Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7i7kveG8_e8tugmv_nzv3AIeeKE.roa
File:                     7i7kveG8_e8tugmv_nzv3AIeeKE.roa (raw, json)
Hash identifier:          r4IuDlpYLSVVlaO5NmkJFhuZtQjWGpDYGwTqGUNT1Uc=
Subject key identifier:   EE:2E:E4:BD:E1:BC:FD:EF:2D:BA:09:AF:FE:7C:EF:DC:02:1E:78:A1
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       0190BFE686E17C6105F2B256D5BC4290A0BC
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7i7kveG8_e8tugmv_nzv3AIeeKE.roa
Signing time:             Wed 17 Jul 2024 08:54:34 +0000
ROA not before:           Wed 17 Jul 2024 08:54:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34754
IP address blocks:        78.142.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:bf:e6:86:e1:7c:61:05:f2:b2:56:d5:bc:42:90:a0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Jul 17 08:54:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee2ee4bde1bcfdef2dba09affe7cefdc021e78a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:55:aa:8c:53:3a:6c:08:b7:85:d9:79:2b:
                    69:c3:7b:1f:02:2f:99:e2:91:91:42:50:40:ba:b8:
                    48:50:2d:0c:f9:7e:5a:14:90:4a:ba:01:bb:78:ca:
                    ed:0e:5f:8d:34:ff:60:7f:47:82:ea:eb:80:47:68:
                    5f:64:1f:47:c7:a4:1f:ec:fa:a0:62:9a:62:0a:c3:
                    7b:60:98:fa:e8:61:f8:45:d4:30:48:bd:e3:e2:c2:
                    e7:90:4a:2b:b9:90:0b:96:19:2e:26:35:81:cc:73:
                    96:fe:59:7d:78:7f:68:ab:f1:fb:de:17:c7:8e:8d:
                    60:59:7a:29:1b:cc:f6:1a:ba:37:d2:ff:d3:24:1f:
                    ef:20:39:aa:82:bf:24:0e:2e:d7:71:44:5e:16:1c:
                    77:44:4d:a2:fb:21:a8:06:da:ce:c6:9e:17:e3:c0:
                    92:a5:6a:cf:4f:54:c6:f3:b7:7b:60:b4:88:db:b3:
                    ed:56:3d:6b:75:6f:8e:95:12:ff:a4:4e:54:33:ca:
                    ac:1b:a8:ba:df:d7:16:a9:b7:2b:7c:8f:e6:14:04:
                    37:76:84:b8:b6:54:05:d7:8c:a3:97:fe:ce:4c:d4:
                    90:cb:c9:1a:6e:1c:90:1f:ca:dd:41:26:54:1c:dc:
                    99:48:dc:1b:08:2a:ff:eb:7b:37:f0:f6:71:66:a7:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2E:E4:BD:E1:BC:FD:EF:2D:BA:09:AF:FE:7C:EF:DC:02:1E:78:A1
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7i7kveG8_e8tugmv_nzv3AIeeKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.142.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:94:f4:c9:1f:53:aa:13:0c:b1:79:68:32:ad:4c:ca:c1:
         8e:0a:19:52:64:3c:10:44:69:62:2a:35:39:34:f1:87:ad:53:
         6c:42:3e:30:6b:c5:13:e5:f0:d6:73:4f:de:40:a0:ff:e6:75:
         8e:00:f0:c4:e6:dd:8d:cd:bc:ca:df:fe:81:e9:eb:7b:be:38:
         7f:b3:6f:55:0b:71:08:ac:dd:45:03:cf:71:4e:13:86:5c:20:
         85:d7:65:6d:28:0c:ff:9b:e1:d3:7e:71:ff:a6:17:0a:85:d8:
         e9:11:d5:91:7b:45:a8:15:a2:b6:57:8c:ed:dc:25:b0:b6:55:
         67:91:75:78:6d:89:82:d9:cb:c3:fc:41:95:9b:4a:a7:97:9c:
         1c:bc:e2:0f:25:1c:b5:d5:f2:d0:f0:53:8a:60:ce:48:93:3c:
         11:eb:85:3b:1c:34:f3:3c:e0:74:48:be:a0:17:7b:29:21:d2:
         82:0c:f8:47:e8:f6:e2:6e:43:e5:01:96:07:a8:0f:20:92:59:
         d7:49:d5:a7:9a:86:9a:2b:f2:2d:6c:86:62:13:9c:b2:cc:e6:
         fb:36:65:71:8d:47:ae:71:e6:57:ba:3f:d4:fd:9d:e2:80:5a:
         c4:16:0b:81:7e:a6:e5:09:1a:ab:ad:9e:55:d9:38:59:6b:26:
         09:ae:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:36:21 2024 by rpki-client on console-ams.rpki-client.org