Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa
File:                     6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa (raw, json)
Hash identifier:          qW8BuAv46sUhwKyLGaO/MD9Ma/S40t2lcedk3o6KpCQ=
Subject key identifier:   E8:FB:BF:D6:4D:EC:D7:5C:D8:7F:06:E5:3D:60:63:2A:38:0E:87:A6
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018CCA2A799BCD9F718F5D47C2DCED6AAA48
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa
Signing time:             Tue 02 Jan 2024 12:33:50 +0000
ROA not before:           Tue 02 Jan 2024 12:33:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49418
IP address blocks:        194.87.228.0/24 maxlen: 24
                          212.192.250.0/24 maxlen: 24
                          212.192.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 17:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:79:9b:cd:9f:71:8f:5d:47:c2:dc:ed:6a:aa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 12:33:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8fbbfd64decd75cd87f06e53d60632a380e87a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:e7:a4:88:97:06:0e:41:d4:78:48:df:14:
                    d6:67:f8:87:76:79:aa:07:0d:00:ee:86:b3:3a:df:
                    e1:b7:ba:65:0e:6f:b9:33:71:0a:e9:47:e6:97:d7:
                    f3:e5:9a:cd:ff:63:75:e3:da:0c:e6:69:01:15:4c:
                    2d:ae:d2:cd:af:f6:f0:f5:ed:7b:7a:8e:b7:84:b3:
                    3d:84:72:d1:4f:1e:8e:3a:34:57:25:8d:db:83:a6:
                    84:34:39:10:74:ac:12:8d:ae:68:e3:2b:8e:f2:dc:
                    ab:1f:d7:11:d7:9c:39:db:0a:11:e6:72:1d:14:41:
                    df:d8:f3:c0:4c:0b:8b:40:b3:02:96:d5:81:e9:63:
                    db:78:c3:03:b9:3f:e2:97:05:25:4f:3f:35:9e:98:
                    3a:21:e8:be:37:c0:39:c8:b7:d2:f7:5f:08:40:d3:
                    b1:35:1e:51:a6:be:47:27:aa:81:88:ec:c3:f7:85:
                    cd:38:4e:60:66:02:43:80:8c:13:dd:2e:11:1a:09:
                    a4:1b:1e:a7:71:fc:fc:f8:9b:f3:ef:de:80:17:97:
                    46:5c:89:2c:5b:f0:c5:09:d3:2b:00:92:58:60:e0:
                    f9:4b:49:bc:21:3e:66:b5:7e:f3:c9:ef:39:4b:42:
                    d5:32:bd:2d:43:6e:84:88:b2:21:07:0f:99:c6:d5:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FB:BF:D6:4D:EC:D7:5C:D8:7F:06:E5:3D:60:63:2A:38:0E:87:A6
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.228.0/24
                  212.192.250.0/24
                  212.192.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:7c:45:13:8b:9a:15:9d:67:2b:50:df:30:4f:10:1d:0b:
         75:f2:82:b1:6c:2f:35:41:9d:4b:a4:85:09:cb:42:dd:bf:e6:
         09:d6:5d:44:66:22:bc:09:4d:34:56:07:55:1e:ee:44:2a:1c:
         3c:99:74:70:7e:8e:f0:63:4b:c9:dd:3c:b3:6b:03:45:bb:f7:
         28:a6:b5:c6:ac:b5:2a:16:ce:52:4a:20:89:bf:19:c4:97:38:
         0e:c7:29:ff:17:55:b7:7f:b1:45:de:5c:16:41:14:97:32:59:
         8a:f1:e9:1b:ad:84:30:07:70:f3:f1:a5:63:23:5a:c8:d6:0e:
         10:3e:39:af:ca:13:43:62:52:7e:e6:51:2d:eb:6d:10:07:4b:
         8c:7d:9e:ec:a9:28:b7:a8:0d:93:46:53:e9:82:22:61:51:c6:
         bc:ef:33:d1:26:74:23:f5:53:8c:83:a7:4c:88:8e:8c:1f:10:
         62:c3:eb:c9:e8:9d:34:5d:47:3f:02:e5:7d:6f:7a:c2:95:4f:
         fb:6f:1a:fe:90:58:3f:c2:d7:d6:9b:5c:1f:67:8c:d1:fc:99:
         24:00:5c:ad:04:b3:01:65:3e:1c:12:ff:a2:79:03:75:5e:c5:
         24:7f:ee:0a:42:0a:90:86:e1:3b:e5:61:a9:38:e9:84:7a:a6:
         7d:cd:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 02:01:40 2024 by rpki-client on console-ams.rpki-client.org