Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214879.roa
File:                     AS214879.roa (raw, json)
Hash identifier:          xkwd6Odv26RY5w74gmpxvOjVAXRrWGSYCbon1Mrcmqs=
Subject key identifier:   87:C2:D7:F2:BA:92:07:17:54:94:AF:60:98:E7:ED:20:78:5C:7C:5C
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4C13BBA46DC01FA72C28351F55442902AD3FFDB9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214879.roa
Signing time:             Thu 24 Jul 2025 03:54:13 +0000
ROA not before:           Thu 24 Jul 2025 03:49:13 +0000
ROA not after:            Thu 23 Jul 2026 03:54:13 +0000
asID:                     214879
IP address blocks:        92.113.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:13:bb:a4:6d:c0:1f:a7:2c:28:35:1f:55:44:29:02:ad:3f:fd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jul 24 03:49:13 2025 GMT
            Not After : Jul 23 03:54:13 2026 GMT
        Subject: CN=87C2D7F2BA9207175494AF6098E7ED20785C7C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:50:d9:69:5c:d5:77:3b:0c:c1:f3:a4:b5:
                    a0:1f:b5:c4:06:32:6b:be:ac:bc:8c:06:0e:20:6b:
                    9d:bc:7c:ab:cf:fd:28:6c:b7:d0:95:ae:2c:a9:1c:
                    b8:77:c4:af:d7:59:04:83:04:bc:44:e1:58:1d:bd:
                    32:ed:43:74:7c:1e:db:dd:24:35:f6:42:3d:0d:52:
                    67:a4:db:25:69:97:ba:20:f4:47:4b:ab:98:fb:32:
                    4b:6f:85:8e:fc:90:7c:9d:2c:0e:f6:97:dc:04:a8:
                    de:e9:46:96:34:78:60:d8:3d:dd:35:37:86:58:c8:
                    35:3f:2d:74:07:e2:d3:ea:8f:b7:9f:1f:0c:d3:88:
                    dc:b3:5d:74:29:75:81:dd:80:b7:70:19:79:8f:7a:
                    59:bf:62:7e:ee:de:1a:53:b7:76:00:fa:ff:f8:82:
                    ee:0d:b8:f5:ce:b5:1a:88:81:55:35:1e:db:80:52:
                    f4:58:14:3d:f6:01:6c:5f:80:82:af:c4:b7:8c:00:
                    d8:da:e9:3e:e8:3c:f9:45:14:d6:10:b8:44:b1:1a:
                    df:b9:2e:1e:54:9d:63:ee:90:39:fe:a9:92:20:c0:
                    65:0a:e6:25:b6:66:45:b4:08:72:07:2f:ce:da:62:
                    b6:5f:73:11:2b:79:38:62:b3:98:00:ae:76:84:57:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C2:D7:F2:BA:92:07:17:54:94:AF:60:98:E7:ED:20:78:5C:7C:5C
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214879.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:05:71:b0:11:10:03:8d:9b:e5:66:20:32:93:6f:f4:30:79:
         6d:0a:e7:87:f2:0a:d7:b4:95:b9:a6:fa:e3:4e:16:f8:1e:b8:
         d3:07:f1:7a:51:dd:40:3c:dd:0c:81:b4:63:20:90:6c:c8:ed:
         b9:b9:c8:a8:f6:cc:eb:93:e1:9e:c3:85:cb:f8:15:23:cc:e0:
         9e:1c:ed:ad:0d:f0:cf:c0:ae:d8:02:be:75:f8:99:0d:2d:61:
         a9:96:ea:59:9c:e3:1f:5d:a9:39:7f:d0:81:16:b2:f5:f9:34:
         2e:c3:07:e0:bf:42:9b:f6:b8:bb:80:74:b8:c8:b8:8f:e3:04:
         e9:a4:4a:61:8d:86:20:79:96:eb:38:4b:06:57:33:4b:23:ea:
         ac:06:46:05:80:1e:6a:f3:4f:75:b2:5c:4b:e8:b5:b1:9e:42:
         3a:e2:e8:18:f3:05:87:3c:52:08:df:54:1b:0b:be:7e:76:2b:
         5d:77:56:b4:0a:1f:3a:4f:ee:e4:04:f7:e8:8c:9d:cb:91:c1:
         d7:e7:9b:af:7a:ec:9b:97:cc:bf:30:2d:9a:b2:cd:40:fc:1d:
         23:be:16:8e:da:e6:c2:c5:70:87:fe:ed:f1:64:7b:6c:7d:07:
         c4:27:f8:5c:cb:86:f5:ff:56:06:22:5a:70:a0:62:86:a1:15:
         fa:47:58:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTBO7pG3AH6csKDUfVUQpAq0//bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MjQwMzQ5MTNaFw0yNjA3MjMwMzU0MTNaMDMxMTAvBgNV
BAMTKDg3QzJEN0YyQkE5MjA3MTc1NDk0QUY2MDk4RTdFRDIwNzg1QzdDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6FDZaVzVdzsMwfOktaAftcQG
Mmu+rLyMBg4ga528fKvP/Shst9CVriypHLh3xK/XWQSDBLxE4VgdvTLtQ3R8Htvd
JDX2Qj0NUmek2yVpl7og9EdLq5j7MktvhY78kHydLA72l9wEqN7pRpY0eGDYPd01
N4ZYyDU/LXQH4tPqj7efHwzTiNyzXXQpdYHdgLdwGXmPelm/Yn7u3hpTt3YA+v/4
gu4NuPXOtRqIgVU1HtuAUvRYFD32AWxfgIKvxLeMANja6T7oPPlFFNYQuESxGt+5
Lh5UnWPukDn+qZIgwGUK5iW2ZkW0CHIHL87aYrZfcxEreThis5gArnaEV8sdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUh8LX8rqSBxdUlK9gmOftIHhcfFwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0ODc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHF2
MA0GCSqGSIb3DQEBCwUAA4IBAQCIBXGwERADjZvlZiAyk2/0MHltCueH8grXtJW5
pvrjThb4HrjTB/F6Ud1APN0MgbRjIJBsyO25ucio9szrk+Gew4XL+BUjzOCeHO2t
DfDPwK7YAr51+JkNLWGplupZnOMfXak5f9CBFrL1+TQuwwfgv0Kb9ri7gHS4yLiP
4wTppEphjYYgeZbrOEsGVzNLI+qsBkYFgB5q8091slxL6LWxnkI64ugY8wWHPFII
31QbC75+ditdd1a0Ch86T+7kBPfojJ3LkcHX55uveuybl8y/MC2ass1A/B0jvhaO
2ubCxXCH/u3xZHtsfQfEJ/hcy4b1/1YGIlpwoGKGoRX6R1iH
-----END CERTIFICATE-----
Generated at Fri Jul 25 03:50:06 2025 by rpki-client