Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86HQIVsEJmwyedDwhMW1-ySjRuU.roa
File:                     86HQIVsEJmwyedDwhMW1-ySjRuU.roa (raw, json)
Hash identifier:          uWs9iJDrNKaWPV7UT5aC0fJ1AHmrfCLT7Ez3KmiadgY=
Subject key identifier:   F3:A1:D0:21:5B:04:26:6C:32:79:D0:F0:84:C5:B5:FB:24:A3:46:E5
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018D798B67C93C4399275C9124B7A723FB15
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86HQIVsEJmwyedDwhMW1-ySjRuU.roa
Signing time:             Mon 05 Feb 2024 13:53:15 +0000
ROA not before:           Mon 05 Feb 2024 13:53:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44547
IP address blocks:        62.76.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:79:8b:67:c9:3c:43:99:27:5c:91:24:b7:a7:23:fb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Feb  5 13:53:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f3a1d0215b04266c3279d0f084c5b5fb24a346e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:c9:cc:2a:15:57:a2:6d:de:13:0e:83:6e:
                    ff:c5:bc:02:ad:d2:89:23:a3:c0:38:01:31:bf:a7:
                    34:6d:64:3a:cb:f9:c8:4d:e2:06:4b:04:5b:77:34:
                    ec:69:31:c0:34:6d:46:f1:30:73:f8:aa:f1:5a:81:
                    b8:2d:47:97:c3:85:a0:9f:7d:00:73:a9:ce:54:54:
                    df:80:ec:ed:13:3d:11:52:5c:7b:87:7f:e3:a8:f9:
                    85:c0:59:22:02:ed:ec:94:84:ff:7c:ba:5f:3a:c2:
                    9b:ef:4c:ad:7c:79:3a:06:01:5f:94:4d:8a:a6:bc:
                    81:f1:ce:f7:e2:b4:60:1a:68:f4:c2:34:12:f4:61:
                    c7:52:03:22:29:ef:2c:cd:6e:60:f4:21:fb:e1:b4:
                    9b:f8:f0:81:59:48:c2:99:10:40:d5:5a:1e:e0:79:
                    fa:df:22:1d:e1:62:d4:a9:db:c8:1d:3c:f7:df:22:
                    fb:77:e1:0b:0d:3a:06:c0:1f:e7:00:66:83:c1:ce:
                    7d:4f:b9:2e:7c:8b:0e:7d:3e:33:24:23:60:94:55:
                    28:a7:67:11:b6:58:e1:e5:51:92:b2:b0:8f:34:50:
                    22:a1:cf:2b:00:cc:c9:49:2a:92:83:70:33:31:e0:
                    ce:a3:55:0d:c9:32:b2:fb:b1:7e:ce:cb:7b:86:75:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:D0:21:5B:04:26:6C:32:79:D0:F0:84:C5:B5:FB:24:A3:46:E5
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86HQIVsEJmwyedDwhMW1-ySjRuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:08:cf:e2:7c:75:e6:ce:1b:7e:7a:60:ff:ac:be:ef:32:30:
         0d:a9:34:06:d5:78:97:e7:5d:9d:b6:0f:c3:10:f0:bd:30:ef:
         bf:4f:90:c2:bf:77:3a:0d:e2:48:8a:f0:83:20:a9:3b:c1:d6:
         39:78:05:28:f8:56:be:b7:8c:32:56:78:62:69:75:1b:69:cc:
         6f:91:2d:e1:53:37:8f:78:85:a3:f4:41:13:17:53:9e:30:c9:
         0e:15:b0:db:e3:68:5f:35:76:fd:12:72:7b:77:3e:56:cd:2b:
         57:ac:d9:c9:c3:1c:cd:40:0e:db:62:b4:a6:8e:6d:70:e3:fc:
         7c:07:21:c6:60:b9:99:4e:3e:e5:85:90:40:15:a4:14:e4:7d:
         26:f8:48:a4:ce:25:37:aa:cb:ba:0d:4f:2f:7c:e9:f7:bd:15:
         1e:d0:de:6f:98:57:bf:78:c0:d1:27:66:64:e6:69:ec:f0:0f:
         09:33:10:7e:0c:a8:09:de:a9:8e:6c:1e:b4:f4:5e:5e:07:19:
         62:ab:f0:c0:38:ef:c7:16:65:e7:27:56:8f:31:02:98:7b:6f:
         f6:a7:09:92:29:bc:aa:07:c4:e4:33:05:10:bc:0d:82:6c:38:
         bd:e9:3f:08:3a:17:e8:c4:98:67:6c:5f:e9:32:e1:f7:4e:a7:
         f3:a4:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 03:26:42 2024 by rpki-client on console-fra.rpki-client.org