Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/XAbWFnoo_N2tg1-kinth3h8kz6I.roa
File:                     XAbWFnoo_N2tg1-kinth3h8kz6I.roa (raw, json)
Hash identifier:          5uBmYBcUEbAfkgcExYnl6e3dvWkuVKUV/o4Lb/EvDy0=
Subject key identifier:   5C:06:D6:16:7A:28:FC:DD:AD:83:5F:A4:8A:7B:61:DE:1F:24:CF:A2
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       018CC6B7FD15F16040FB34C43BCE18B78B22
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/XAbWFnoo_N2tg1-kinth3h8kz6I.roa
Signing time:             Mon 01 Jan 2024 20:29:55 +0000
ROA not before:           Mon 01 Jan 2024 20:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396356
IP address blocks:        194.15.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Jun 2024 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:fd:15:f1:60:40:fb:34:c4:3b:ce:18:b7:8b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan  1 20:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5c06d6167a28fcddad835fa48a7b61de1f24cfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:31:42:4b:9e:e8:3d:73:a4:3f:00:1b:e2:
                    47:59:f7:2b:5d:8e:81:54:eb:82:7e:85:70:e4:f4:
                    d5:f8:94:83:20:c8:18:20:a5:8b:9a:79:3c:ee:fc:
                    5d:e6:42:60:f4:59:2c:29:aa:55:c1:0a:41:48:74:
                    5f:cb:b0:84:b5:77:e4:40:46:8c:2d:89:62:ef:a3:
                    a9:cf:b6:4c:7e:f2:35:c1:2a:00:e3:d7:10:00:d5:
                    fa:53:e2:e9:24:7d:25:bb:ce:85:6c:98:94:26:15:
                    f8:44:3e:84:82:e5:c7:a6:2c:87:fd:fc:fc:e6:9d:
                    3e:db:15:c6:0e:7c:28:51:d2:c8:75:d2:af:f0:18:
                    01:5b:ba:d6:82:e5:1c:17:7c:2c:ed:a7:91:0b:b8:
                    8f:80:7c:b3:d2:2c:a9:11:7b:29:a6:be:02:92:8d:
                    ba:13:60:6f:53:c8:aa:55:dc:41:ee:d4:34:66:61:
                    a9:47:52:76:69:99:c4:e8:7d:bf:5e:b4:da:81:80:
                    41:3f:70:fe:98:a5:a3:59:37:3f:e6:52:89:48:f9:
                    97:69:23:28:e9:72:07:3a:04:c8:24:db:bd:e7:48:
                    b6:95:7d:90:49:c1:17:91:23:2f:16:02:28:1c:7b:
                    b7:39:90:e2:f2:c0:65:6d:a9:c5:82:ac:8a:94:01:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:D6:16:7A:28:FC:DD:AD:83:5F:A4:8A:7B:61:DE:1F:24:CF:A2
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/XAbWFnoo_N2tg1-kinth3h8kz6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:23:45:02:4a:7c:9c:ae:75:12:29:ad:0c:32:43:40:b9:e7:
         f2:94:ce:cb:70:2e:d4:6b:78:3b:6a:c7:ad:e9:2d:64:00:e1:
         26:d1:3e:ff:90:db:7c:60:a0:75:ad:1a:2e:02:01:ec:d9:db:
         06:f3:01:a5:92:7c:f2:92:ad:c1:29:46:6c:7d:09:4e:3f:8e:
         1c:0f:55:e9:ed:35:8b:52:c8:15:20:4c:39:42:24:67:48:a5:
         13:d3:83:5e:45:a2:44:f2:b6:3c:01:bb:c6:95:98:5b:b0:c9:
         18:9b:45:88:29:41:ea:55:44:fb:5a:ec:00:4e:3f:30:49:68:
         8e:52:ee:0b:0d:fd:af:45:d9:e1:f6:94:80:da:fe:f4:6b:b5:
         67:99:52:13:46:e8:cd:56:41:b0:4e:6a:f3:17:0d:cd:12:9e:
         ab:1b:07:08:cc:7a:e3:c1:bc:a4:04:ee:4c:36:99:e6:9e:dd:
         9e:b4:72:e6:89:f3:4a:66:d1:97:d7:12:81:c3:72:57:52:43:
         f8:33:b7:2b:e4:02:51:50:be:22:aa:db:0c:30:b6:9a:71:3b:
         c6:72:42:e8:ab:20:a5:60:fc:9a:3b:98:18:35:c4:97:e2:cc:
         2a:67:30:1c:c2:66:f9:49:9e:a9:71:c0:1c:c7:1e:23:3b:3a:
         67:af:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 00:53:20 2024 by rpki-client on console-fra.rpki-client.org