Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/kZXHp4rhUvQvKUPVAQqeMuwEvJ4.roa
File:                     kZXHp4rhUvQvKUPVAQqeMuwEvJ4.roa (raw, json)
Hash identifier:          F+H/I6B1zz8HsNjic3/DLCsVJBd95uA6UWPD6dqgpLU=
Subject key identifier:   91:95:C7:A7:8A:E1:52:F4:2F:29:43:D5:01:0A:9E:32:EC:04:BC:9E
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       018CC7951CB485CE618668AAECA2276EDDE4
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/kZXHp4rhUvQvKUPVAQqeMuwEvJ4.roa
Signing time:             Tue 02 Jan 2024 00:31:27 +0000
ROA not before:           Tue 02 Jan 2024 00:31:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47728
IP address blocks:        193.238.133.0/24 maxlen: 24
                          193.238.132.0/23 maxlen: 23
                          193.238.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:1c:b4:85:ce:61:86:68:aa:ec:a2:27:6e:dd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 00:31:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9195c7a78ae152f42f2943d5010a9e32ec04bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:24:e8:ce:88:25:a0:e3:35:47:95:f8:ac:
                    7f:ec:77:48:9f:44:07:5b:42:5e:6c:ec:32:56:2a:
                    55:64:16:f6:70:2a:d6:07:a7:50:5b:1c:f8:1d:ec:
                    2d:fd:e9:af:61:61:6c:c9:40:45:d0:92:64:b6:c6:
                    51:fc:85:f0:81:1d:b9:f8:4d:72:c3:7a:41:17:04:
                    61:55:5a:4e:98:3f:b9:52:87:07:e6:89:fd:24:16:
                    49:e1:2e:0f:08:54:15:32:1e:62:a0:5a:35:d5:49:
                    4a:8b:47:f0:1e:8f:a2:a5:8e:61:73:36:77:e0:61:
                    b1:f6:db:c5:ca:a0:78:4c:3a:d0:d8:e0:89:62:cd:
                    0e:c5:81:a0:aa:40:1d:1d:76:ed:ac:6f:27:f9:3f:
                    ba:fb:08:1b:24:e9:ff:09:5e:13:34:1f:f0:ed:69:
                    07:d7:0c:0b:2c:fa:4a:f7:59:31:95:33:ce:b0:9c:
                    cd:7f:22:61:f1:a7:28:42:8b:1b:a4:07:a2:90:24:
                    f9:37:b3:47:a0:c1:46:c5:61:e2:48:76:29:e3:ef:
                    ef:2a:a9:8f:fe:98:70:e5:36:56:e6:85:f8:eb:f9:
                    d0:2c:03:55:af:51:a9:80:9f:8a:97:ef:cc:61:51:
                    07:08:d8:07:22:22:48:04:f6:55:4e:62:f3:07:1b:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:95:C7:A7:8A:E1:52:F4:2F:29:43:D5:01:0A:9E:32:EC:04:BC:9E
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/kZXHp4rhUvQvKUPVAQqeMuwEvJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.238.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:44:d1:b4:bf:25:13:ac:76:8a:6c:f3:97:62:0b:a3:cb:
         86:9a:80:4a:ea:8c:15:00:02:5a:fa:06:60:81:ac:97:0e:20:
         91:70:e4:a9:c3:ca:67:0b:f3:30:74:db:c8:3c:f4:79:3b:6e:
         a4:84:0b:5a:2b:a0:ad:87:0c:12:2f:e2:39:85:4d:bc:4b:44:
         a2:2a:71:00:59:22:90:28:de:29:27:5a:78:33:a8:b1:1f:b5:
         7b:6a:7c:64:05:83:77:9f:c0:25:1e:6f:02:f3:2f:c5:2c:ec:
         19:10:10:15:dd:34:d8:3d:63:40:d8:9f:25:2c:7d:97:9d:ae:
         c8:60:38:71:44:d0:e7:77:f1:4d:d8:e2:19:09:f6:00:46:a7:
         7b:34:71:4e:24:a5:70:e2:62:81:24:f7:b2:ae:0f:90:df:2c:
         fb:9a:13:5f:c9:c5:62:ce:1b:75:3c:3b:98:4e:72:bb:7e:82:
         2b:8f:b1:27:fa:17:49:32:4f:17:8b:bc:df:5a:35:4c:97:13:
         5d:cf:c8:0a:80:39:da:b2:5e:0e:6a:ef:9e:e2:27:b2:fe:62:
         2c:4c:06:00:83:9f:a7:f2:3c:8b:4f:d3:7b:83:17:bb:25:95:
         ba:31:45:93:7b:88:76:32:47:55:25:bd:a4:46:78:e5:04:4e:
         6c:e7:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:59:42 2024 by rpki-client on console-fra.rpki-client.org