Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DM5gahsuBHo_ZawvAnL3aGeQAJ0.roa
File:                     DM5gahsuBHo_ZawvAnL3aGeQAJ0.roa (raw, json)
Hash identifier:          0IgeWUMySRyxHODFd6H0r3PKw9iXfKiy3OFusTST4Jc=
Subject key identifier:   0C:CE:60:6A:1B:2E:04:7A:3F:65:AC:2F:02:72:F7:68:67:90:00:9D
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0190163780E92EF8691E17203E90163FF0BE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DM5gahsuBHo_ZawvAnL3aGeQAJ0.roa
Signing time:             Fri 14 Jun 2024 10:07:34 +0000
ROA not before:           Fri 14 Jun 2024 10:07:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48614
IP address blocks:        194.87.112.0/23 maxlen: 23
                          195.133.68.0/22 maxlen: 22
                          212.192.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 17:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:16:37:80:e9:2e:f8:69:1e:17:20:3e:90:16:3f:f0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun 14 10:07:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0cce606a1b2e047a3f65ac2f0272f7686790009d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:85:e9:25:af:f1:8c:bc:52:65:36:3d:b4:
                    b4:40:51:f4:b7:4b:e9:0a:f1:2f:b6:2b:65:93:c7:
                    4e:9b:12:b3:c5:a9:f5:a5:31:1b:3c:d2:eb:fa:d4:
                    f2:5d:ed:2a:34:bc:d4:ec:1d:56:02:f6:e1:2d:67:
                    56:96:e5:af:82:27:f5:bb:d7:f9:bf:58:6b:90:23:
                    d3:fb:15:6e:13:28:6d:d5:3b:51:e7:26:62:9d:ed:
                    e7:f7:55:2a:b1:78:50:cf:50:18:4c:90:5f:b1:ed:
                    30:ef:88:3c:38:42:1e:3f:82:0a:9a:35:83:5f:b4:
                    96:04:88:92:7b:c2:5c:a0:e6:fe:47:35:23:6e:a9:
                    1d:68:50:f2:b4:13:39:6f:2a:32:ee:3c:d8:36:f0:
                    cc:4b:6b:15:98:fa:2f:5a:f2:dd:54:da:e2:1a:7d:
                    14:85:a9:b6:bc:00:1b:d1:83:80:00:b6:4a:3b:46:
                    fb:83:71:fa:76:a0:dc:ef:bf:79:70:d1:57:72:cd:
                    39:da:db:41:f4:cd:92:6e:29:f9:e6:bf:03:35:50:
                    ce:11:4e:05:1b:d9:1a:d2:ca:1c:c3:d3:b6:94:25:
                    45:8f:6d:46:12:b3:ab:45:f3:c4:9b:de:c3:d8:57:
                    1e:01:7c:fd:30:5e:77:94:1b:4b:84:18:ec:61:2a:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:60:6A:1B:2E:04:7A:3F:65:AC:2F:02:72:F7:68:67:90:00:9D
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DM5gahsuBHo_ZawvAnL3aGeQAJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.112.0/23
                  195.133.68.0/22
                  212.192.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:49:f2:ff:af:82:4e:bf:2b:1f:7a:16:e6:3c:a5:a8:6b:
         22:29:f2:34:2a:76:40:53:89:8b:4e:1e:00:51:eb:47:cc:0b:
         29:87:32:2f:66:dc:53:6f:5f:54:92:58:fe:a4:d2:fe:db:04:
         eb:1f:b1:6b:5d:48:df:31:ae:3d:5f:5d:5e:fd:da:c9:06:ef:
         e0:ae:fd:ed:5b:cb:ad:ef:59:eb:a7:a8:46:3f:6b:d1:42:58:
         fa:0e:e9:84:1b:83:da:05:84:7c:96:b4:82:5a:b3:63:da:82:
         08:f7:c6:5e:5c:8d:98:e7:36:2b:6e:94:66:b7:0c:f8:f4:2e:
         61:7f:ab:f9:cc:13:19:59:83:63:3a:0f:23:c4:1a:25:0f:d1:
         18:8b:8d:1f:ad:ad:0f:a8:45:a5:19:fd:7a:c6:b0:ea:6a:47:
         54:34:f5:ce:3e:cb:02:6e:c2:2c:dc:6b:c3:0d:ae:52:fc:50:
         69:1c:f5:99:1b:33:f4:24:e0:88:ea:74:e9:d0:0d:3f:3a:4d:
         32:9c:77:d2:91:92:79:b6:a0:a1:4c:2f:99:92:37:fc:ba:bd:
         1c:aa:85:ac:99:7b:40:56:3d:db:45:51:12:e2:26:a2:b9:82:
         7d:b0:ff:a7:eb:ea:bd:60:54:b5:e0:30:a7:0d:68:44:58:df:
         bf:14:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 02:01:40 2024 by rpki-client on console-ams.rpki-client.org