Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa
File:                     Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa (raw, json)
Hash identifier:          SvjCg8cBoBsw4Y3TYlkPYJ822wzTtiZiAuRk78GOquk=
Subject key identifier:   2E:DB:1D:FE:44:EA:86:09:68:1D:1A:32:E1:00:88:AC:07:98:1B:1A
Certificate issuer:       /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial:       018CCA2A7AE67D1932235AA5981AEDD56650
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa
Signing time:             Tue 02 Jan 2024 12:33:50 +0000
ROA not before:           Tue 02 Jan 2024 12:33:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44381
IP address blocks:        193.160.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:7a:e6:7d:19:32:23:5a:a5:98:1a:ed:d5:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
        Validity
            Not Before: Jan  2 12:33:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2edb1dfe44ea8609681d1a32e10088ac07981b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:d2:c9:53:2d:ac:25:c3:86:c9:5b:ef:a2:
                    55:bd:81:5e:4c:cc:f3:0c:f6:12:6b:ef:4f:ac:91:
                    a8:d7:b0:de:a5:c9:da:0c:36:46:39:d9:ad:7a:38:
                    4d:0f:fc:68:28:5c:d9:b3:0e:b5:15:a0:57:cc:99:
                    1a:8e:0f:6b:ea:1a:f9:99:af:88:3a:3c:93:62:52:
                    31:bf:9b:24:02:af:9d:c1:01:3a:e6:54:eb:97:bd:
                    0c:b2:7f:e4:ae:56:89:f7:71:75:d0:b7:cf:e2:89:
                    14:af:f9:f5:82:6b:5c:41:b0:9a:82:e9:ce:0d:f0:
                    23:1b:ff:d1:dd:8a:68:64:69:23:34:54:e2:36:2d:
                    09:cd:be:04:04:da:f2:69:aa:e0:d4:de:9e:c5:c9:
                    f7:d0:5f:d9:6c:25:67:f0:fa:39:b6:d4:ed:69:28:
                    21:17:f4:af:89:f7:5b:59:c6:c3:13:d6:74:61:d4:
                    d3:0a:a2:05:99:f9:e6:47:d1:60:57:4d:81:06:5e:
                    77:01:67:3e:de:89:10:d9:ed:da:f5:72:b3:07:8e:
                    5d:de:08:5b:d8:95:4a:72:76:1e:12:d0:f5:89:6a:
                    79:f9:d0:08:09:8a:17:37:ae:dc:ee:04:ed:6c:bd:
                    30:f3:a3:a5:93:0e:f5:00:c0:3f:b6:a7:3a:5c:4c:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DB:1D:FE:44:EA:86:09:68:1D:1A:32:E1:00:88:AC:07:98:1B:1A
            X509v3 Authority Key Identifier:
                keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:08:af:96:fb:16:f8:58:1c:79:80:26:ec:c3:4c:b4:45:
         5b:af:1b:0a:c8:9c:d6:58:2b:0a:51:e7:c3:72:21:0c:1a:2a:
         75:0c:cd:63:21:ed:55:99:36:0f:43:4f:3b:b8:be:da:c7:3a:
         9f:85:33:d0:5e:0f:5c:7e:c7:af:2a:ab:24:50:86:4f:52:02:
         f5:18:54:ee:16:a1:cb:3c:d6:cf:71:68:e9:30:29:84:fa:ef:
         a6:60:bd:85:c8:95:16:30:67:0e:ba:bd:24:36:a8:9a:55:df:
         df:e4:71:3d:37:1a:1c:86:44:25:76:28:d3:48:a7:f5:cb:47:
         18:86:90:22:30:26:99:6b:f6:2b:a9:2c:b1:16:64:86:19:09:
         f1:da:23:ad:fa:54:24:02:5b:95:66:ef:2a:5b:1f:b4:d4:e2:
         cf:74:6e:0d:99:8e:69:33:00:36:e0:c8:d0:04:28:e6:94:49:
         80:b3:aa:97:28:22:0a:bc:69:3e:f7:37:50:48:9f:78:b1:71:
         e6:d8:e0:d1:c6:8a:fc:51:0c:fe:df:e3:5a:da:6c:6b:37:f5:
         7f:9d:36:32:bb:3a:c4:51:a1:67:f1:8e:ac:8f:36:3a:39:6d:
         92:9d:4a:6d:e6:eb:57:8c:46:39:ec:c8:cf:94:c7:81:6c:33:
         23:8a:ad:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:30:45 2024 by rpki-client on console-ams.rpki-client.org