Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWkD1i88NapsuNqn6sJdb8Bunzk.roa
File:                     WWkD1i88NapsuNqn6sJdb8Bunzk.roa (raw, json)
Hash identifier:          GrsuJAAjE1ppFv5UhTmkW2CBAi+h6Nb5i35HvBTCkdw=
Subject key identifier:   59:69:03:D6:2F:3C:35:AA:6C:B8:DA:A7:EA:C2:5D:6F:C0:6E:9F:39
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018CCA2A767E763C71AF67CAC9E0520197F0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWkD1i88NapsuNqn6sJdb8Bunzk.roa
Signing time:             Tue 02 Jan 2024 12:33:49 +0000
ROA not before:           Tue 02 Jan 2024 12:33:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47585
IP address blocks:        62.76.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:76:7e:76:3c:71:af:67:ca:c9:e0:52:01:97:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 12:33:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=596903d62f3c35aa6cb8daa7eac25d6fc06e9f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:a3:d4:25:d0:7d:6c:79:fc:20:ab:3d:5d:
                    ec:8e:3b:8c:ac:3b:04:80:de:2c:e9:72:12:87:7f:
                    73:d3:e3:fb:8f:fd:4f:97:96:4b:1c:a1:d8:8a:b0:
                    6b:72:db:93:bb:f1:be:d5:db:7f:89:87:ff:82:c9:
                    01:93:12:75:e7:1c:92:6c:db:d9:4e:3a:0d:3f:27:
                    21:e0:d5:11:ad:fe:80:46:73:f4:dc:b2:65:ff:5f:
                    42:ed:f7:df:e3:8d:55:fe:6a:a0:f3:fd:ef:9f:9e:
                    fe:e8:f9:9e:9b:d9:c1:80:ee:da:d9:07:55:c3:a6:
                    1c:bf:88:b9:8c:c9:27:ac:c8:19:40:50:fc:39:1f:
                    f1:32:28:ae:3c:81:d3:57:64:17:e2:25:c1:47:51:
                    d1:dd:42:1a:a6:17:7f:e7:ea:1f:82:53:f8:97:65:
                    ad:a9:c7:82:d4:e7:cb:5d:c2:8f:0b:91:84:f2:37:
                    e5:a2:3c:d3:e6:51:ac:ba:1c:a2:7e:65:48:8b:7c:
                    6c:56:3e:39:29:52:81:3e:23:41:29:8b:ac:fd:fa:
                    c8:4b:48:75:b5:6b:df:f8:a0:f8:f8:bd:d2:93:58:
                    f2:e5:fe:46:44:3c:b9:23:9e:5e:0a:56:4d:8b:f4:
                    ce:a7:8d:d2:bc:85:15:c3:ed:05:e3:59:bd:3a:0d:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:03:D6:2F:3C:35:AA:6C:B8:DA:A7:EA:C2:5D:6F:C0:6E:9F:39
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWkD1i88NapsuNqn6sJdb8Bunzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:21:38:97:fd:b4:ca:2b:fc:50:40:10:69:5c:3e:13:5a:77:
         8c:97:a1:6e:85:62:18:cb:c8:8f:5a:6a:22:5c:ed:ee:aa:cc:
         c4:00:10:88:9b:84:6b:bb:c5:36:3c:dc:18:92:bc:45:ab:07:
         82:7e:7d:59:50:d2:15:40:eb:0d:7c:f0:ae:e2:c3:e1:b8:7d:
         73:b5:4f:ce:6f:22:79:b9:cd:7d:45:05:e4:0a:be:1c:c7:45:
         9c:b3:cc:f5:88:87:06:20:87:c8:bf:35:17:61:8e:d1:b6:4e:
         82:17:c7:11:72:f6:a6:bd:53:32:a6:cd:16:52:e0:2a:c0:44:
         49:88:1b:a0:69:c8:5b:a5:dc:19:d1:a7:bf:c0:df:12:7b:c0:
         b0:53:9c:89:75:d4:e1:82:17:13:01:6f:2a:0b:a3:d3:f7:0a:
         01:39:f9:36:88:6a:c8:3d:60:61:7b:75:32:3c:65:35:c3:c3:
         71:4a:89:91:4a:d0:4b:6b:25:5c:7b:87:7f:fd:23:83:43:d6:
         ad:2c:d5:4c:61:d3:bb:33:9a:58:ff:51:b7:2e:15:12:25:a8:
         3b:ec:d7:35:1d:3a:52:28:26:45:60:6f:89:76:71:1b:81:3b:
         9c:5d:e8:e8:7c:d5:75:b1:4f:d0:55:1f:21:83:bd:b5:f3:3a:
         77:55:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 03:48:46 2024 by rpki-client on console-ams.rpki-client.org