Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/7eOK3BTZgBC8mQKyJ9eY-XJrJ8s.roa
File:                     7eOK3BTZgBC8mQKyJ9eY-XJrJ8s.roa (raw, json)
Hash identifier:          yr+OtKsrZSX0Z90Fo9OA8AvLiiv4037bnVBjGtSNdpM=
Subject key identifier:   ED:E3:8A:DC:14:D9:80:10:BC:99:02:B2:27:D7:98:F9:72:6B:27:CB
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       018CD592107CF6A9B3EC2391C11E082C70FE
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/7eOK3BTZgBC8mQKyJ9eY-XJrJ8s.roa
Signing time:             Thu 04 Jan 2024 17:42:48 +0000
ROA not before:           Thu 04 Jan 2024 17:42:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34529
IP address blocks:        109.205.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d5:92:10:7c:f6:a9:b3:ec:23:91:c1:1e:08:2c:70:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Jan  4 17:42:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ede38adc14d98010bc9902b227d798f9726b27cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:7a:48:47:c5:76:fd:17:d6:ff:bd:b4:47:
                    4e:b9:83:b4:f1:03:05:35:8e:3a:d7:24:32:a3:8e:
                    f1:5b:44:4e:9d:31:4a:8f:d1:4b:c1:bd:df:a3:c2:
                    e0:4b:79:62:12:b8:82:62:dd:cc:b3:9e:5e:b2:21:
                    d0:69:78:a7:1e:db:7c:b8:11:c5:56:0e:7e:00:0e:
                    d3:d8:70:c3:6e:d7:42:47:58:64:0e:71:59:15:11:
                    79:b2:ef:f7:a7:ff:e3:4c:05:83:90:f4:5c:74:62:
                    53:0a:71:b4:f1:78:3d:e0:10:b8:0d:da:2e:fa:3b:
                    94:7c:40:d6:90:78:f6:33:b2:db:e0:86:b7:db:54:
                    91:49:9f:0e:33:88:a1:89:59:aa:ae:6f:30:08:85:
                    c6:57:4a:db:2d:98:6f:1e:62:b9:72:84:1b:a6:91:
                    83:00:7a:c9:9d:d7:c2:41:1f:5a:de:eb:34:a6:5a:
                    43:de:d2:0a:57:a2:b3:74:af:0f:51:67:4a:c6:cb:
                    98:e3:73:f6:86:fb:b1:6a:14:d4:9f:6a:77:9c:16:
                    6f:06:d8:8e:ca:6b:13:21:47:6e:ab:ee:06:72:d9:
                    9d:cf:b0:07:cb:54:15:b3:5d:9e:43:7c:f9:48:7a:
                    39:e7:03:d1:ac:2d:64:a0:9c:53:39:f5:d2:cd:ec:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E3:8A:DC:14:D9:80:10:BC:99:02:B2:27:D7:98:F9:72:6B:27:CB
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/7eOK3BTZgBC8mQKyJ9eY-XJrJ8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:a6:ed:56:33:b3:5f:66:25:c0:8b:06:f2:c2:a6:6a:e5:
         e4:bd:ac:df:9e:9b:1d:24:c5:d8:7f:a3:e4:f9:d5:bb:a9:b0:
         55:d0:5f:b8:d7:d1:4a:a0:2a:3e:04:c0:f4:5c:00:02:f2:7a:
         5e:93:dd:68:98:df:6c:53:83:c6:cc:00:ef:f7:43:01:fe:f5:
         d5:b8:88:34:2c:c2:f6:e2:11:5c:53:55:c5:3f:24:b5:ce:10:
         e2:77:12:0d:f4:a3:e8:e6:e9:0b:76:5b:f9:1a:46:76:85:e1:
         ff:73:8c:d4:b2:17:49:c9:85:88:99:19:25:f9:ff:23:17:a3:
         bd:c9:93:28:e2:7f:3a:3c:75:1d:19:09:a3:cd:c7:b5:fa:ed:
         3b:f8:da:20:29:b0:3b:78:69:13:4b:12:32:eb:21:8b:8a:fb:
         91:ce:73:03:cb:96:67:14:9a:50:f4:09:23:30:70:5c:e5:fd:
         f1:1c:f2:75:c6:03:16:cf:af:fd:a5:f7:9e:4b:a0:aa:56:4a:
         80:b9:08:f4:5d:71:ec:73:44:be:a4:e0:e1:2c:92:44:53:29:
         8a:14:b1:89:1b:2b:a9:03:86:bd:80:85:b5:56:70:f8:fd:24:
         70:7c:61:05:da:98:40:ac:5c:e0:d4:77:25:45:02:c0:bc:14:
         d9:b5:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:50:39 2024 by rpki-client on console-ams.rpki-client.org