Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NeV9mQpwOfgzmYW_LOGXR7znkXI.roa
File:                     NeV9mQpwOfgzmYW_LOGXR7znkXI.roa (raw, json)
Hash identifier:          zZen78W7d3yphLkrFotj2UM5ISvEgPm15wDwIBPT8bk=
Subject key identifier:   35:E5:7D:99:0A:70:39:F8:33:99:85:BF:2C:E1:97:47:BC:E7:91:72
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018CC6B7B53366CCF2D15416BA3FF279BB70
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NeV9mQpwOfgzmYW_LOGXR7znkXI.roa
Signing time:             Mon 01 Jan 2024 20:29:37 +0000
ROA not before:           Mon 01 Jan 2024 20:29:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57523
IP address blocks:        87.247.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:b5:33:66:cc:f2:d1:54:16:ba:3f:f2:79:bb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jan  1 20:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=35e57d990a7039f8339985bf2ce19747bce79172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:b1:3e:53:80:d1:30:da:3e:61:72:a9:a1:
                    f7:26:09:cd:51:37:67:98:a3:e1:6c:09:9d:73:57:
                    72:d8:8a:1e:d3:a0:cb:e7:70:4e:fd:a8:80:bf:60:
                    c1:d7:cf:8a:ff:7a:15:d0:33:ba:4a:8d:08:81:27:
                    a6:d2:e3:4f:e1:96:21:16:5d:f0:fb:6e:eb:6c:38:
                    1a:ea:64:83:14:1b:aa:16:76:88:24:32:f2:28:4b:
                    21:bd:48:a9:34:af:44:1e:fb:f0:68:76:c2:aa:2f:
                    35:d0:bd:a1:5f:a0:44:52:c3:51:47:4e:35:92:2c:
                    94:70:14:87:e0:ea:45:ff:77:95:e6:7b:17:69:dd:
                    56:b6:37:52:c0:97:d4:f1:49:e8:a3:f0:3b:fd:c2:
                    bd:98:b1:74:19:ba:36:4b:ac:b0:76:4a:69:3d:fb:
                    01:3f:92:f3:2b:1a:c5:10:92:0d:79:b8:3d:7a:7d:
                    83:16:09:06:ad:36:79:03:e7:ed:a9:45:5e:76:d5:
                    f3:a2:61:a6:ca:e5:f9:6b:9a:b9:c6:89:a8:87:45:
                    e0:b9:1c:40:70:44:b9:1c:d2:ef:2f:7c:55:5b:09:
                    2c:46:08:25:04:1b:27:1e:5c:3c:bc:6f:9d:f7:64:
                    da:1a:4e:48:f5:61:c7:e1:8d:0c:25:82:9a:fd:c5:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:7D:99:0A:70:39:F8:33:99:85:BF:2C:E1:97:47:BC:E7:91:72
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NeV9mQpwOfgzmYW_LOGXR7znkXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.247.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ea:59:4c:2f:9f:d4:bc:e1:de:12:b3:81:f4:31:3f:15:a0:
         90:d0:dc:09:57:ea:c6:7f:7e:a1:b7:55:da:cc:cb:4c:60:6b:
         a5:60:0d:ed:c5:b3:eb:ed:d2:06:a2:c6:ff:61:f4:bb:ef:6c:
         12:75:c5:2b:6c:26:5b:34:76:e3:6c:d1:69:15:23:dd:7d:c2:
         03:6f:08:10:b6:ec:e5:fd:31:ad:8b:e8:bc:da:df:4f:c2:90:
         95:d9:01:e8:1c:61:b3:76:b0:18:14:db:36:a5:aa:f4:9f:ba:
         5e:a4:84:83:80:8d:e6:de:e0:c4:0d:5a:bf:4b:41:35:65:8e:
         25:24:70:d0:6b:9e:fd:95:de:f4:78:1d:0b:14:d3:6c:b2:7a:
         2f:f9:e2:fb:fb:87:ea:36:79:ad:6a:b1:fd:92:e9:f9:b2:da:
         ed:f3:ff:23:25:37:66:84:88:43:7f:38:66:e9:32:30:94:47:
         a6:6a:12:3e:a1:92:46:62:d4:5a:3a:a2:6d:a2:49:87:da:6d:
         b9:25:cc:da:cd:27:f8:45:4b:91:02:d3:20:88:a7:d8:51:b8:
         38:b8:c3:ac:12:b7:73:f9:8c:c7:a3:3e:de:78:9a:21:a1:35:
         26:11:ae:e7:4f:78:75:5c:75:6a:9d:c6:a2:5a:1a:7c:8e:6b:
         43:f3:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:16:36 2024 by rpki-client on console-ams.rpki-client.org