Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/LtTFsTu0wvareHYXDGuCaBZdYXI.roa
File:                     LtTFsTu0wvareHYXDGuCaBZdYXI.roa (raw, json)
Hash identifier:          0F8+SRQQBaAi4QNaZNP81OC2GHjvZn2R8xOeFrqKaXs=
Subject key identifier:   2E:D4:C5:B1:3B:B4:C2:F6:AB:78:76:17:0C:6B:82:68:16:5D:61:72
Certificate issuer:       /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial:       018CC6B7791C0FAA0589FBACAFCD6AC4E4A5
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/LtTFsTu0wvareHYXDGuCaBZdYXI.roa
Signing time:             Mon 01 Jan 2024 20:29:21 +0000
ROA not before:           Mon 01 Jan 2024 20:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199236
IP address blocks:        194.113.24.0/24 maxlen: 24
                          185.4.123.0/24 maxlen: 24
                          185.4.120.0/24 maxlen: 24
                          185.4.121.0/24 maxlen: 24
                          185.4.122.0/24 maxlen: 24
                          45.128.173.0/24 maxlen: 24
                          195.54.172.0/24 maxlen: 24
                          195.54.173.0/24 maxlen: 24
                          91.211.240.0/24 maxlen: 24
                          91.211.243.0/24 maxlen: 24
                          91.211.241.0/24 maxlen: 24
                          91.211.242.0/24 maxlen: 24
                          2a02:7040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:79:1c:0f:aa:05:89:fb:ac:af:cd:6a:c4:e4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
        Validity
            Not Before: Jan  1 20:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2ed4c5b13bb4c2f6ab7876170c6b8268165d6172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:c4:26:3f:10:1e:03:73:38:09:af:20:7d:
                    05:95:52:fc:12:8d:3c:f1:10:60:11:f3:74:d2:b8:
                    0b:bd:20:40:5a:75:41:1b:12:b5:e0:8c:42:a6:b4:
                    12:fd:f1:2f:9b:da:71:80:97:24:ca:d0:e2:68:1e:
                    77:69:b6:a7:8a:4c:15:fb:72:84:d8:cb:eb:f7:fb:
                    7e:de:75:5c:e3:2f:3c:b2:30:90:9c:b9:16:66:46:
                    ca:c6:cc:35:1f:39:fe:64:ab:08:bf:bd:6d:90:16:
                    5e:a3:0b:06:d9:1d:2e:35:59:ba:6f:a5:11:b7:47:
                    31:ee:af:2c:47:ad:0a:a5:ea:e1:1b:be:da:37:90:
                    37:11:6e:65:08:b3:71:5f:fb:72:26:b0:28:76:fa:
                    43:2c:1f:1d:f6:f3:72:52:bb:c4:ca:fc:90:27:37:
                    a8:e1:fa:29:66:0c:a6:1c:2d:08:3d:35:75:8d:c7:
                    0f:69:1c:2a:07:fe:fb:74:b7:b1:cf:fa:2b:09:29:
                    d8:b3:b1:9e:2b:b8:79:5a:1d:27:ba:52:20:fc:44:
                    ce:41:cf:6d:e7:87:b6:48:05:73:cc:99:a6:8e:61:
                    99:ff:ac:f5:9e:d1:71:a6:b9:12:d3:cd:42:d0:19:
                    a1:56:a0:63:00:5e:4e:06:2a:c2:a5:fb:67:04:fe:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:C5:B1:3B:B4:C2:F6:AB:78:76:17:0C:6B:82:68:16:5D:61:72
            X509v3 Authority Key Identifier:
                keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/LtTFsTu0wvareHYXDGuCaBZdYXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.173.0/24
                  91.211.240.0/22
                  185.4.120.0/22
                  194.113.24.0/24
                  195.54.172.0/23
                IPv6:
                  2a02:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:18:c1:bd:95:ca:61:f8:67:d9:b7:3a:36:16:a6:85:f3:
         cd:34:42:f6:e3:49:23:8d:0f:58:18:7e:42:4e:8b:54:a7:aa:
         6a:82:1c:e0:d0:74:80:77:cd:a5:29:c6:f3:4f:ca:52:28:3f:
         74:2d:fa:f2:c6:35:cf:c3:b4:45:02:ba:18:ca:71:6f:11:b7:
         92:9c:98:eb:15:43:5b:50:7a:4c:f9:f6:95:98:41:3b:b5:a6:
         b0:87:0b:7b:ea:2d:ae:4e:c0:4b:ee:b7:53:be:8f:35:b6:ff:
         b1:63:58:ff:54:e7:44:28:47:4d:d9:ec:00:e5:a4:32:61:ab:
         82:80:02:64:e0:47:12:05:d7:b3:cc:3d:21:ec:8a:fc:ba:71:
         d4:02:e3:e2:23:a3:9b:db:3c:48:23:cd:f3:ba:09:f8:7a:4c:
         33:57:ac:dd:d7:7a:31:7c:53:a6:f2:2b:04:77:31:fb:dd:c0:
         2f:e3:3a:2a:a9:ec:58:5d:63:ff:aa:ce:ff:a9:ab:8b:9f:c6:
         e4:46:4d:39:37:1e:6c:fa:a1:35:ac:13:c9:e9:38:d1:c1:59:
         1c:57:bd:7c:e2:73:6c:cd:cd:3c:16:35:2f:99:ec:91:bc:59:
         97:8d:22:e2:a9:bc:32:bc:43:cb:26:fd:9a:c7:aa:96:59:50:
         8d:25:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:01:37 2024 by rpki-client on console-ams.rpki-client.org