Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NIMaklzWbwQdavDJi7mOmL43G5Q.roa
File:                     NIMaklzWbwQdavDJi7mOmL43G5Q.roa (raw, json)
Hash identifier:          UumM6O1Er5oeqrW16Givch4xkg5a+jgjpaf1rxvhrM4=
Subject key identifier:   34:83:1A:92:5C:D6:6F:04:1D:6A:F0:C9:8B:B9:8E:98:BE:37:1B:94
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018EFC1D6748495DE02ABFB424A6541DA84F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NIMaklzWbwQdavDJi7mOmL43G5Q.roa
Signing time:             Sat 20 Apr 2024 15:26:09 +0000
ROA not before:           Sat 20 Apr 2024 15:26:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        192.124.172.0/24 maxlen: 24
                          193.124.7.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          194.58.56.0/23 maxlen: 23
                          194.87.141.0/24 maxlen: 24
                          194.87.169.0/24 maxlen: 24
                          194.87.245.0/24 maxlen: 24
                          195.133.25.0/24 maxlen: 24
                          195.133.76.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          212.192.208.0/24 maxlen: 24
                          212.193.4.0/24 maxlen: 24
                          2a01:57c0::/29 maxlen: 29
                          2a0c:ff40::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fc:1d:67:48:49:5d:e0:2a:bf:b4:24:a6:54:1d:a8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr 20 15:26:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34831a925cd66f041d6af0c98bb98e98be371b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:ff:23:7f:c8:ed:e9:5e:55:d3:9b:62:79:
                    5f:63:25:a8:76:30:6e:f8:fe:a2:f0:36:dc:50:b8:
                    07:10:6e:50:c0:8d:75:bf:cc:60:37:e0:f1:f4:dd:
                    50:6a:98:dd:a0:30:5b:af:c3:a9:39:f8:49:96:fe:
                    01:1d:b5:a1:93:84:11:9f:5a:95:29:f9:7e:38:87:
                    f5:a4:30:ec:47:6f:fd:50:ea:f0:08:b6:66:7d:27:
                    19:28:34:a9:76:18:88:3e:90:09:7e:51:97:88:6e:
                    92:e8:c1:5d:38:96:87:bd:28:a3:a3:e3:2c:18:f5:
                    1e:35:61:0c:1d:04:b6:d8:df:6e:45:23:02:96:34:
                    9e:cd:14:ad:ce:7e:79:4e:28:bb:a8:01:c6:6f:bb:
                    c6:d6:94:4a:03:83:0d:e5:0f:8f:cd:29:94:59:f2:
                    b2:60:92:f1:89:f3:4e:29:b2:99:49:3c:ad:b0:b2:
                    d8:7a:40:a8:79:e7:b9:d7:c3:9b:17:13:df:90:ef:
                    23:7b:04:81:2e:70:1a:dc:14:3d:c2:44:00:f5:2b:
                    0b:50:ec:1a:7f:bd:73:83:fe:f3:65:00:2c:99:51:
                    2e:0f:8d:be:cc:c5:05:08:56:ee:2f:6f:6f:e4:62:
                    4d:01:96:2e:09:a4:c0:af:bb:18:22:0a:41:d6:75:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:83:1A:92:5C:D6:6F:04:1D:6A:F0:C9:8B:B9:8E:98:BE:37:1B:94
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NIMaklzWbwQdavDJi7mOmL43G5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.172.0/24
                  193.124.7.0/24
                  193.124.90.0/24
                  194.58.56.0/23
                  194.87.141.0/24
                  194.87.169.0/24
                  194.87.245.0/24
                  195.133.25.0/24
                  195.133.76.0/24
                  212.192.1.0/24
                  212.192.208.0/24
                  212.193.4.0/24
                IPv6:
                  2a01:57c0::/29
                  2a0c:ff40::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:89:75:9c:66:2a:de:47:b9:6a:7a:7c:7a:71:69:14:9c:
         f6:08:a4:30:10:d2:af:51:af:d7:16:a0:54:d4:60:3b:47:d1:
         38:02:23:e3:a1:c1:cb:5d:53:fe:63:66:ad:5a:9b:03:2d:49:
         ee:58:d4:7c:be:4c:13:39:1a:5b:37:ec:ab:e3:d6:16:d8:98:
         96:22:c0:a1:a7:4e:a4:6c:91:2d:73:05:49:bb:65:0f:6b:22:
         58:9b:f3:0d:9c:f1:cf:03:88:20:8b:a0:7b:19:33:da:c7:ab:
         0d:3d:23:d7:77:e1:1f:2f:0e:d5:51:be:d2:22:85:95:1e:b1:
         e3:88:6e:a4:41:ef:24:63:a9:f1:1e:72:a1:ea:03:a9:a9:51:
         f1:c1:11:7f:40:b3:b3:2c:f1:ff:a8:b3:71:61:8f:59:90:bd:
         a7:f4:00:20:3a:d7:9c:1e:a1:fe:e6:de:4f:0b:c6:b8:59:97:
         72:70:35:fc:c0:fe:3a:d5:1e:5c:9e:b7:e3:c5:2c:fa:d8:1c:
         95:77:f8:d6:e9:a3:41:53:e6:f2:9b:3a:1c:de:3d:2f:e3:9c:
         3e:03:82:42:bc:27:e2:08:71:c4:6e:77:9e:b6:72:cc:96:27:
         0c:39:e3:3c:8c:e0:b3:79:5c:c7:e3:90:8b:44:2a:2a:c6:c3:
         b8:84:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:20:30 2024 by rpki-client on console-ams.rpki-client.org