Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa
File:                     LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa (raw, json)
Hash identifier:          hMJW6h+5JE+dal9rkWR3bK6F1BlVNwt7VsR0ZpIQGdQ=
Subject key identifier:   2D:9F:F1:DF:C4:A8:78:23:3A:84:F4:4D:6E:9F:A9:46:DF:50:F1:B6
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       01982C12CA6FA1D7C8B765D124C411A5C202
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa
Signing time:             Mon 21 Jul 2025 08:21:25 +0000
ROA not before:           Mon 21 Jul 2025 08:21:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44056
IP address blocks:        31.135.224.0/20 maxlen: 20
                          31.135.226.0/23 maxlen: 23
                          31.135.228.0/22 maxlen: 22
                          31.135.232.0/22 maxlen: 22
                          31.135.236.0/23 maxlen: 23
                          46.148.128.0/20 maxlen: 20
                          46.148.128.0/22 maxlen: 22
                          46.148.132.0/22 maxlen: 22
                          46.148.143.0/24 maxlen: 24
                          83.97.104.0/21 maxlen: 21
                          91.195.130.0/23 maxlen: 23
                          91.230.146.0/24 maxlen: 24
                          91.237.186.0/23 maxlen: 23
                          91.237.186.0/24 maxlen: 24
                          91.237.187.0/24 maxlen: 24
                          109.196.64.0/20 maxlen: 24
                          109.196.64.0/22 maxlen: 22
                          109.196.68.0/22 maxlen: 22
                          109.196.72.0/22 maxlen: 22
                          109.196.76.0/22 maxlen: 22
                          176.125.192.0/19 maxlen: 19
                          195.2.238.0/23 maxlen: 23
                          2a13:2940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2c:12:ca:6f:a1:d7:c8:b7:65:d1:24:c4:11:a5:c2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: Jul 21 08:21:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d9ff1dfc4a878233a84f44d6e9fa946df50f1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:73:8d:e5:1a:91:1b:59:96:83:4d:3a:35:
                    50:70:ec:75:d5:49:99:61:4e:fa:44:9f:e0:f5:1c:
                    cd:d4:1e:6c:16:ef:ea:d0:dc:8b:de:a0:f2:6b:cc:
                    f4:0f:e8:6b:08:52:b6:2d:60:d9:2b:d7:bb:a6:5e:
                    cf:b5:50:35:2a:a7:96:a6:24:4b:1e:4a:86:87:1a:
                    5c:87:91:66:86:fd:05:db:bc:91:9e:a9:d3:a4:44:
                    f3:68:50:3c:52:ae:55:3a:88:89:cf:29:f0:c2:5c:
                    30:19:1c:84:fa:61:70:69:d3:82:cb:bb:48:68:e2:
                    9b:0c:08:3a:7a:94:9d:76:6b:68:27:b4:71:0d:05:
                    a5:55:b7:c7:d5:6e:6d:6c:26:7d:11:3a:a9:3f:17:
                    db:d8:45:6c:a9:13:fb:d2:19:e2:18:e4:a4:c8:0d:
                    1a:3b:ed:26:69:31:a9:f3:7a:2a:b4:2d:60:f7:4b:
                    54:20:aa:22:56:c0:c1:28:60:8e:1a:15:36:3f:22:
                    33:6e:7f:f9:a0:41:d5:04:ae:cf:25:33:99:15:88:
                    23:b2:f9:46:14:e6:95:a7:73:32:86:ee:b6:f5:d2:
                    9b:50:ab:a5:7f:17:08:4c:63:71:c2:8e:99:02:a9:
                    48:3d:b7:14:e8:bf:44:15:bc:92:48:1f:a9:a9:ee:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9F:F1:DF:C4:A8:78:23:3A:84:F4:4D:6E:9F:A9:46:DF:50:F1:B6
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.135.224.0/20
                  46.148.128.0/20
                  83.97.104.0/21
                  91.195.130.0/23
                  91.230.146.0/24
                  91.237.186.0/23
                  109.196.64.0/20
                  176.125.192.0/19
                  195.2.238.0/23
                IPv6:
                  2a13:2940::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:13:36:fb:b5:74:1c:f6:06:55:47:c1:f8:bd:da:d4:1e:97:
         74:ed:cd:cd:40:48:6c:ab:ee:3e:0c:8f:9c:6b:47:71:66:58:
         dd:72:5a:d8:99:0e:d9:6c:06:fd:a6:c4:24:84:c6:8c:19:ec:
         77:55:be:16:8d:83:4c:8e:91:bf:aa:1b:70:31:00:10:92:dd:
         bd:64:04:4a:a4:65:e3:6b:48:f0:40:32:ac:c6:b7:ab:32:6d:
         4f:df:1e:2f:58:9e:e0:06:aa:86:8e:f4:fc:ea:ac:b4:07:0c:
         4f:24:46:77:99:30:c3:53:a5:31:ea:86:49:3c:35:3a:e8:45:
         34:fb:cc:e4:99:38:6f:ba:cb:f8:93:8c:77:d2:60:ad:7b:0d:
         9f:2b:9e:9c:fc:fa:2b:d0:20:40:b8:1f:69:00:32:77:e9:dc:
         ad:00:4b:5b:4c:4d:e8:ef:5d:40:07:58:14:4e:4f:44:f0:31:
         3c:13:30:a2:19:4e:42:e5:54:01:7f:9a:b2:d1:8b:be:e5:90:
         b9:33:1b:1d:0f:6c:0e:bd:bc:70:27:1c:80:21:61:6b:a7:91:
         22:13:1b:72:f4:5a:df:fb:68:dc:42:02:25:3d:28:97:d2:6a:
         3a:a7:26:58:f6:95:4e:f9:f6:7e:16:82:10:70:af:6d:8d:44:
         9f:6c:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:08:21 2025 by rpki-client