Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/pV07vwevm-8BJLnT3hJuAHpGkJ4.roa
File:                     pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (raw, json)
Hash identifier:          uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=
Subject key identifier:   A5:5D:3B:BF:07:AF:9B:EF:01:24:B9:D3:DE:12:6E:00:7A:46:90:9E
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       0197E446EC2DBEF6A008DC6907AC8C8A24E9
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/pV07vwevm-8BJLnT3hJuAHpGkJ4.roa
Signing time:             Mon 07 Jul 2025 09:45:42 +0000
ROA not before:           Mon 07 Jul 2025 09:45:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30823
IP address blocks:        45.156.84.0/24 maxlen: 24
                          45.156.85.0/24 maxlen: 24
                          185.150.25.0/24 maxlen: 24
                          194.62.1.0/24 maxlen: 24
                          194.62.29.0/24 maxlen: 24
                          194.62.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:e4:46:ec:2d:be:f6:a0:08:dc:69:07:ac:8c:8a:24:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Jul  7 09:45:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a55d3bbf07af9bef0124b9d3de126e007a46909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:60:8a:5a:0b:ed:d5:0c:ae:ee:76:8a:0a:e4:
                    02:dd:2c:57:cf:c5:ac:2a:c5:6f:a1:52:fc:05:8c:
                    bd:51:b0:93:09:03:cc:97:70:fd:81:03:63:18:36:
                    5b:06:e9:ac:2c:eb:ee:3e:ef:a5:fd:e7:a6:4a:11:
                    49:33:30:02:6e:dd:9b:c5:6b:2b:cc:fd:69:4b:99:
                    27:d6:7f:6b:62:bb:4d:bc:d7:3d:5b:53:ce:ef:cb:
                    10:79:3f:e7:15:0e:7d:f4:27:3a:19:c1:f7:2d:0c:
                    6f:93:56:90:50:13:7c:bf:fc:e6:cc:ce:4c:e1:6c:
                    65:47:0b:e7:fa:31:b9:15:57:87:ea:4b:82:6c:66:
                    11:a9:25:ff:4a:a4:46:61:33:4a:75:1c:b0:e6:10:
                    71:21:cf:99:9b:a8:79:86:91:96:62:0a:63:fa:c5:
                    de:2c:ec:e7:02:31:4e:01:c8:d7:66:a6:cc:7d:a8:
                    70:1d:c8:da:81:3c:ac:16:7e:3e:0a:d6:fc:a7:e2:
                    d4:5b:2b:db:4a:48:da:e6:e4:d1:29:5f:50:89:d5:
                    2b:7f:52:f9:75:f1:fa:fc:6b:d6:a3:6c:71:f3:83:
                    e4:6b:7c:8b:2c:8d:8a:ed:03:82:de:56:4a:03:b1:
                    97:06:6a:03:8a:8e:51:08:d3:a7:ae:8f:83:45:cd:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:3B:BF:07:AF:9B:EF:01:24:B9:D3:DE:12:6E:00:7A:46:90:9E
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/pV07vwevm-8BJLnT3hJuAHpGkJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.84.0/23
                  185.150.25.0/24
                  194.62.1.0/24
                  194.62.29.0/24
                  194.62.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:74:f0:44:8b:80:b6:d4:be:78:a0:0c:ed:17:ab:26:fe:
         4b:8a:20:9e:bf:72:fe:0a:eb:18:0f:e8:3b:9c:ae:ba:d8:65:
         ed:45:1f:76:a5:95:70:c6:18:46:a4:69:dd:04:a1:a4:b9:7e:
         45:0d:dd:ae:a7:af:2b:4e:76:8a:32:3e:c3:56:3c:0a:ab:5e:
         ef:ff:b8:82:cd:a7:12:63:68:bf:60:48:56:f1:67:4d:74:55:
         b6:de:91:24:d0:40:33:7d:ac:9f:e3:fb:b6:ea:cc:f0:f5:5b:
         15:e4:37:b0:f8:d0:83:5a:a5:61:46:58:f0:da:24:d1:ee:20:
         ce:ea:88:e5:89:4a:b2:23:42:c8:61:e8:83:34:79:03:6b:77:
         17:ea:ca:a2:0b:11:b1:25:f8:9d:12:2c:3f:b8:fa:02:a0:da:
         f3:46:5c:ba:76:12:a9:cd:d4:43:83:a1:bd:2d:d4:d8:7a:64:
         60:f0:d6:0a:b6:f5:d0:1f:2b:1d:8c:5b:14:24:50:10:3a:9c:
         e5:4f:c1:be:64:e1:e0:d9:df:ed:5f:8c:7d:42:8c:95:a5:50:
         ea:82:59:c4:12:32:c9:c8:c3:d1:c5:51:33:78:4e:97:48:70:
         e5:6c:0d:0c:6b:31:65:d0:e1:21:54:9f:cb:9e:33:13:c8:43:
         65:4e:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:35 2025 by rpki-client