Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
File:                     39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XC7CKTgr/p4uZ7wSirIBMw0fsF91V22N0Xz1CRrm6RQ=
Subject key identifier:   EE:4B:33:BF:CC:92:51:C4:7B:9D:E0:5F:41:ED:8F:51:1F:A3:82:4A
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       5BB6C580F9E7C66D2EDF45D5C2D6077CCB9D5644
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 23 Aug 2023 11:20:32 +0000
ROA not before:           Wed 23 Aug 2023 11:15:32 +0000
ROA not after:            Wed 21 Aug 2024 11:20:32 +0000
asID:                     61317
IP address blocks:        93.113.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b6:c5:80:f9:e7:c6:6d:2e:df:45:d5:c2:d6:07:7c:cb:9d:56:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Aug 23 11:15:32 2023 GMT
            Not After : Aug 21 11:20:32 2024 GMT
        Subject: CN=EE4B33BFCC9251C47B9DE05F41ED8F511FA3824A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:61:56:1f:4b:e7:39:42:d8:09:a8:81:0a:
                    8b:8d:f3:fc:74:fc:50:0f:7b:91:0b:4b:f4:5c:59:
                    85:9a:ea:4a:dc:e5:02:b7:53:b6:e9:ca:60:91:0f:
                    40:cb:e5:8b:7e:ff:7a:3f:b5:75:1c:ed:c0:87:62:
                    e4:56:13:93:fd:c4:43:2c:87:dc:d1:0a:2f:59:46:
                    30:36:63:46:4e:99:a3:dc:a8:35:d6:cc:0b:40:44:
                    c5:e0:c8:c7:36:02:f3:88:bc:6c:98:a7:3c:4b:6a:
                    9b:2c:db:83:29:51:80:02:ef:89:ac:4e:7c:4f:0c:
                    eb:d9:cc:ee:a2:60:66:24:cc:b5:55:ec:ea:9e:0d:
                    bf:21:13:94:85:a2:23:e2:84:f1:32:3b:90:7e:b9:
                    72:21:11:a7:85:d9:dc:3c:88:cf:bc:5d:ad:4b:3c:
                    4e:08:48:d8:70:aa:2c:60:cb:63:41:d1:99:56:b4:
                    7f:93:47:7a:a7:e3:3a:19:e6:0f:2c:67:d3:35:5a:
                    88:f2:73:18:37:e4:c1:6e:c0:9c:bc:37:af:78:48:
                    5f:2e:69:07:3f:38:c4:53:74:d3:15:14:a2:17:8f:
                    63:f7:39:d4:a8:ab:4c:81:cd:9c:1b:55:72:fe:b2:
                    75:2c:e1:ba:95:35:44:f6:56:16:b0:02:18:e0:f9:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:33:BF:CC:92:51:C4:7B:9D:E0:5F:41:ED:8F:51:1F:A3:82:4A
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:96:42:b2:50:23:36:11:95:f7:38:7b:eb:b9:45:cd:4c:
         e5:3e:76:99:99:63:69:4f:f0:be:7f:55:2b:b3:a9:57:a8:ec:
         29:e3:e1:43:3e:8d:f9:98:9b:53:4d:fd:32:ad:ea:78:b6:4b:
         5c:d3:7e:a3:36:0b:e6:7a:2c:ec:a3:32:a1:e2:e3:c2:06:4e:
         7a:37:b8:95:15:b1:68:8a:ce:54:b6:a4:10:c5:4d:c1:c7:84:
         06:58:34:82:be:17:7c:20:e9:1b:39:40:0b:df:bc:84:40:f5:
         f3:16:76:59:68:26:f3:c6:8c:66:c0:ee:e0:47:34:fa:e6:92:
         56:f2:1b:07:79:ef:02:35:50:a4:39:e4:25:14:62:55:05:55:
         de:d1:4c:d4:37:0a:53:7c:c4:54:6e:d7:e5:ed:ae:82:32:bb:
         b1:01:17:38:7e:b7:ef:91:3f:5f:87:ba:fb:9f:fe:29:78:f2:
         42:4a:b0:22:25:5a:05:cf:a4:d9:a8:2c:34:2a:0f:3a:8a:0f:
         0b:d3:3b:d6:95:5e:b1:9b:12:8b:04:d8:9f:fa:63:ab:87:ae:
         75:27:6f:6e:6f:4b:a3:87:0b:87:f4:05:d0:b3:36:71:1f:e2:
         b4:56:4b:83:d0:76:59:dd:b8:ac:dc:9a:e2:41:a5:71:3c:a6:
         dd:13:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:15:38 2024 by rpki-client on console-fra.rpki-client.org