Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NKUBeEh9kC9L62ZechYcswmhFmg.roa
File:                     NKUBeEh9kC9L62ZechYcswmhFmg.roa (raw, json)
Hash identifier:          EVELdFJdKkPOvVfnsbi/8FVB4DrFUhn+VMWfv+AP/14=
Subject key identifier:   34:A5:01:78:48:7D:90:2F:4B:EB:66:5E:72:16:1C:B3:09:A1:16:68
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0197E859316495B1D7E4A2CAE94EB826429D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NKUBeEh9kC9L62ZechYcswmhFmg.roa
Signing time:             Tue 08 Jul 2025 04:44:08 +0000
ROA not before:           Tue 08 Jul 2025 04:44:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        5.231.70.0/24 maxlen: 24
                          5.231.115.0/24 maxlen: 24
                          5.231.203.0/24 maxlen: 24
                          5.231.234.0/24 maxlen: 24
                          77.90.22.0/24 maxlen: 24
                          77.90.41.0/24 maxlen: 24
                          77.90.52.0/24 maxlen: 24
                          85.93.1.0/24 maxlen: 24
                          89.144.17.0/24 maxlen: 24
                          89.144.18.0/24 maxlen: 24
                          178.18.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:e8:59:31:64:95:b1:d7:e4:a2:ca:e9:4e:b8:26:42:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jul  8 04:44:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=34a50178487d902f4beb665e72161cb309a11668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:ce:e6:f3:16:8f:20:89:d9:66:82:aa:fa:
                    4e:b4:db:2d:e4:25:3b:42:90:3e:b3:b0:b4:54:d7:
                    bf:7b:8b:70:35:58:e3:5f:c9:f7:bf:34:07:72:48:
                    da:a0:c6:f5:50:f6:35:44:33:ba:71:96:00:21:3a:
                    ea:a7:d8:57:5c:f8:90:e8:4d:63:1b:e3:b5:c2:dc:
                    fd:74:28:fd:9d:de:1f:d2:0b:28:10:fa:28:dd:f1:
                    ff:8d:0e:b4:c8:bc:4a:d4:cc:ca:3a:8c:ad:aa:c1:
                    4a:a5:c3:0f:1b:6a:6c:ed:f8:13:3d:9c:3b:24:5b:
                    b2:e4:47:b0:4c:99:91:54:f8:46:c6:9b:28:61:96:
                    e9:fb:11:c9:3c:3c:95:63:f5:96:67:aa:13:0c:79:
                    d3:eb:79:f1:08:c9:73:84:5c:d0:ea:8d:44:30:8f:
                    db:bc:84:03:b0:df:3b:b6:81:bc:eb:9e:0f:ff:32:
                    9a:e9:5f:81:52:02:40:36:dc:40:ff:13:92:2b:9e:
                    91:84:1e:e0:81:65:da:f4:0a:0f:c7:22:45:d0:84:
                    76:5a:66:98:50:d1:a7:54:dc:37:73:c9:17:f8:5a:
                    c5:e2:4d:74:b8:0c:59:0a:bb:6c:e4:0c:c9:97:1f:
                    e4:52:7d:39:dc:d9:02:66:39:82:95:e0:a5:fe:b7:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A5:01:78:48:7D:90:2F:4B:EB:66:5E:72:16:1C:B3:09:A1:16:68
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NKUBeEh9kC9L62ZechYcswmhFmg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.231.70.0/24
                  5.231.115.0/24
                  5.231.203.0/24
                  5.231.234.0/24
                  77.90.22.0/24
                  77.90.41.0/24
                  77.90.52.0/24
                  85.93.1.0/24
                  89.144.17.0-89.144.18.255
                  178.18.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:03:0a:20:a9:f0:65:f6:8b:35:92:14:4c:73:3c:9b:66:82:
         1b:80:dd:f7:5a:96:71:e9:51:7d:39:36:e3:62:84:d7:15:b1:
         69:55:4b:ae:a5:d7:9b:8b:6b:9f:c7:10:60:8c:fb:a2:b2:28:
         be:89:6d:d7:c8:60:9f:95:c6:bb:65:be:3a:65:61:96:ca:7a:
         07:e0:eb:17:0c:64:58:1e:3e:61:2c:26:71:c0:bf:5e:7d:4f:
         5e:8f:ff:7a:a6:0f:2e:4a:3e:00:e6:f2:51:2a:82:17:2d:38:
         c7:cb:66:a5:99:4c:d7:7d:91:e0:5f:7a:35:f3:24:bc:50:a0:
         f0:a7:2c:19:b4:f9:11:df:4a:8f:25:83:eb:b3:8a:15:f1:58:
         f9:9f:5e:fa:9a:03:f6:3f:d1:ee:f9:e2:06:38:5e:ea:53:a8:
         87:58:58:eb:25:c9:6a:98:56:82:ed:0f:9f:be:9e:e5:9c:26:
         81:ce:ee:3b:1f:d8:f6:74:0e:ab:fe:4f:6e:50:e4:ed:9b:f1:
         a8:20:bb:d6:35:8b:70:23:09:42:c9:af:38:8e:ac:73:cb:3d:
         c5:2c:6b:44:df:bb:c5:6c:d6:17:42:31:26:66:50:d3:ae:26:
         9b:26:bb:47:95:cb:93:cf:65:0e:62:d9:56:dc:1b:e5:a7:b1:
         57:06:95:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:07 2025 by rpki-client