Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BBgL7bjLug9vuvXqFfjrUs1rOIE.roa
File:                     BBgL7bjLug9vuvXqFfjrUs1rOIE.roa (raw, json)
Hash identifier:          bYexpPI/F+kDjGoiv9zbouxKuq3+COA+8iivazqZP4Y=
Subject key identifier:   04:18:0B:ED:B8:CB:BA:0F:6F:BA:F5:EA:15:F8:EB:52:CD:6B:38:81
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01907CC05856DF919517341258968718155C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BBgL7bjLug9vuvXqFfjrUs1rOIE.roa
Signing time:             Thu 04 Jul 2024 07:58:18 +0000
ROA not before:           Thu 04 Jul 2024 07:58:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3320
IP address blocks:        195.133.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7c:c0:58:56:df:91:95:17:34:12:58:96:87:18:15:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jul  4 07:58:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04180bedb8cbba0f6fbaf5ea15f8eb52cd6b3881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:d9:fb:0b:f8:77:c8:89:da:a4:6f:be:11:
                    1f:4f:58:51:84:a6:47:9e:df:3a:08:a7:cc:fc:8b:
                    17:f2:c6:3e:3e:57:46:95:38:8f:30:1c:5a:d4:ae:
                    69:fd:55:39:e7:47:16:d1:8c:2f:0e:f5:87:5f:9d:
                    c5:d7:35:ae:2d:62:87:2c:13:00:76:e5:94:ef:25:
                    e5:6f:1b:62:17:3a:d1:6c:57:6f:4e:c6:69:20:d3:
                    d9:89:3a:3a:5c:c1:88:0c:3a:53:27:4b:56:e8:22:
                    52:7a:14:3d:b8:b2:d7:83:5f:97:74:0e:b8:0a:b9:
                    48:95:56:59:2f:ff:44:27:1a:b2:a9:60:22:0b:0b:
                    aa:8c:e7:1b:74:94:37:3d:83:92:e2:9e:3f:46:80:
                    e2:d7:48:97:75:91:2a:c0:7a:3d:d2:a9:e3:25:24:
                    52:33:ec:dc:5b:89:76:71:59:e5:c5:62:89:c7:bf:
                    47:54:f2:27:a6:09:92:c9:82:95:7b:a2:8f:3d:06:
                    34:dd:dc:c5:44:ea:63:69:68:24:1d:d2:a3:cb:ea:
                    1f:1c:41:fa:6d:78:6f:34:af:eb:cc:46:e5:ef:c9:
                    fe:c3:a6:99:7b:3f:84:74:b9:bd:29:ac:10:f5:4a:
                    29:8c:7e:de:5e:ec:39:6e:ad:15:db:cf:d7:d9:01:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:0B:ED:B8:CB:BA:0F:6F:BA:F5:EA:15:F8:EB:52:CD:6B:38:81
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BBgL7bjLug9vuvXqFfjrUs1rOIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.133.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:65:82:85:ae:cd:aa:58:fb:e3:02:1b:df:35:ca:23:1e:
         11:e3:c1:ff:a8:6d:08:5b:b6:a6:7b:a0:32:2f:a1:98:92:d2:
         6a:9e:cb:d9:a0:61:44:c8:d8:0c:32:6a:d9:ea:85:86:f4:27:
         12:ab:ff:7b:04:eb:1a:3b:95:2c:e2:5f:3d:6e:29:0f:13:4a:
         12:f2:c7:0b:29:cd:b0:8f:c3:0d:18:8e:9f:6c:a4:d4:cc:4b:
         bf:69:8b:20:77:b4:c1:ff:07:9d:65:13:e5:a3:a1:fb:c8:b3:
         5c:26:21:16:b4:2b:59:85:05:e4:1a:3c:92:6b:90:13:51:8a:
         7f:50:71:5a:7a:39:05:0b:d7:bd:0d:61:59:44:ba:b4:d1:11:
         a8:5b:88:e2:22:24:06:c6:30:a0:cb:07:a3:aa:e0:e8:85:a5:
         01:c3:d5:a2:ea:15:10:fb:d3:e1:a4:78:6e:77:d4:06:d3:f3:
         c3:cf:26:b8:9a:c0:37:91:3c:6f:40:3d:ac:0a:75:36:53:0b:
         df:fb:51:27:14:c0:b2:ce:c5:4c:80:fb:ca:90:89:8a:0f:00:
         16:b2:c1:36:20:ef:6c:47:bb:e8:f6:73:02:db:d9:d3:2d:d7:
         2c:59:66:49:5a:52:e6:7a:dd:c0:d7:f2:04:8f:84:86:1a:a8:
         b0:9a:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 03:48:46 2024 by rpki-client on console-ams.rpki-client.org