Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/FLCT51ZJwMwx0vO_c1Crc2b8m68.roa
File:                     FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (raw, json)
Hash identifier:          QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=
Subject key identifier:   14:B0:93:E7:56:49:C0:CC:31:D2:F3:BF:73:50:AB:73:66:FC:9B:AF
Certificate issuer:       /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial:       0194221F57225D1742D95B3E5CEF6B8B0AC3
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/FLCT51ZJwMwx0vO_c1Crc2b8m68.roa
Signing time:             Wed 01 Jan 2025 13:47:46 +0000
ROA not before:           Wed 01 Jan 2025 13:47:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199235
IP address blocks:        37.143.72.0/22 maxlen: 22
                          89.147.124.0/22 maxlen: 22
                          185.83.224.0/22 maxlen: 22
                          2a02:6f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Feb 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:57:22:5d:17:42:d9:5b:3e:5c:ef:6b:8b:0a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
        Validity
            Not Before: Jan  1 13:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=14b093e75649c0cc31d2f3bf7350ab7366fc9baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:e3:54:76:54:9a:27:5e:45:d9:9a:d9:9f:
                    2c:8f:88:83:e8:50:fc:d2:db:18:58:10:5d:f9:a6:
                    ab:68:31:75:2d:52:8b:a6:67:2e:07:bb:00:f2:62:
                    be:a5:26:b8:9b:e1:e0:83:5a:ef:6b:c0:43:cd:50:
                    00:4c:37:34:ea:9c:ab:f4:39:b8:24:9c:b8:93:7c:
                    9a:c3:c0:78:ec:56:7b:88:86:14:73:62:5d:38:63:
                    30:98:e1:93:fc:ae:31:93:9d:e9:86:40:ef:1c:e6:
                    be:0c:d5:b9:e1:3a:06:60:37:95:9a:c7:b7:c4:01:
                    95:91:69:e5:3b:e9:90:0c:cc:53:88:50:18:7e:05:
                    0e:60:62:1f:f1:5c:69:47:88:ef:14:5f:57:9d:5e:
                    03:b3:8f:42:ba:01:dc:99:46:c4:10:94:ad:a8:6e:
                    2c:eb:ae:2e:58:e2:b0:f5:3a:76:e9:36:29:30:1f:
                    03:d9:2e:15:a3:44:7f:0d:2b:b0:71:f5:b1:4a:ae:
                    de:8c:5b:03:73:bf:59:12:de:5a:83:26:01:90:77:
                    b8:0d:5b:fc:57:01:d4:a7:41:7d:cf:8f:c8:e8:90:
                    fe:67:6f:df:f6:d0:6f:42:19:eb:4e:c0:1c:ab:f4:
                    98:b6:d5:34:7e:20:0f:32:c1:c3:b9:4d:0b:70:83:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:93:E7:56:49:C0:CC:31:D2:F3:BF:73:50:AB:73:66:FC:9B:AF
            X509v3 Authority Key Identifier:
                keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/FLCT51ZJwMwx0vO_c1Crc2b8m68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.143.72.0/22
                  89.147.124.0/22
                  185.83.224.0/22
                IPv6:
                  2a02:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:69:d4:ec:c3:f7:e3:50:ef:83:bb:32:07:36:0f:e0:54:3a:
         ba:45:82:12:69:4f:6b:c8:ec:a3:5c:cc:ec:3b:72:fb:35:12:
         43:b9:8e:39:49:bf:88:78:06:cd:b8:eb:aa:eb:bf:73:1c:aa:
         f2:06:97:56:b1:26:77:0b:37:7a:50:c5:ba:4e:84:61:a3:c5:
         e5:9b:3d:8b:13:48:62:f0:2a:12:f4:e7:0c:74:0a:c7:89:c4:
         23:cd:e5:0d:98:ec:64:ca:f7:96:d5:3c:df:ff:6a:cf:d4:78:
         30:c6:54:d0:44:83:03:cd:31:61:1c:0f:d9:19:91:03:2f:60:
         37:51:22:3a:52:0d:cd:bb:be:0f:e9:58:19:70:28:b5:bd:2e:
         3d:92:0a:9a:2f:c4:f4:5d:04:b8:68:eb:d7:a1:26:60:aa:9d:
         3d:3f:45:f4:07:77:ad:4a:11:53:2d:0c:08:20:5a:6b:cf:66:
         b8:9c:8c:d2:59:e1:26:4b:3e:3e:eb:28:fe:84:0a:58:fe:a9:
         1c:f0:78:d4:cf:cb:da:ea:45:4d:72:7c:c7:05:8f:79:d6:3c:
         af:2a:28:3c:07:4f:58:3d:a1:d1:fe:f8:e0:61:c2:ca:c0:39:
         f6:c8:6e:a5:fc:07:eb:7d:eb:ed:7f:e6:8e:fe:42:0a:67:5d:
         17:11:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:53 2025 by rpki-client