Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/LRIulte6q2nmIyMr4o25QP4JGlc.roa
File:                     LRIulte6q2nmIyMr4o25QP4JGlc.roa (raw, json)
Hash identifier:          1MUCdHxTUj/+kP9TYYH47+AHWZ6OFFQpHevrLWu5ZuQ=
Subject key identifier:   2D:12:2E:96:D7:BA:AB:69:E6:23:23:2B:E2:8D:B9:40:FE:09:1A:57
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       018CC9BC8CC2A36E2AE625728A85033C4F17
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/LRIulte6q2nmIyMr4o25QP4JGlc.roa
Signing time:             Tue 02 Jan 2024 10:33:46 +0000
ROA not before:           Tue 02 Jan 2024 10:33:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2914
IP address blocks:        81.93.176.0/20 maxlen: 20
                          81.93.176.0/24 maxlen: 24
                          81.93.178.0/23 maxlen: 23
                          81.93.180.0/24 maxlen: 24
                          81.93.182.0/24 maxlen: 24
                          81.93.186.0/23 maxlen: 23
                          81.93.183.0/24 maxlen: 24
                          81.93.190.0/24 maxlen: 24
                          81.93.188.0/24 maxlen: 24
                          81.93.189.0/24 maxlen: 24
                          81.93.208.0/20 maxlen: 20
                          62.73.162.0/23 maxlen: 23
                          62.73.165.0/24 maxlen: 29
                          62.73.161.0/24 maxlen: 24
                          62.73.160.0/19 maxlen: 19
                          62.73.166.0/24 maxlen: 29
                          62.73.160.0/24 maxlen: 29
                          62.73.171.0/24 maxlen: 24
                          62.73.172.0/23 maxlen: 23
                          62.73.167.0/24 maxlen: 24
                          213.198.73.128/25 maxlen: 25
                          62.73.169.0/24 maxlen: 30
                          82.112.102.192/26 maxlen: 26
                          82.112.104.64/26 maxlen: 26
                          62.73.168.0/24 maxlen: 24
                          62.73.170.0/24 maxlen: 29
                          81.19.96.0/20 maxlen: 20
                          158.181.56.0/21 maxlen: 21
                          213.198.83.0/25 maxlen: 25
                          62.73.176.0/23 maxlen: 23
                          62.73.179.0/24 maxlen: 29
                          62.73.175.0/24 maxlen: 29
                          213.198.82.0/25 maxlen: 25
                          62.73.178.0/24 maxlen: 29
                          62.73.174.0/24 maxlen: 24
                          62.73.185.0/24 maxlen: 24
                          62.73.181.0/24 maxlen: 24
                          62.73.183.0/24 maxlen: 29
                          62.73.182.0/24 maxlen: 24
                          62.73.184.0/24 maxlen: 29
                          62.73.180.0/24 maxlen: 24
                          62.73.189.0/24 maxlen: 29
                          62.73.191.0/24 maxlen: 24
                          62.73.188.0/24 maxlen: 29
                          82.112.107.32/30 maxlen: 30
                          82.112.102.32/29 maxlen: 29
                          82.112.102.64/27 maxlen: 27
                          82.112.107.112/28 maxlen: 28
                          83.217.241.128/25 maxlen: 25
                          213.198.26.16/29 maxlen: 29
                          213.198.94.96/27 maxlen: 27
                          81.25.192.0/20 maxlen: 20
                          212.119.0.0/19 maxlen: 19
                          82.112.96.0/19 maxlen: 19
                          82.112.100.0/24 maxlen: 24
                          82.112.103.0/24 maxlen: 24
                          82.112.105.0/24 maxlen: 24
                          82.112.99.0/24 maxlen: 24
                          213.198.26.8/29 maxlen: 29
                          82.112.102.40/29 maxlen: 29
                          91.186.188.0/23 maxlen: 24
                          91.186.191.0/24 maxlen: 24
                          83.217.239.0/27 maxlen: 27
                          83.217.241.0/27 maxlen: 27
                          82.112.110.0/23 maxlen: 24
                          82.112.112.0/23 maxlen: 24
                          82.112.108.0/23 maxlen: 23
                          82.112.114.0/24 maxlen: 24
                          82.112.116.0/23 maxlen: 24
                          213.198.86.0/26 maxlen: 26
                          82.112.124.0/23 maxlen: 24
                          82.112.120.0/23 maxlen: 24
                          82.112.126.0/24 maxlen: 24
                          82.112.127.0/24 maxlen: 24
                          91.186.160.0/19 maxlen: 19
                          91.186.176.0/24 maxlen: 24
                          91.186.178.0/24 maxlen: 24
                          91.186.179.0/24 maxlen: 24
                          91.186.177.0/24 maxlen: 24
                          91.186.182.0/24 maxlen: 24
                          91.186.186.0/23 maxlen: 23
                          91.186.180.0/23 maxlen: 24
                          91.186.183.0/24 maxlen: 24
                          81.93.185.192/27 maxlen: 27
                          81.93.208.64/27 maxlen: 27
                          82.112.104.32/27 maxlen: 27
                          81.20.70.128/25 maxlen: 25
                          82.112.123.208/28 maxlen: 28
                          81.20.66.0/25 maxlen: 25
                          82.112.107.40/30 maxlen: 30
                          213.198.1.0/27 maxlen: 27
                          91.186.176.208/28 maxlen: 28
                          82.112.102.120/29 maxlen: 29
                          213.198.86.128/27 maxlen: 27
                          5.158.208.0/21 maxlen: 21
                          5.158.212.0/24 maxlen: 24
                          5.158.210.0/24 maxlen: 24
                          5.158.211.0/24 maxlen: 24
                          5.158.208.0/23 maxlen: 24
                          5.158.214.0/24 maxlen: 24
                          5.158.215.0/24 maxlen: 24
                          213.198.28.0/24 maxlen: 24
                          213.198.30.0/24 maxlen: 24
                          213.198.31.0/24 maxlen: 24
                          213.198.54.0/23 maxlen: 24
                          213.198.65.0/24 maxlen: 24
                          213.198.71.0/24 maxlen: 24
                          213.198.70.0/24 maxlen: 24
                          213.198.75.0/24 maxlen: 24
                          82.112.101.128/26 maxlen: 26
                          213.198.78.0/24 maxlen: 24
                          213.198.74.0/24 maxlen: 24
                          82.112.102.128/26 maxlen: 26
                          213.198.0.0/17 maxlen: 17
                          213.198.4.0/24 maxlen: 24
                          213.198.0.0/24 maxlen: 24
                          213.198.2.0/24 maxlen: 24
                          213.198.3.0/24 maxlen: 24
                          213.198.8.0/23 maxlen: 24
                          83.217.239.32/27 maxlen: 27
                          185.84.16.0/22 maxlen: 22
                          83.217.251.160/27 maxlen: 27
                          82.112.102.96/28 maxlen: 28
                          213.198.85.0/24 maxlen: 24
                          213.198.79.0/24 maxlen: 24
                          213.198.84.0/24 maxlen: 24
                          213.198.26.0/29 maxlen: 29
                          213.198.91.0/24 maxlen: 24
                          213.198.90.0/24 maxlen: 24
                          213.198.88.0/24 maxlen: 24
                          213.198.93.0/24 maxlen: 24
                          213.198.97.0/24 maxlen: 24
                          213.198.98.0/24 maxlen: 24
                          213.198.96.0/24 maxlen: 24
                          213.198.99.0/24 maxlen: 24
                          83.217.239.128/28 maxlen: 28
                          82.112.107.28/30 maxlen: 30
                          81.93.208.96/27 maxlen: 27
                          82.112.98.0/27 maxlen: 27
                          91.186.177.176/29 maxlen: 29
                          82.112.104.0/27 maxlen: 27
                          82.112.102.0/27 maxlen: 27
                          213.198.1.32/27 maxlen: 27
                          83.217.230.0/24 maxlen: 24
                          83.217.228.0/23 maxlen: 24
                          83.217.240.0/24 maxlen: 24
                          83.217.234.0/23 maxlen: 24
                          83.217.236.0/23 maxlen: 24
                          83.217.244.0/23 maxlen: 24
                          83.217.246.0/23 maxlen: 24
                          83.217.242.0/23 maxlen: 24
                          83.217.250.0/24 maxlen: 24
                          83.217.248.0/23 maxlen: 24
                          83.217.251.0/24 maxlen: 24
                          83.231.128.0/17 maxlen: 17
                          82.112.102.48/28 maxlen: 28
                          213.130.32.0/19 maxlen: 19
                          213.198.86.160/27 maxlen: 27
                          83.217.224.0/19 maxlen: 19
                          83.217.224.0/23 maxlen: 23
                          81.93.185.128/26 maxlen: 26
                          82.112.104.128/25 maxlen: 25
                          82.112.123.64/28 maxlen: 28
                          82.112.107.24/30 maxlen: 30
                          91.186.190.128/25 maxlen: 25
                          91.186.190.0/25 maxlen: 25
                          81.93.185.224/28 maxlen: 28
                          213.198.86.64/26 maxlen: 26
                          213.198.86.192/26 maxlen: 26
                          213.198.95.64/26 maxlen: 26
                          82.112.101.192/29 maxlen: 29
                          83.217.237.32/28 maxlen: 28
                          81.93.181.0/27 maxlen: 27
                          82.112.101.224/27 maxlen: 27
                          81.20.64.0/20 maxlen: 20
                          83.231.183.64/27 maxlen: 27
                          83.217.239.64/26 maxlen: 26
                          82.112.107.36/30 maxlen: 30
                          83.231.233.240/28 maxlen: 28
                          91.186.177.184/29 maxlen: 29
                          82.112.101.16/28 maxlen: 28
                          2001:728:2807::/48 maxlen: 64
                          2001:728:2806::/48 maxlen: 64
                          2001:728:2809::/48 maxlen: 64
                          2001:728:4000::/38 maxlen: 64
                          2001:728:4400::/38 maxlen: 64
                          2001:728:2c00::/38 maxlen: 64
                          2001:728:2400::/38 maxlen: 64
                          2001:728:c00::/38 maxlen: 64
                          2001:728::/32 maxlen: 32
                          2001:728:2808::/48 maxlen: 64
                          2001:728:1010:300::/56 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:8c:c2:a3:6e:2a:e6:25:72:8a:85:03:3c:4f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Jan  2 10:33:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2d122e96d7baab69e623232be28db940fe091a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:7c:39:5f:f6:48:8e:22:ce:c5:d4:b2:b6:
                    bf:26:12:20:d2:e8:d1:81:7a:8f:21:bd:3f:b6:25:
                    65:7f:3d:c9:38:6c:2b:02:75:14:8b:1b:89:03:3a:
                    3f:0b:f0:07:7b:e0:23:e4:ed:d2:11:7a:bf:9d:9d:
                    8e:7c:76:7a:b5:5d:e7:82:b4:f9:2d:4b:0c:ae:84:
                    b4:2e:63:b8:8e:28:7f:8b:d4:18:f2:10:fe:52:5f:
                    5c:fc:f6:db:eb:d3:02:35:44:2a:34:2f:6b:ce:5c:
                    f3:1d:87:b5:61:f0:6e:ac:b4:a6:2a:87:f1:ac:79:
                    f2:0e:24:42:41:ff:7e:03:3d:e6:e0:d6:30:6c:bd:
                    15:4f:f8:72:0b:eb:3c:d3:99:3e:42:28:6d:f4:13:
                    e8:7d:8f:b0:7e:a0:2d:ef:f4:7a:59:b5:ea:66:1e:
                    ee:4a:33:9d:97:5a:02:69:c2:49:b6:44:85:73:f6:
                    8f:dc:d9:c1:f7:ae:e4:ae:27:ba:4b:86:7a:06:9e:
                    a3:20:ff:19:50:e3:3b:0c:25:98:d6:b8:55:e0:ce:
                    67:d7:11:1a:c9:64:e3:06:ff:58:cc:23:2c:e3:79:
                    3a:73:da:aa:6b:f0:77:11:25:c2:63:8b:7b:8b:66:
                    cd:36:60:64:5b:2d:77:36:88:75:1d:b5:04:0b:ea:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:2E:96:D7:BA:AB:69:E6:23:23:2B:E2:8D:B9:40:FE:09:1A:57
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/LRIulte6q2nmIyMr4o25QP4JGlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.158.208.0/21
                  62.73.160.0/19
                  81.19.96.0/20
                  81.20.64.0/20
                  81.25.192.0/20
                  81.93.176.0/20
                  81.93.208.0/20
                  82.112.96.0/19
                  83.217.224.0/19
                  83.231.128.0/17
                  91.186.160.0/19
                  158.181.56.0/21
                  185.84.16.0/22
                  212.119.0.0/19
                  213.130.32.0/19
                  213.198.0.0/17
                IPv6:
                  2001:728::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:98:51:68:02:f0:e5:2c:4f:83:e2:dd:00:2a:32:98:07:8b:
         8e:fc:f4:27:35:09:0f:fc:c4:25:ac:55:d0:4a:e4:cc:da:b1:
         fb:ae:f8:ce:5c:dd:06:44:f0:40:07:84:dd:fb:0b:c9:fe:e9:
         8a:49:73:f1:37:19:26:2e:42:1c:93:82:df:e6:d8:79:ee:25:
         f6:52:dc:f5:05:e3:80:42:a7:87:29:1c:be:1c:64:3a:21:8d:
         8a:ee:3d:64:ca:86:82:a8:e3:59:be:d6:98:65:8d:82:47:3a:
         4a:22:ef:15:b0:84:c3:76:99:7d:ef:b7:44:fa:11:94:e0:ed:
         c4:b8:26:6c:68:79:85:72:a6:75:3b:32:d1:e7:ec:4a:b8:68:
         e0:41:23:15:3a:14:f1:01:8f:30:99:95:d2:3d:20:05:b4:62:
         f6:ee:51:19:b6:f5:81:75:48:8f:9c:12:f2:26:52:af:52:23:
         91:eb:b2:e4:ae:91:65:4d:11:65:89:4a:39:f5:09:00:97:b9:
         56:f4:de:41:6c:a0:78:68:36:3b:4f:29:9d:a5:da:ed:d6:03:
         bc:8a:5f:19:96:3c:af:1e:f0:57:61:c6:63:90:39:91:32:0f:
         4f:80:11:f7:a3:ca:3c:c1:5d:49:b3:a9:14:15:fc:83:c9:f8:
         bc:41:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:01 2024 by rpki-client on console-ams.rpki-client.org