Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa
File:                     0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa (raw, json)
Hash identifier:          6583MAWzdrncQ6gg9ZZNT3+LbZAfBtuGoqf64TVeLb0=
Subject key identifier:   D1:A8:D7:A9:47:B5:44:7E:40:88:D9:76:06:67:1B:6D:A5:CC:92:45
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       018CC72754D6589A0824D470C18B68C551EB
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa
Signing time:             Mon 01 Jan 2024 22:31:32 +0000
ROA not before:           Mon 01 Jan 2024 22:31:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207459
IP address blocks:        213.238.167.0/24 maxlen: 24
                          213.238.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:54:d6:58:9a:08:24:d4:70:c1:8b:68:c5:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Jan  1 22:31:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d1a8d7a947b5447e4088d97606671b6da5cc9245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:4f:de:4f:77:68:18:c2:fc:ff:08:61:2b:
                    c3:4e:fc:70:a8:8c:0d:b5:b3:d3:74:ef:6f:5e:61:
                    d1:8b:21:40:b9:9d:5e:79:92:10:f1:2b:c8:0d:7a:
                    47:bd:bd:b2:74:62:ef:51:74:6a:38:0b:8f:85:82:
                    41:66:b3:a7:c7:31:c4:b0:4a:a4:96:66:e4:e8:73:
                    d9:13:f0:27:6c:d5:20:9f:3f:d3:01:4b:ea:dd:98:
                    e6:24:11:42:04:ad:77:35:6c:40:73:56:c3:22:fd:
                    66:64:eb:37:4a:71:e2:55:27:1b:c5:d5:55:c1:b8:
                    d6:13:9c:bc:a0:19:2d:88:43:37:fa:79:f1:74:47:
                    5b:c4:5f:dd:15:d0:59:0e:70:68:34:ee:e1:77:dc:
                    54:5b:d7:20:ea:2a:3b:6e:f9:2d:37:53:f4:8c:ee:
                    63:e7:b9:8f:89:c5:f9:52:07:cb:88:95:ef:a3:24:
                    4d:8d:c3:8b:fd:ad:ab:28:22:9a:77:de:d3:c1:25:
                    78:4f:91:80:20:f2:6f:c0:45:65:63:bb:d5:8f:ce:
                    b8:9d:d4:5b:c9:03:0e:cc:20:10:db:22:c9:e6:26:
                    3a:1d:e2:12:de:36:5f:54:42:34:93:51:4d:1e:9d:
                    67:0e:97:00:d3:98:99:10:f9:20:aa:da:68:92:f3:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A8:D7:A9:47:B5:44:7E:40:88:D9:76:06:67:1B:6D:A5:CC:92:45
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.238.167.0/24
                  213.238.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:43:c9:40:9f:c9:47:c9:44:9e:09:f8:fd:e5:ae:d9:8f:
         ac:d0:a1:32:f4:13:95:7b:04:c2:f3:b2:b3:4b:7e:50:83:11:
         a1:8a:3f:0d:dc:da:ff:25:03:bb:4a:fa:5b:58:64:ef:78:65:
         01:30:30:c8:5a:af:8a:9b:9a:9a:1a:a6:e9:9e:c8:f1:ff:13:
         de:f1:15:a1:40:8a:17:19:62:9c:c8:42:f5:b7:46:65:45:3e:
         73:e5:30:37:42:00:d6:96:66:67:c6:04:64:28:e3:10:94:0f:
         88:67:74:6a:f2:25:a3:d9:0c:d5:88:b1:d4:78:8c:ae:da:df:
         6d:c6:1d:03:0c:bc:c6:92:ea:35:33:c4:ef:cd:82:ce:6c:ca:
         56:ff:60:b8:47:70:d9:99:19:40:76:60:77:de:e7:fa:34:9d:
         d0:e3:d1:f7:ea:ad:64:0b:2d:2d:ba:02:f3:42:e3:8d:29:9d:
         f2:e9:e4:49:f5:2c:40:8b:49:52:e8:61:7b:6e:f3:13:38:73:
         bb:93:9c:50:f7:ac:97:a3:7c:71:3c:20:b7:9f:95:3f:17:5e:
         71:98:a6:8f:f2:f5:03:5f:73:21:12:ec:da:ee:26:86:a3:bd:
         c2:3a:a8:2c:98:8c:db:f7:b2:cb:a5:4b:ea:f1:ee:95:92:43:
         38:e5:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:39:21 2024 by rpki-client on console-ams.rpki-client.org