:9a:9a:8f:9c:0f:b0:08:
f8:a7:67:50:b7:b2:bd:79:33:06:8a:b1:61:6e:e3:88:00:f2:
c1:e6:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:46:04 2024 by rpki-client on console-ams.rpki-client.org