Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8wKxutoky3U7YKk_sdtDNiPkFHk.roa
File:                     8wKxutoky3U7YKk_sdtDNiPkFHk.roa (raw, json)
Hash identifier:          h1iEnBNxmt4vzHkyrRf1BxKg8RlHivBSxMQZpDnBLG4=
Subject key identifier:   F3:02:B1:BA:DA:24:CB:75:3B:60:A9:3F:B1:DB:43:36:23:E4:14:79
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       018CC64A7303B6C6AE39FCD9BCCA93F23444
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8wKxutoky3U7YKk_sdtDNiPkFHk.roa
Signing time:             Mon 01 Jan 2024 18:30:17 +0000
ROA not before:           Mon 01 Jan 2024 18:30:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3223
IP address blocks:        188.72.82.0/24 maxlen: 24
                          188.72.98.0/24 maxlen: 24
                          37.230.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:73:03:b6:c6:ae:39:fc:d9:bc:ca:93:f2:34:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 18:30:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f302b1bada24cb753b60a93fb1db433623e41479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:1e:2a:0b:51:43:25:83:07:57:33:c1:4c:
                    23:54:e7:79:10:93:69:3e:18:40:ac:b4:dd:a0:58:
                    c3:61:1a:3e:ab:ad:5e:16:99:39:91:21:3e:cb:bf:
                    93:a8:88:9e:dd:51:be:15:c9:9b:75:43:02:c6:c3:
                    2e:ef:0f:2d:2b:a0:05:5e:61:98:67:50:07:42:2b:
                    7f:32:f2:0c:39:97:ed:cc:68:75:39:8f:a5:5b:93:
                    b6:1e:cf:e4:3b:82:d8:f1:79:c5:fb:e0:40:3f:2d:
                    93:74:4e:46:b3:76:0c:e2:49:99:23:9f:1f:56:33:
                    07:18:bd:a2:9f:6a:6a:68:10:fc:8b:49:18:c2:d4:
                    ce:21:b1:a0:ae:bc:60:5a:41:4c:0e:d1:12:d3:b7:
                    c6:ab:7e:73:9a:5e:84:1d:b6:67:16:8c:c4:7b:f1:
                    f9:c4:2d:d3:ab:59:43:9e:18:5a:0f:ca:00:55:19:
                    6e:5b:fd:de:84:a7:ba:ea:7e:b5:6e:0d:72:a2:d8:
                    45:f5:3d:24:6e:dd:43:45:be:18:9d:50:9f:e4:ad:
                    22:5d:a4:8a:c2:59:22:f6:23:d9:d4:57:fd:ab:f0:
                    f0:60:bf:40:7d:71:77:18:54:6f:ad:00:fb:81:ff:
                    61:e1:9f:3c:b0:ba:6a:70:18:4f:bc:b8:4a:0d:f4:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:B1:BA:DA:24:CB:75:3B:60:A9:3F:B1:DB:43:36:23:E4:14:79
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8wKxutoky3U7YKk_sdtDNiPkFHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.130.0/24
                  188.72.82.0/24
                  188.72.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:78:20:3a:55:78:51:c5:bc:03:a4:a3:bf:28:b8:43:12:dc:
         70:30:8e:60:63:dc:7f:87:ea:10:49:79:3f:55:37:d0:3f:36:
         b0:42:9c:2c:ae:e3:1b:52:52:29:91:ad:af:c0:21:f4:96:a3:
         d8:f7:fd:67:78:7a:f2:95:c6:40:6a:f2:76:fd:c4:1a:26:c8:
         b5:bc:45:cc:9b:2f:9d:f5:2d:4a:7f:98:6d:92:b8:28:e5:17:
         61:11:d6:1b:56:5b:83:1f:86:bc:06:b1:e4:1b:2e:71:ba:e5:
         58:12:ca:6f:0a:bd:b7:e5:c0:1a:7a:2b:d3:01:f4:03:70:51:
         9a:2a:3b:a0:9b:fb:24:2b:9c:3c:ae:7e:6c:d9:4e:97:60:de:
         28:11:b5:de:a2:88:a1:ec:3c:09:53:a1:86:c5:16:4d:a5:98:
         c4:9c:df:a5:4c:3b:dc:70:58:ed:f7:0d:1e:6d:3f:f9:52:4f:
         5b:91:7e:0f:59:27:25:c0:69:37:64:38:9d:bf:53:cc:0f:92:
         02:9c:59:31:ac:22:8c:ca:c4:cb:f4:59:c9:be:83:85:2e:31:
         10:a0:e5:f6:36:1c:54:b7:89:b6:d9:7c:64:a0:e5:da:aa:42:
         52:d0:ba:e1:37:d9:16:42:10:bc:b7:87:73:c4:dd:0d:cd:04:
         53:bd:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:28:53 2024 by rpki-client on console-ams.rpki-client.org