Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/Jnjr-WzlY4VbPyx9EzY7PaKn9Mw.roa
File:                     Jnjr-WzlY4VbPyx9EzY7PaKn9Mw.roa (raw, json)
Hash identifier:          kWB1Sn2FiA4WS3hkw+A7FB2OFWpET8nrsqZGrCbilvc=
Subject key identifier:   26:78:EB:F9:6C:E5:63:85:5B:3F:2C:7D:13:36:3B:3D:A2:A7:F4:CC
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       018E611143CDE072E54086D8CA486FED7CE3
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/Jnjr-WzlY4VbPyx9EzY7PaKn9Mw.roa
Signing time:             Thu 21 Mar 2024 12:51:45 +0000
ROA not before:           Thu 21 Mar 2024 12:51:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        83.136.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:61:11:43:cd:e0:72:e5:40:86:d8:ca:48:6f:ed:7c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Mar 21 12:51:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2678ebf96ce563855b3f2c7d13363b3da2a7f4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:60:5f:f3:d2:8f:41:f8:b7:2b:73:59:a4:
                    71:12:95:78:ea:23:5f:1f:7f:1a:e8:bc:2d:97:ff:
                    3d:ae:01:3e:3f:70:fd:2a:13:5a:21:ff:b4:0f:0f:
                    87:72:91:59:69:76:f1:b5:1d:4f:1e:b0:b3:80:b1:
                    10:39:11:77:40:d5:c3:b2:44:6d:5b:01:bc:e9:f6:
                    93:3e:8c:58:06:83:42:3c:95:de:86:2b:f9:f4:8f:
                    75:ab:96:8f:7f:61:a8:0b:8e:f9:56:f8:a6:3d:88:
                    75:4e:c6:c7:c2:d0:9e:e5:35:48:34:5a:54:22:96:
                    52:80:1c:57:fd:7c:18:6d:65:82:61:34:7e:16:8e:
                    10:59:cb:a1:f8:63:59:0f:c8:8f:f8:e0:23:2d:ed:
                    8f:7b:bd:95:0e:b6:53:05:75:6f:82:64:7f:8c:5c:
                    70:f1:74:33:1e:b6:1a:b3:30:54:62:b9:1a:8b:69:
                    ee:a8:3e:03:31:f4:02:62:6f:b2:45:a9:76:93:ad:
                    51:7b:23:f6:0e:09:c8:87:84:06:6c:db:82:1d:a4:
                    e4:a1:48:20:40:0d:e7:d9:71:73:cb:f1:e4:80:ea:
                    05:ef:ec:a7:40:e0:5d:06:5e:6e:c7:88:0d:ff:59:
                    7d:15:52:f8:cf:06:63:31:33:b5:50:9b:4f:92:0a:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:EB:F9:6C:E5:63:85:5B:3F:2C:7D:13:36:3B:3D:A2:A7:F4:CC
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/Jnjr-WzlY4VbPyx9EzY7PaKn9Mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:46:3c:ea:03:9d:ec:a4:91:91:c2:4a:47:2e:c7:16:86:
         a7:4a:fb:09:1a:20:be:d9:18:0b:46:33:3f:bd:de:d3:da:ae:
         dd:57:b7:f8:2c:8b:2d:c0:bf:d8:40:43:28:4a:fc:a4:8e:bb:
         41:aa:b7:a8:41:22:4b:d8:9c:8d:1a:fe:fb:5a:b0:f7:53:f1:
         37:ca:86:cf:bb:56:be:b2:d0:01:ba:11:49:93:36:7b:f2:d2:
         4e:12:10:59:ca:eb:55:2c:37:5b:38:6a:57:99:31:63:48:0a:
         ef:67:94:ce:b1:6f:d4:b0:b3:83:ba:ea:23:07:2b:08:72:6d:
         d7:5b:16:e1:2c:be:3d:19:eb:d0:9f:1c:cf:96:db:b4:7a:bd:
         b5:a0:db:0b:66:9f:c0:01:e0:c7:c3:1d:59:01:19:53:a8:37:
         2c:85:95:81:2f:56:9d:e7:c4:a0:c6:88:10:dc:60:b2:07:bb:
         d3:e4:e5:5a:3c:d2:ac:1c:74:50:f9:d6:df:b7:9e:ba:ce:ac:
         47:45:5f:35:f5:cf:ec:f8:18:e3:8a:db:ee:81:2d:e7:36:9c:
         50:02:a7:8f:7b:68:b3:fd:a2:34:9c:ff:1f:59:1e:f0:b1:d4:
         75:77:08:3f:d6:71:37:e0:b4:97:b3:bc:55:95:57:5f:89:ae:
         b9:32:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:37 2024 by rpki-client on console-ams.rpki-client.org