Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa
File:                     UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa (raw, json)
Hash identifier:          r21ZVEq0WMZLcKhmDTEE6RBqT116h4xlY5LUXUJSchc=
Subject key identifier:   51:37:D8:2E:E2:10:AF:37:38:FF:C3:AE:FE:D2:15:8D:55:ED:A6:D5
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       018CC64A8CEC2F46139AA5549CBB7B74896C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa
Signing time:             Mon 01 Jan 2024 18:30:23 +0000
ROA not before:           Mon 01 Jan 2024 18:30:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212539
IP address blocks:        37.230.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:8c:ec:2f:46:13:9a:a5:54:9c:bb:7b:74:89:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 18:30:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5137d82ee210af3738ffc3aefed2158d55eda6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:0b:ee:67:2e:c2:c2:00:c1:42:fd:a8:5e:
                    3d:cd:81:59:98:b5:95:63:11:d7:30:b4:e2:02:c7:
                    a3:4f:05:b6:80:69:ab:09:18:d4:11:21:38:ab:13:
                    c5:8c:64:72:c9:39:72:59:23:59:9e:90:f6:0e:ff:
                    49:be:36:4a:8c:fa:ac:71:19:25:bf:de:fa:c4:6c:
                    6f:57:f3:4e:ee:c7:16:91:b2:dd:a9:ff:6a:d8:51:
                    fb:33:2a:20:42:7e:ac:76:cf:f3:29:74:df:c6:71:
                    cf:d6:af:a0:73:97:72:1b:5e:51:a9:45:26:4b:02:
                    e4:1e:0e:2f:87:f6:77:ff:5f:e1:25:e0:e9:66:4a:
                    85:44:93:4e:3f:3d:f4:e8:c5:c5:06:7b:43:7b:ad:
                    9c:8d:09:e2:b1:d7:d9:e5:22:47:1d:ec:da:80:b8:
                    07:c4:ac:c1:b8:e2:d6:1a:26:bc:61:37:fd:e9:a8:
                    7d:e8:1a:21:86:24:ff:89:8e:1b:41:09:c1:85:5d:
                    1d:b2:3d:fa:fa:1c:1b:d7:26:dc:75:d3:8d:f6:c8:
                    3b:17:bd:da:4d:c8:05:8c:a9:f5:26:4d:63:83:7e:
                    cb:a6:88:00:5a:18:ca:91:7a:7f:cb:cd:0e:ee:cc:
                    e4:ea:d2:de:35:74:31:0d:bb:83:69:a3:fb:74:ea:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:37:D8:2E:E2:10:AF:37:38:FF:C3:AE:FE:D2:15:8D:55:ED:A6:D5
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:bb:bc:12:ed:df:7c:96:0f:e5:06:fa:3d:79:c4:f9:be:
         53:5c:48:45:5b:06:d7:f2:6f:fb:03:b9:fa:df:58:d3:f6:b3:
         76:7d:bf:de:f9:1b:b7:f6:1d:63:3a:80:55:8e:44:59:a4:b2:
         c7:6a:c3:0e:b6:3b:de:da:98:5e:d4:98:85:98:fc:61:cf:4c:
         12:00:8d:d3:6c:5b:99:26:56:93:f5:17:60:70:35:c5:4f:d4:
         cc:f5:df:a6:f2:c4:49:21:b6:d6:8a:08:d4:d1:04:84:72:a7:
         de:8a:b1:d7:fe:4e:25:96:80:94:cf:4f:ee:22:91:32:ef:d6:
         fa:ac:0f:9a:a0:1e:cc:67:fd:34:78:25:62:b0:cc:c1:e6:55:
         ee:0a:bf:f4:72:d6:23:43:a1:21:7b:68:83:f4:5f:57:87:de:
         22:40:9c:b4:0d:45:a8:5f:1b:02:f6:88:4d:70:a3:ba:14:e8:
         b0:54:aa:18:e9:b4:19:fe:54:2f:c8:ff:66:21:75:1c:07:e7:
         0e:72:84:13:bd:5d:63:02:98:6e:a1:19:dd:bf:4a:d4:e7:84:
         0e:31:33:bc:85:c8:11:54:97:17:f8:c5:e1:de:a9:bb:f0:46:
         ad:d5:90:d8:5d:45:3a:11:3e:8a:32:a3:11:20:e6:0a:98:b8:
         f2:aa:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:20:30 2024 by rpki-client on console-fra.rpki-client.org