Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/lt58APGbTb_Ps7upt-ikU4vudCY.roa
File: lt58APGbTb_Ps7upt-ikU4vudCY.roa (raw, json)
Hash identifier: Tod4hPr6lXQYOeGyLi+/6+1f+V0uecbJUvliyKjYygc=
Subject key identifier: 96:DE:7C:00:F1:9B:4D:BF:CF:B3:BB:A9:B7:E8:A4:53:8B:EE:74:26
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019001DF10B14C7C1F6ED83603009FF3BB74
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/lt58APGbTb_Ps7upt-ikU4vudCY.roa
Signing time: Mon 10 Jun 2024 11:18:34 +0000
ROA not before: Mon 10 Jun 2024 11:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60893
IP address blocks: 195.234.156.0/24 maxlen: 24
195.234.159.0/24 maxlen: 24
195.234.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:df:10:b1:4c:7c:1f:6e:d8:36:03:00:9f:f3:bb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jun 10 11:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96de7c00f19b4dbfcfb3bba9b7e8a4538bee7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:8c:21:db:fa:75:4f:c1:7d:74:06:09:bf:
4d:9c:e3:11:36:dc:4b:c1:66:e4:83:a8:a6:f4:1e:
bb:b5:32:dd:20:40:4c:4e:a8:04:92:3c:41:aa:a5:
7c:51:43:82:31:f5:bc:9e:d7:ac:c7:64:be:04:44:
7d:f8:b4:2e:64:53:33:b5:9d:63:6c:e1:69:95:22:
a8:f3:a3:47:cd:b1:d0:03:d1:99:e5:81:fb:1f:31:
6a:e0:77:33:80:6a:ea:59:ac:6a:02:e9:11:a8:0b:
df:82:21:60:fc:90:08:24:7f:b4:7b:5a:cb:ed:5e:
77:7b:76:93:b9:54:46:d9:e4:09:cd:da:07:2c:96:
e6:65:38:33:a5:70:03:1d:54:2c:84:8e:1b:1b:78:
24:14:2d:19:32:27:e2:4c:8a:d5:da:f5:f5:a5:8f:
b3:b0:ee:e2:0d:bc:5c:f2:c4:b0:71:6b:33:d2:fa:
ba:62:6b:96:72:dc:33:0e:34:2c:fc:7a:a8:e0:22:
1e:7a:58:b8:2a:51:9b:af:0a:1c:0a:63:90:58:41:
48:20:8a:76:09:f9:9f:2f:80:91:ee:12:e1:b2:4a:
2a:e3:ca:cc:19:30:9e:25:0d:9a:e4:22:75:0b:50:
9d:32:bc:37:9c:07:ae:c9:fa:f1:c8:af:cc:c1:18:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:7C:00:F1:9B:4D:BF:CF:B3:BB:A9:B7:E8:A4:53:8B:EE:74:26
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/lt58APGbTb_Ps7upt-ikU4vudCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.156.0/24
195.234.159.0/24
195.234.161.0/24
Signature Algorithm: sha256WithRSAEncryption
95:92:f0:f0:5a:0d:43:68:06:8b:21:3c:0a:a3:7e:c0:f3:a6:
48:5f:dd:7d:82:12:a2:8c:9b:6c:0e:3d:e0:3f:a3:60:a6:f3:
ce:0d:bb:9a:b7:1d:32:45:b5:e7:7f:77:e1:2e:ba:e5:ef:8e:
f1:bd:b5:ef:8f:02:17:02:fc:18:28:91:2f:c7:d4:31:37:f9:
b9:86:f2:95:cf:7f:bc:fd:32:5a:55:6e:ef:a5:f5:bc:a5:2c:
dc:53:50:5f:07:ff:e2:7d:01:50:e8:31:59:5e:84:4a:07:60:
f4:47:3d:84:b7:9a:6e:74:bd:cb:72:8a:60:b9:32:7d:24:d7:
07:45:5d:9f:1d:42:f7:12:2e:31:45:ad:1c:ff:fe:3a:df:ae:
f1:94:e2:33:d3:23:a9:90:54:1a:25:a6:cf:e7:d9:5d:17:9c:
12:cb:7d:f1:5d:ab:26:b5:1e:b2:e5:b2:db:8e:31:b5:61:4e:
80:1c:e5:5c:cf:01:42:ce:49:fa:a7:8e:b7:69:34:d9:08:a9:
af:68:59:90:9a:14:f8:55:24:d3:aa:79:fa:6d:ed:e2:22:32:
d9:42:78:4a:cd:a3:d3:73:d0:5f:c1:54:73:93:e6:43:0e:be:
25:bb:dc:0a:f9:10:b1:a7:32:e7:40:ed:5f:ed:7a:8d:d3:50:
7e:59:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 22:40:41 2024 by rpki-client on console-ams.rpki-client.org