Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kJof76yO2ihqyhfGk7y8cJpBkng.roa
File: kJof76yO2ihqyhfGk7y8cJpBkng.roa (raw, json)
Hash identifier: /zyAmmkazhudReKD9eDIDwxPdQKMll5nP0S09kqbpLs=
Subject key identifier: 90:9A:1F:EF:AC:8E:DA:28:6A:CA:17:C6:93:BC:BC:70:9A:41:92:78
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018E8A51DE9159251EF77A86E8C5DB49E415
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kJof76yO2ihqyhfGk7y8cJpBkng.roa
Signing time: Fri 29 Mar 2024 13:06:44 +0000
ROA not before: Fri 29 Mar 2024 13:06:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.156.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:51:de:91:59:25:1e:f7:7a:86:e8:c5:db:49:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 29 13:06:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909a1fefac8eda286aca17c693bcbc709a419278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:a4:c1:f6:df:4a:3f:87:5a:5e:6d:f2:b1:
86:8a:e3:2c:53:4e:6d:e2:be:5a:74:a1:18:39:eb:
f0:0d:2d:89:62:59:19:d4:43:04:c9:41:04:4f:e4:
b0:75:8a:b9:f4:ae:aa:fd:28:d3:f2:1a:a3:06:2b:
60:6f:f1:1c:2b:1d:e6:26:e5:b5:db:7b:f4:f8:86:
2d:7f:fd:60:f2:92:cb:38:3f:54:fe:c7:24:9b:fd:
71:a7:e5:e9:5a:ce:6f:10:82:ff:fe:51:1d:9a:00:
e1:78:14:12:eb:ec:f4:95:0c:f6:7a:4f:f5:5e:51:
92:77:4b:75:1a:bd:05:3d:42:bf:c9:95:2a:50:b3:
79:4a:18:2e:19:b1:3f:75:b6:36:40:c4:25:e7:ee:
01:53:5e:9f:17:ac:4b:64:73:e5:91:69:6a:e2:23:
6c:5a:96:14:b4:99:78:49:35:10:fd:91:47:74:7e:
6c:a9:f2:ff:d7:5d:0d:66:86:c6:ea:d9:78:f9:89:
0a:bf:80:84:89:6b:8b:72:1a:0b:a1:b5:18:cf:fd:
65:40:08:34:a7:c2:6f:24:2b:a3:24:2f:49:05:db:
2e:7e:54:62:69:93:e8:83:b7:7f:b0:2c:48:b6:74:
78:62:05:bf:f2:b3:15:13:0b:a5:aa:a7:d1:fc:56:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9A:1F:EF:AC:8E:DA:28:6A:CA:17:C6:93:BC:BC:70:9A:41:92:78
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kJof76yO2ihqyhfGk7y8cJpBkng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.156.0/24
85.133.216.0/24
85.133.233.0/24
85.133.236.0-85.133.238.255
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c2:3d:b7:5a:73:dc:d4:d7:02:7d:f7:7a:1f:2f:70:7f:a8:
2f:7a:6c:28:4f:96:74:6b:46:c4:25:54:0b:c6:6c:63:56:69:
61:7a:cd:00:f1:96:21:f5:9b:01:25:97:c5:22:68:84:c3:22:
b8:30:b8:c5:b1:56:e6:16:35:9f:17:52:f9:e9:53:65:96:d8:
c0:98:79:b4:50:c1:3b:9b:3c:49:43:97:75:42:10:ae:8b:d5:
10:83:16:18:20:ea:5e:58:66:b1:a0:1f:c5:9f:ee:da:22:e8:
82:01:48:0d:69:f5:b0:e6:0c:6b:a6:80:9a:ba:49:61:67:51:
87:27:7d:03:26:fa:35:03:fc:5b:6d:96:5d:a6:e7:cf:ca:64:
cb:37:99:d6:cb:02:a7:60:4c:b8:17:ae:70:cc:75:ee:5a:12:
0e:44:1e:3f:8f:33:e7:97:11:9b:92:ff:a6:a3:74:24:87:a9:
0a:c7:87:60:0a:f2:81:e5:aa:14:9f:bc:9e:f2:88:82:9e:0b:
3c:bb:72:0c:93:42:97:6d:10:50:38:cf:9c:90:e3:df:3d:1d:
1d:11:9c:80:15:3e:80:85:2b:1f:4b:28:64:c5:16:69:08:82:
8a:e3:5d:8c:1d:3a:67:73:76:94:ca:39:73:62:c1:3c:6c:ca:
0f:3e:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:02:39 2024 by rpki-client on console-ams.rpki-client.org