Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37352e302f32342d3234203d3e20323034313730.roa
File:                     38322e3134392e37352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          S5HxDxUPbao6GOTQTiTSywFIWEbNcPLTiONIMzzuIPI=
Subject key identifier:   26:F1:40:C5:44:39:2F:D3:51:09:58:63:7A:7D:FA:B0:5C:97:27:02
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       1818BEEB51263E8CEF7B7C1A04ECD3F954FBA7C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37352e302f32342d3234203d3e20323034313730.roa
Signing time:             Wed 16 Aug 2023 13:39:22 +0000
ROA not before:           Wed 16 Aug 2023 13:34:22 +0000
ROA not after:            Wed 14 Aug 2024 13:39:22 +0000
asID:                     204170
IP address blocks:        82.149.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:18:be:eb:51:26:3e:8c:ef:7b:7c:1a:04:ec:d3:f9:54:fb:a7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Aug 16 13:34:22 2023 GMT
            Not After : Aug 14 13:39:22 2024 GMT
        Subject: CN=26F140C544392FD3510958637A7DFAB05C972702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:f4:40:bd:ce:23:ac:fc:6f:f5:71:66:4c:
                    4f:b4:61:05:20:54:a5:7b:06:36:cd:6e:57:a7:90:
                    7b:91:74:51:d3:17:5a:8d:1f:0f:53:be:25:01:38:
                    94:19:82:ca:6f:d3:0b:2b:9c:6c:95:ce:bc:77:f8:
                    68:e2:dc:f4:0b:78:b1:1b:4b:d8:63:2b:29:be:d3:
                    d5:0b:93:23:67:2c:f6:57:f8:58:67:d8:15:4b:9c:
                    27:70:09:d2:f5:94:ec:13:c4:d8:4c:d5:75:f8:71:
                    6a:99:74:23:49:86:27:f4:da:cb:93:70:33:7f:f1:
                    8a:43:f3:34:97:68:b4:bf:f5:a0:5e:b2:81:d1:bc:
                    dd:c1:d9:49:1f:a3:6f:38:d1:04:58:76:e8:87:72:
                    dd:ac:fe:db:af:46:fc:c1:62:b1:e1:bb:0a:f8:3f:
                    83:8b:76:dd:f2:cd:07:35:4a:6d:28:2a:c4:a3:9b:
                    e1:c1:a4:ab:8b:d0:8b:69:de:e4:6f:d0:f3:e3:74:
                    62:1c:fc:0d:6b:58:e5:4f:ca:13:cf:3c:26:b5:68:
                    9a:b3:65:57:41:31:bd:95:94:74:dc:9d:af:fc:d3:
                    99:23:e0:69:42:65:3f:37:45:d8:44:f8:ee:fe:28:
                    f1:19:8c:45:e1:9b:a8:64:50:59:49:05:99:dc:33:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:40:C5:44:39:2F:D3:51:09:58:63:7A:7D:FA:B0:5C:97:27:02
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37352e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.149.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:52:3f:0f:31:8a:0e:c1:84:88:03:9f:dd:90:67:2a:0f:a5:
         cc:32:5e:a5:cd:45:c1:15:4f:f2:8b:7b:73:12:ef:51:05:2c:
         44:e9:74:a3:82:0d:ea:fa:a7:da:d7:44:b6:15:ef:e6:73:9f:
         99:05:88:c4:e9:61:a7:1f:4b:2f:64:95:12:80:88:c5:72:2a:
         6c:ed:35:6c:77:e1:1d:de:8f:00:7c:b1:bf:70:71:bc:f9:76:
         37:9a:da:16:2f:5a:e6:e5:4a:53:1c:10:f4:d1:60:eb:fc:a4:
         59:69:ff:75:7c:e4:88:2c:ae:fa:66:2b:6c:84:1e:d2:71:1e:
         d9:2b:70:8c:09:09:ea:fa:15:35:6a:19:c4:ae:cd:b5:e5:ab:
         0e:ee:34:bc:55:2c:a3:3b:cb:19:79:30:eb:b6:6e:03:96:aa:
         e0:58:38:d8:48:f3:81:b6:31:94:13:7b:9a:d9:11:b5:d6:df:
         0a:29:ea:f1:39:c1:eb:45:fe:02:a1:11:62:bc:82:94:b7:b0:
         8c:ec:b6:fb:25:44:e1:67:18:58:97:9e:c0:c5:aa:ac:cb:4b:
         e9:ea:1c:3c:00:d7:3c:0c:c7:79:09:d1:94:8f:7e:3d:6d:5d:
         47:8a:4e:01:5c:97:8b:d0:2f:1b:fd:12:2b:dc:4b:c0:9e:bc:
         84:b2:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org