Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa
File: Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa (raw, json)
Hash identifier: SvjCg8cBoBsw4Y3TYlkPYJ822wzTtiZiAuRk78GOquk=
Subject key identifier: 2E:DB:1D:FE:44:EA:86:09:68:1D:1A:32:E1:00:88:AC:07:98:1B:1A
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 018CCA2A7AE67D1932235AA5981AEDD56650
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44381
IP address blocks: 193.160.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7a:e6:7d:19:32:23:5a:a5:98:1a:ed:d5:66:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2edb1dfe44ea8609681d1a32e10088ac07981b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:d2:c9:53:2d:ac:25:c3:86:c9:5b:ef:a2:
55:bd:81:5e:4c:cc:f3:0c:f6:12:6b:ef:4f:ac:91:
a8:d7:b0:de:a5:c9:da:0c:36:46:39:d9:ad:7a:38:
4d:0f:fc:68:28:5c:d9:b3:0e:b5:15:a0:57:cc:99:
1a:8e:0f:6b:ea:1a:f9:99:af:88:3a:3c:93:62:52:
31:bf:9b:24:02:af:9d:c1:01:3a:e6:54:eb:97:bd:
0c:b2:7f:e4:ae:56:89:f7:71:75:d0:b7:cf:e2:89:
14:af:f9:f5:82:6b:5c:41:b0:9a:82:e9:ce:0d:f0:
23:1b:ff:d1:dd:8a:68:64:69:23:34:54:e2:36:2d:
09:cd:be:04:04:da:f2:69:aa:e0:d4:de:9e:c5:c9:
f7:d0:5f:d9:6c:25:67:f0:fa:39:b6:d4:ed:69:28:
21:17:f4:af:89:f7:5b:59:c6:c3:13:d6:74:61:d4:
d3:0a:a2:05:99:f9:e6:47:d1:60:57:4d:81:06:5e:
77:01:67:3e:de:89:10:d9:ed:da:f5:72:b3:07:8e:
5d:de:08:5b:d8:95:4a:72:76:1e:12:d0:f5:89:6a:
79:f9:d0:08:09:8a:17:37:ae:dc:ee:04:ed:6c:bd:
30:f3:a3:a5:93:0e:f5:00:c0:3f:b6:a7:3a:5c:4c:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:1D:FE:44:EA:86:09:68:1D:1A:32:E1:00:88:AC:07:98:1B:1A
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.138.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9c:08:af:96:fb:16:f8:58:1c:79:80:26:ec:c3:4c:b4:45:
5b:af:1b:0a:c8:9c:d6:58:2b:0a:51:e7:c3:72:21:0c:1a:2a:
75:0c:cd:63:21:ed:55:99:36:0f:43:4f:3b:b8:be:da:c7:3a:
9f:85:33:d0:5e:0f:5c:7e:c7:af:2a:ab:24:50:86:4f:52:02:
f5:18:54:ee:16:a1:cb:3c:d6:cf:71:68:e9:30:29:84:fa:ef:
a6:60:bd:85:c8:95:16:30:67:0e:ba:bd:24:36:a8:9a:55:df:
df:e4:71:3d:37:1a:1c:86:44:25:76:28:d3:48:a7:f5:cb:47:
18:86:90:22:30:26:99:6b:f6:2b:a9:2c:b1:16:64:86:19:09:
f1:da:23:ad:fa:54:24:02:5b:95:66:ef:2a:5b:1f:b4:d4:e2:
cf:74:6e:0d:99:8e:69:33:00:36:e0:c8:d0:04:28:e6:94:49:
80:b3:aa:97:28:22:0a:bc:69:3e:f7:37:50:48:9f:78:b1:71:
e6:d8:e0:d1:c6:8a:fc:51:0c:fe:df:e3:5a:da:6c:6b:37:f5:
7f:9d:36:32:bb:3a:c4:51:a1:67:f1:8e:ac:8f:36:3a:39:6d:
92:9d:4a:6d:e6:eb:57:8c:46:39:ec:c8:cf:94:c7:81:6c:33:
23:8a:ad:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKnrmfRkyI1qlmBrt1WZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjRkYWJkOWJjNDY0ODVmNmE5MTYzNmVkZTc1M2RhMzhj
OGYzNjQwHhcNMjQwMTAyMTIzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWRiMWRmZTQ0ZWE4NjA5NjgxZDFhMzJlMTAwODhhYzA3OTgxYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhrSyVMtrCXDhslb76JVvYFeTMzz
DPYSa+9PrJGo17DepcnaDDZGOdmtejhND/xoKFzZsw61FaBXzJkajg9r6hr5ma+I
OjyTYlIxv5skAq+dwQE65lTrl70Msn/krlaJ93F10LfP4okUr/n1gmtcQbCagunO
DfAjG//R3YpoZGkjNFTiNi0Jzb4EBNryaarg1N6excn30F/ZbCVn8Po5ttTtaSgh
F/SvifdbWcbDE9Z0YdTTCqIFmfnmR9FgV02BBl53AWc+3okQ2e3a9XKzB45d3ghb
2JVKcnYeEtD1iWp5+dAICYoXN67c7gTtbL0w86Olkw71AMA/tqc6XExc+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7bHf5E6oYJaB0aMuEAiKwHmBsaMB8GA1UdIwQY
MBaAFMpk2r2bxGSF9qkWNu3nU9o4yPNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUt
NTAyOGMyNTliMjY3LzEvTHRzZF9rVHFoZ2xvSFJveTRRQ0lyQWVZR3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUtNTAyOGMyNTliMjY3
LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaCKMA0G
CSqGSIb3DQEBCwUAA4IBAQACnAivlvsW+FgceYAm7MNMtEVbrxsKyJzWWCsKUefD
ciEMGip1DM1jIe1VmTYPQ087uL7axzqfhTPQXg9cfsevKqskUIZPUgL1GFTuFqHL
PNbPcWjpMCmE+u+mYL2FyJUWMGcOur0kNqiaVd/f5HE9NxochkQldijTSKf1y0cY
hpAiMCaZa/YrqSyxFmSGGQnx2iOt+lQkAluVZu8qWx+01OLPdG4NmY5pMwA24MjQ
BCjmlEmAs6qXKCIKvGk+9zdQSJ94sXHm2ODRxor8UQz+3+Na2mxrN/V/nTYyuzrE
UaFn8Y6sjzY6OW2SnUpt5utXjEY57MjPlMeBbDMjiq0B
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:30:45 2024 by rpki-client on console-ams.rpki-client.org