Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oSAUpgLA_DW69Ycvvg1dPitZILk.roa
File:                     oSAUpgLA_DW69Ycvvg1dPitZILk.roa (raw, json)
Hash identifier:          vo5sp8Ty3OKAjRutAl+RadiKOa0t6niwbqCy39mCPP8=
Subject key identifier:   A1:20:14:A6:02:C0:FC:35:BA:F5:87:2F:BE:0D:5D:3E:2B:59:20:B9
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019812A0ED7874F7705F55FDF41EF614692D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oSAUpgLA_DW69Ycvvg1dPitZILk.roa
Signing time:             Wed 16 Jul 2025 09:46:33 +0000
ROA not before:           Wed 16 Jul 2025 09:46:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25369
IP address blocks:        194.231.196.0/22 maxlen: 22
                          194.231.200.0/22 maxlen: 22
                          194.231.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:12:a0:ed:78:74:f7:70:5f:55:fd:f4:1e:f6:14:69:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jul 16 09:46:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a12014a602c0fc35baf5872fbe0d5d3e2b5920b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:fa:4d:dc:d8:d7:d8:16:a4:e1:f9:65:74:
                    5b:39:d8:1d:23:8a:af:00:85:17:1c:20:14:41:88:
                    71:b5:5d:48:07:70:06:b9:b8:fd:6b:fd:88:30:6d:
                    dc:33:93:6c:61:2b:36:3d:68:07:54:90:df:27:a7:
                    7c:61:70:96:0c:94:05:be:5b:f7:55:8c:51:c6:d2:
                    1b:f5:3f:6e:27:14:b2:e6:6b:d3:c5:c6:16:66:d4:
                    01:a2:68:12:f6:4a:78:bf:ca:1c:d9:09:3b:b8:25:
                    32:60:0f:04:b9:cd:99:7e:00:8e:49:35:a3:93:8e:
                    e0:69:60:13:2b:9e:c8:93:ea:f1:2b:46:9f:78:73:
                    ca:3b:96:60:25:8b:d5:18:64:99:cc:a2:12:dc:c8:
                    e4:95:91:34:a0:6e:97:fe:2d:f2:20:1f:86:d9:41:
                    3d:4f:c2:34:5f:03:d0:b0:49:32:89:f9:53:b7:c6:
                    f6:47:87:02:ed:0e:9e:b1:ce:9b:1c:7d:96:f2:50:
                    ba:5c:90:17:84:40:f4:24:69:19:6f:de:1d:21:67:
                    95:eb:04:a8:f1:fb:ee:68:f7:f4:bf:41:b7:14:c2:
                    d6:a8:d8:3e:d1:fb:c5:ee:f8:62:93:3e:2d:8a:1d:
                    9c:30:2e:3b:ff:37:a9:d6:3e:a7:c0:00:10:39:3e:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:14:A6:02:C0:FC:35:BA:F5:87:2F:BE:0D:5D:3E:2B:59:20:B9
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oSAUpgLA_DW69Ycvvg1dPitZILk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.231.196.0-194.231.203.255
                  194.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:e4:1c:ea:00:b5:1a:d7:83:0c:46:70:ea:95:e1:e3:6e:b4:
         ad:00:87:29:84:5c:c9:c0:2b:10:0b:5c:d3:aa:5c:03:c3:ec:
         0f:4b:57:c0:95:26:cf:19:30:3b:57:29:fe:97:a3:c2:39:2d:
         4d:34:ff:52:75:0e:66:fd:cd:30:01:a4:9d:f4:cf:48:1e:f0:
         8c:2f:ab:f1:ae:a0:d0:43:ac:2e:32:24:1b:84:f8:d5:a2:15:
         f2:cc:22:6a:d9:2e:ab:00:54:26:ad:a3:74:e2:b6:25:1c:05:
         c9:e8:79:3a:d1:48:9d:e2:ef:2e:9c:61:9b:aa:0c:f1:4b:ad:
         37:b2:34:6d:c9:75:40:8f:4d:ef:05:7b:60:47:64:70:48:86:
         0b:62:33:88:3c:dd:43:c9:96:fa:a2:91:35:80:16:42:34:5c:
         9c:cd:d3:fc:40:97:a3:94:46:d7:f1:94:80:c5:90:a2:7b:2f:
         1c:59:51:1d:5d:1c:76:94:83:49:67:a1:56:a6:4a:c8:21:f6:
         fb:b1:61:20:dc:fc:df:13:fb:60:6e:5f:ac:f2:4c:ce:32:7c:
         fb:e0:fa:d3:42:fd:4d:94:8e:f9:3b:46:44:6d:74:1a:3c:2e:
         96:8e:f7:b3:c5:d7:a1:7f:fb:ac:09:84:33:41:65:71:ba:9a:
         cb:08:b8:1b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZgSoO14dPdwX1X99B72FGktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNzE2MDk0NjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTIwMTRhNjAyYzBmYzM1YmFmNTg3MmZiZTBkNWQzZTJiNTkyMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tz6TdzY19gWpOH5ZXRbOdgdI4qv
AIUXHCAUQYhxtV1IB3AGubj9a/2IMG3cM5NsYSs2PWgHVJDfJ6d8YXCWDJQFvlv3
VYxRxtIb9T9uJxSy5mvTxcYWZtQBomgS9kp4v8oc2Qk7uCUyYA8Euc2ZfgCOSTWj
k47gaWATK57Ik+rxK0afeHPKO5ZgJYvVGGSZzKIS3MjklZE0oG6X/i3yIB+G2UE9
T8I0XwPQsEkyiflTt8b2R4cC7Q6esc6bHH2W8lC6XJAXhED0JGkZb94dIWeV6wSo
8fvuaPf0v0G3FMLWqNg+0fvF7vhikz4tih2cMC47/zep1j6nwAAQOT4IrwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKEgFKYCwPw1uvWHL74NXT4rWSC5MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvb1NBVXBnTEFfRFc2OVljdnZnMWRQaXRaSUxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALC58QD
BALC58gDBALC59AwDQYJKoZIhvcNAQELBQADggEBANPkHOoAtRrXgwxGcOqV4eNu
tK0AhymEXMnAKxALXNOqXAPD7A9LV8CVJs8ZMDtXKf6Xo8I5LU00/1J1Dmb9zTAB
pJ30z0ge8Iwvq/GuoNBDrC4yJBuE+NWiFfLMImrZLqsAVCato3TitiUcBcnoeTrR
SJ3i7y6cYZuqDPFLrTeyNG3JdUCPTe8Fe2BHZHBIhgtiM4g83UPJlvqikTWAFkI0
XJzN0/xAl6OURtfxlIDFkKJ7LxxZUR1dHHaUg0lnoVamSsgh9vuxYSDc/N8T+2Bu
X6zyTM4yfPvg+tNC/U2Ujvk7RkRtdBo8LpaO97PF16F/+6wJhDNBZXG6mssIuBs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:09 2025 by rpki-client