Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa
File:                     6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa (raw, json)
Hash identifier:          GquP2MmBMA1GkONueATw9wcIDsP2qjgbxCGnTlX01po=
Subject key identifier:   E8:0C:B3:FB:FC:FE:44:DB:31:D0:31:8A:DB:EF:0B:DE:6E:24:FC:C6
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       016C1C
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa
Signing time:             Thu 15 Feb 2024 16:56:43 +0000
ROA not before:           Thu 15 Feb 2024 16:56:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206238
IP address blocks:        45.138.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
                          rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 10:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93212 (0x16c1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Feb 15 16:56:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=E80CB3FBFCFE44DB31D0318ADBEF0BDE6E24FCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:41:26:69:b3:14:a9:ef:dc:f5:db:89:b7:
                    a0:64:07:8e:86:cf:49:56:3b:2c:fc:e1:89:62:63:
                    14:11:03:3f:4d:38:3e:a6:47:01:23:3a:25:cb:ed:
                    7a:78:17:bf:4d:e6:22:eb:fb:a9:f6:ee:d0:cf:8b:
                    cc:14:b3:0d:3b:07:c6:00:74:dc:77:10:90:ba:b0:
                    61:46:69:fc:4e:e4:ad:a4:41:d3:0a:40:7b:51:2c:
                    56:60:f8:0f:e8:7e:7a:5b:ab:9c:4c:50:d2:17:79:
                    65:7d:b0:91:ef:1e:10:49:e6:ac:7c:27:35:5e:40:
                    07:1a:27:a0:8d:94:f4:a9:7a:84:0c:35:90:73:4b:
                    14:55:63:ed:4b:ed:26:ce:e0:a0:7c:a1:70:1c:0f:
                    38:e4:9f:d9:b6:61:4d:2d:cd:58:81:9e:4a:ea:74:
                    6f:22:1a:04:b6:70:ae:fb:9d:5e:2b:4d:52:75:47:
                    fd:dd:f6:d8:dd:dc:bf:5e:c1:a0:d4:8e:f6:b8:4a:
                    90:af:8e:ed:e0:ea:8e:10:b9:d1:f1:9a:55:84:15:
                    ce:77:b9:58:52:8b:8d:0c:15:5f:83:d1:7d:df:a9:
                    1c:45:4d:0b:3e:63:46:5d:3e:00:67:d5:20:2c:93:
                    e0:35:7e:54:b7:f2:b3:83:af:e5:29:b0:b9:01:12:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0C:B3:FB:FC:FE:44:DB:31:D0:31:8A:DB:EF:0B:DE:6E:24:FC:C6
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:da:37:4d:d6:65:a7:09:4e:89:2f:b2:29:cd:ec:e2:30:
         23:ff:6f:b0:78:97:93:6f:25:99:d0:39:7c:02:d3:96:35:68:
         c6:61:bd:6c:e2:73:e6:61:df:0a:f5:0b:b5:23:48:4b:bf:5d:
         af:8c:8b:b9:fb:6b:f4:18:4c:ca:8c:6f:a7:1f:c9:9b:4a:ff:
         38:5c:ea:7a:47:8d:6e:9a:b4:53:24:92:54:5a:c5:50:df:f8:
         a4:7e:0f:62:a1:f4:30:be:f2:c5:7e:82:fe:c0:8a:75:32:7c:
         72:50:76:10:ba:0e:fd:94:c5:cf:b8:95:65:cc:73:4c:5c:e1:
         1b:51:26:3e:62:1f:52:e5:bc:2f:12:52:eb:f6:d8:70:69:b1:
         29:ea:8b:3a:81:6a:75:8b:5b:a8:ba:5c:14:7b:85:3e:ad:2e:
         e4:9b:f3:ef:9c:3f:2b:bc:ca:cb:38:cf:12:8d:03:14:63:7a:
         b9:5e:00:ad:f9:13:b2:ec:cc:f9:a1:c2:ba:11:3b:c1:48:c3:
         8e:fe:09:e1:76:c5:d3:37:1f:9a:2a:54:de:ca:b6:35:5a:f7:
         de:8c:e1:60:2b:86:ca:4b:f0:04:66:97:f3:df:67:1a:4d:5b:
         84:c3:03:f0:63:d4:1c:73:29:46:7b:9e:00:8e:a0:c9:6f:ca:
         ac:3d:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:49:46 2024 by rpki-client on console-fra.rpki-client.org