Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa
File:                     zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa (raw, json)
Hash identifier:          QXaB82BAoJ+nH2uqKP58rlZI8TR9B2LEmy8HuDw9bBs=
Subject key identifier:   CD:B9:0C:BB:91:17:46:1E:7F:B0:B4:54:99:19:08:82:CC:96:88:A1
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       018CC7944AC06BA09A2E4565022DA6700B4C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa
Signing time:             Tue 02 Jan 2024 00:30:33 +0000
ROA not before:           Tue 02 Jan 2024 00:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207747
IP address blocks:        195.143.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:4a:c0:6b:a0:9a:2e:45:65:02:2d:a6:70:0b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 00:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cdb90cbb9117461e7fb0b45499190882cc9688a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:0d:bf:5d:bd:13:a0:be:10:50:4c:38:ab:
                    b1:c6:41:5b:20:32:9b:17:9b:dd:a3:36:84:78:23:
                    1c:4e:4b:80:3e:7e:26:52:c5:1d:f3:c5:dc:0d:80:
                    b0:2d:33:45:16:0d:75:57:10:97:70:55:92:e7:98:
                    5b:72:5d:a5:66:31:91:4a:fe:9f:df:b9:61:4d:27:
                    60:cb:eb:30:87:8d:57:d8:55:1b:66:8f:35:29:72:
                    79:9d:57:61:e3:ca:fd:4a:62:24:dc:e9:d2:f2:8b:
                    2d:9d:9d:6e:e9:52:4b:d6:79:23:7f:6a:4f:57:a0:
                    e7:47:19:90:7c:5e:92:ec:68:00:a0:e1:06:f1:82:
                    58:20:63:c0:21:5a:cf:e1:2e:d1:8a:94:0a:cc:69:
                    b9:a7:a7:b3:d0:f9:c6:04:30:0f:41:40:73:5d:ee:
                    22:8e:c6:69:d0:e4:de:35:f9:af:20:da:47:6e:a3:
                    29:ee:c8:f2:48:44:43:67:5d:df:0b:cf:23:c0:1c:
                    44:a5:81:db:e7:e8:0f:21:7f:9c:a1:19:09:2d:a3:
                    d9:e7:8d:97:7f:af:69:70:2b:3b:68:00:48:8a:31:
                    52:cf:c3:5f:64:f0:dc:21:8b:ce:e7:60:63:e3:ac:
                    27:f2:f9:90:38:9c:2f:e1:74:64:8e:3d:6b:8a:dc:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B9:0C:BB:91:17:46:1E:7F:B0:B4:54:99:19:08:82:CC:96:88:A1
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.143.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:c7:d5:2a:c2:c4:57:15:df:70:58:03:15:3d:42:cc:e8:2c:
         03:96:c0:7b:26:96:68:89:c4:e7:50:e0:4b:d5:5c:4a:c6:fb:
         eb:59:6e:0f:56:0f:c5:38:ec:be:8f:0b:45:c2:36:eb:25:9c:
         2f:fe:d1:b9:aa:cf:77:cd:6a:98:7e:da:44:6f:b0:a8:4c:27:
         bf:78:75:c9:75:f1:e3:60:77:f7:25:a1:d5:47:ae:45:23:6b:
         32:d1:6b:29:2b:ed:eb:db:ad:2c:48:0b:04:a3:ee:bc:10:e7:
         d1:71:89:fc:9b:08:f4:ec:08:d6:69:37:a4:99:ec:c0:1f:0c:
         82:57:60:87:22:0c:81:56:0f:ee:00:5c:d8:89:fd:be:c5:f8:
         75:a4:5c:fd:c3:e6:aa:34:ec:b9:af:ce:9f:38:4a:02:0f:61:
         31:da:32:85:24:ca:9f:d6:5b:e5:94:6d:04:43:a2:6f:15:b1:
         34:69:0e:94:2c:73:bb:fe:58:e9:1d:c6:f7:9c:66:d7:33:41:
         75:96:c5:9b:c9:d3:db:06:ce:09:15:a9:e6:0d:64:ea:6c:ab:
         36:fe:1a:ba:1c:89:34:6d:87:ea:98:00:6f:a8:89:ec:ef:0d:
         aa:44:5e:56:0f:32:41:32:ac:cf:98:b6:a3:da:fa:63:a4:bf:
         cc:0e:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 23:01:46 2024 by rpki-client on console-fra.rpki-client.org