Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa
File:                     iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa (raw, json)
Hash identifier:          1uNiy2Vx12JbXDHF/sVNfgmcosZgckuFMu9LMS07cKE=
Subject key identifier:   88:80:D3:35:30:E7:84:65:86:1E:41:82:7F:95:89:2E:76:57:B5:8A
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01917AB4EB311034C5CFCBE250D1E8CFB70F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa
Signing time:             Thu 22 Aug 2024 15:29:22 +0000
ROA not before:           Thu 22 Aug 2024 15:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48207
IP address blocks:        193.124.45.0/24 maxlen: 24
                          194.135.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 17:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:7a:b4:eb:31:10:34:c5:cf:cb:e2:50:d1:e8:cf:b7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Aug 22 15:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8880d33530e78465861e41827f95892e7657b58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:00:03:a3:22:b8:cb:41:bc:cb:d9:11:c0:
                    37:b8:67:94:38:ea:07:d2:45:06:6b:d0:93:b5:e2:
                    ff:e7:32:a1:fb:5d:98:01:7f:41:86:dc:b1:86:d7:
                    98:ed:1a:1d:a4:b7:cd:c5:c0:ec:54:5c:9a:23:13:
                    e2:fc:17:b4:24:fb:d2:3b:82:ad:d2:67:9f:ba:07:
                    2f:05:a9:a6:94:83:a9:93:b9:e1:a3:ce:84:85:ce:
                    5e:e6:7b:90:92:1c:86:d2:17:7e:56:99:0b:28:60:
                    b2:ab:6a:5d:a5:f9:70:05:43:14:71:64:fb:07:43:
                    a1:74:4c:7b:29:fb:38:49:49:48:fa:f8:19:13:1f:
                    c3:11:b6:b3:4e:c5:5d:98:9b:7f:4e:39:9f:9f:dd:
                    df:8f:5e:b5:09:04:2d:45:f1:f9:fe:0f:56:16:97:
                    f3:7e:0e:78:34:a5:4c:a2:91:40:95:7a:40:6d:d8:
                    5a:6c:ff:19:aa:0b:a2:96:f7:a4:e5:6e:44:58:55:
                    0b:71:83:60:56:6f:c6:65:75:35:c2:ec:13:a1:d5:
                    24:1b:e0:de:76:38:11:fc:1d:69:64:3b:ef:90:a6:
                    08:53:9a:a6:98:cb:74:a1:93:0f:cc:b4:69:62:24:
                    db:ca:14:73:9e:f9:d9:d1:3b:fc:75:68:fe:e9:54:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:D3:35:30:E7:84:65:86:1E:41:82:7F:95:89:2E:76:57:B5:8A
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.45.0/24
                  194.135.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:c7:9f:30:b9:80:0f:bd:05:ca:9b:01:b0:82:44:f1:6e:
         60:5a:f5:fb:a4:7b:4c:c7:58:ca:4a:a2:49:11:bf:30:3b:4f:
         1b:aa:09:94:c8:6b:01:bd:07:37:a6:ed:0d:46:5e:b4:d2:a5:
         56:ea:4f:88:ad:f6:5c:bc:fe:4c:dc:04:ca:0d:46:24:2d:6e:
         ef:52:28:a2:ad:97:5a:50:ae:86:60:5b:b3:30:de:d2:92:70:
         29:ee:c5:c1:f8:2e:87:72:05:40:7a:4e:f1:43:9a:e8:83:f0:
         14:b7:dd:74:73:11:42:fa:c1:62:78:c8:86:5b:16:1d:db:67:
         bd:ea:97:62:71:f2:9a:48:fa:1f:04:34:9d:2e:11:97:63:51:
         11:4a:d7:a7:fe:be:95:8d:ff:2c:90:f2:f4:1f:a7:a3:ef:dd:
         27:3a:0e:55:70:9a:d0:9b:77:49:7d:ee:ff:69:b2:42:34:d1:
         74:fd:81:0b:65:38:8b:62:a5:74:2f:0f:d7:65:dd:3a:d9:00:
         bf:75:79:65:03:f4:2d:9e:a6:a9:1c:ac:52:4e:f4:4a:53:3e:
         a1:eb:33:a8:8c:0a:0f:87:e1:9e:d1:35:6b:1b:01:7b:23:a7:
         e5:9b:b2:6a:33:ac:1e:16:99:d0:de:0e:35:71:e7:65:ae:49:
         0a:74:3f:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZF6tOsxEDTFz8viUNHoz7cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwODIyMTUyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODgwZDMzNTMwZTc4NDY1ODYxZTQxODI3Zjk1ODkyZTc2NTdiNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4AA6MiuMtBvMvZEcA3uGeUOOoH
0kUGa9CTteL/5zKh+12YAX9BhtyxhteY7RodpLfNxcDsVFyaIxPi/Be0JPvSO4Kt
0mefugcvBammlIOpk7nho86Ehc5e5nuQkhyG0hd+VpkLKGCyq2pdpflwBUMUcWT7
B0OhdEx7Kfs4SUlI+vgZEx/DEbazTsVdmJt/Tjmfn93fj161CQQtRfH5/g9WFpfz
fg54NKVMopFAlXpAbdhabP8Zqguilvek5W5EWFULcYNgVm/GZXU1wuwTodUkG+De
djgR/B1pZDvvkKYIU5qmmMt0oZMPzLRpYiTbyhRznvnZ0Tv8dWj+6VTNIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIiA0zUw54Rlhh5Bgn+ViS52V7WKMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaUlEVE5URG5oR1dHSGtHQ2Y1V0pMblpYdFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwXwtAwQA
wociMA0GCSqGSIb3DQEBCwUAA4IBAQCCysefMLmAD70FypsBsIJE8W5gWvX7pHtM
x1jKSqJJEb8wO08bqgmUyGsBvQc3pu0NRl600qVW6k+IrfZcvP5M3ATKDUYkLW7v
UiiirZdaUK6GYFuzMN7SknAp7sXB+C6HcgVAek7xQ5rog/AUt910cxFC+sFieMiG
WxYd22e96pdicfKaSPofBDSdLhGXY1ERSten/r6Vjf8skPL0H6ej790nOg5VcJrQ
m3dJfe7/abJCNNF0/YELZTiLYqV0Lw/XZd062QC/dXllA/QtnqapHKxSTvRKUz6h
6zOojAoPh+Ge0TVrGwF7I6flm7JqM6weFpnQ3g41cedlrkkKdD+m
-----END CERTIFICATE-----
Generated at Tue Oct 15 02:01:42 2024 by rpki-client on console-ams.rpki-client.org