Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa
File:                     3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa (raw, json)
Hash identifier:          kNXvE0FEVlx3cSjalhcd7SaWRa3MsFh7Vrc3MGmwI58=
Subject key identifier:   00:09:77:34:54:75:B8:5C:9D:EF:9C:F3:BA:18:5E:21:25:83:93:A9
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       2D6A6C298663B43161A3E2B44B12F84F338263E7
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa
Signing time:             Sat 05 Jul 2025 20:49:20 +0000
ROA not before:           Sat 05 Jul 2025 20:44:20 +0000
ROA not after:            Sat 04 Jul 2026 20:49:20 +0000
asID:                     32167
IP address blocks:        178.208.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6a:6c:29:86:63:b4:31:61:a3:e2:b4:4b:12:f8:4f:33:82:63:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jul  5 20:44:20 2025 GMT
            Not After : Jul  4 20:49:20 2026 GMT
        Subject: CN=000977345475B85C9DEF9CF3BA185E21258393A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:13:41:fe:fa:ec:2b:3b:22:f5:6a:a6:29:
                    a2:48:65:e5:ea:ba:85:95:6c:76:38:63:0e:e9:f6:
                    c9:51:80:e8:73:62:3f:c8:3f:f7:d0:44:de:62:6d:
                    4d:a2:a0:35:4d:6b:39:17:b0:25:53:a3:55:59:82:
                    e3:3d:73:ab:2f:65:7e:43:25:f4:2d:30:8f:a1:78:
                    7e:75:90:55:0b:f9:44:5f:24:3b:20:70:56:cf:ae:
                    3e:5a:59:36:5f:16:b2:e5:22:07:14:be:37:9c:ea:
                    09:b1:63:39:82:7c:0b:84:9c:67:c9:2e:21:2b:42:
                    aa:4b:c8:df:5d:34:01:78:5c:f4:a9:73:a4:a7:36:
                    e3:1d:96:c6:e8:48:55:46:4b:a5:1f:c9:79:8b:09:
                    82:a5:fd:b9:47:29:33:f2:fd:5d:11:79:f9:c4:02:
                    e0:d6:27:da:05:74:3a:62:3c:09:ce:32:a6:41:f7:
                    b6:3d:08:66:cd:88:ce:b5:cc:de:1d:b8:cd:ea:21:
                    d4:6f:cb:e7:4b:14:61:6c:3c:04:14:97:74:61:62:
                    d9:fe:56:ec:49:67:31:07:87:73:e3:4f:83:76:7c:
                    1b:4f:de:3d:00:87:aa:cf:07:92:67:d0:85:b2:fb:
                    09:02:37:d6:f4:c8:4f:7d:d5:c7:ff:75:8b:8e:9a:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:09:77:34:54:75:B8:5C:9D:EF:9C:F3:BA:18:5E:21:25:83:93:A9
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.208.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:de:bf:c8:e1:08:4a:9a:37:a3:fe:45:a3:e6:48:1c:bc:
         46:c5:47:b3:41:b7:12:44:22:a6:fd:c3:62:e2:bf:af:ee:3f:
         de:1a:44:66:a2:24:a1:eb:89:fc:b1:86:fa:21:16:2c:89:3c:
         de:ae:8c:cb:4f:83:d1:e4:cc:fe:83:b2:58:8e:a1:71:2f:2e:
         c4:70:2d:fa:f5:76:f4:0e:27:f9:b9:f4:b4:3e:d5:a3:e6:c5:
         3a:9e:8c:04:9b:b9:e6:9b:f0:fa:2c:6b:bd:b8:3d:b4:10:a7:
         a7:bc:a8:6b:86:90:75:bd:32:04:b9:68:41:3f:13:0c:8b:8a:
         ca:4b:65:94:b0:e3:c8:61:b3:1c:f5:34:77:73:bf:2c:0a:d5:
         ff:1a:07:58:d2:a5:f2:58:db:af:27:f2:13:cd:b3:ec:db:96:
         47:14:c3:ce:e2:96:37:f0:15:5e:08:c1:1d:e8:6c:53:1c:4c:
         f1:77:bb:4c:bb:97:f2:99:6f:db:a2:14:2e:59:33:c2:33:cc:
         03:a4:c3:78:cb:cf:cb:88:d2:99:62:d3:8b:09:28:0b:47:2e:
         76:bc:c7:ac:be:c5:2a:70:dd:f3:07:0b:fd:75:da:2e:9b:8d:
         c4:f3:95:65:47:dd:fa:73:e0:78:11:b9:a5:29:22:29:11:1b:
         5d:85:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:17:47 2025 by rpki-client