Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa
File:                     aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa (raw, json)
Hash identifier:          1r2NqSkaTKAULV+uJ4jzjyU4jbhvSFPcU0nEVlGifdQ=
Subject key identifier:   69:61:FE:B8:2E:19:49:64:6E:E6:BB:B8:6D:CD:96:52:06:7E:5E:78
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       018CC5DCE6A3A247CAACFB121D262DE14279
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa
Signing time:             Mon 01 Jan 2024 16:30:37 +0000
ROA not before:           Mon 01 Jan 2024 16:30:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     52157
IP address blocks:        5.100.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:e6:a3:a2:47:ca:ac:fb:12:1d:26:2d:e1:42:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Jan  1 16:30:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6961feb82e1949646ee6bbb86dcd9652067e5e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:f8:51:1f:98:52:72:20:3b:3b:94:6e:ce:
                    e3:10:73:06:3b:8d:75:ac:d8:97:40:bf:b4:f8:34:
                    23:6e:64:b1:b9:94:83:13:38:01:a9:8c:e8:e9:33:
                    19:67:4f:c7:9b:93:42:9b:0b:09:76:1a:19:31:a3:
                    b3:cb:fa:f0:86:5a:ed:11:60:9f:a5:56:b0:75:e1:
                    54:b4:15:6d:9f:99:2c:d7:c3:62:18:02:9b:6e:96:
                    27:76:66:91:44:67:3a:ab:7e:15:0f:d5:36:0a:d5:
                    9a:14:36:f0:42:b1:ef:13:91:c4:5b:04:7d:d0:ff:
                    3f:1c:90:b2:03:5e:e0:96:61:09:97:d6:73:41:d6:
                    c9:28:ba:4b:b4:c0:91:e3:f8:1f:68:20:df:9c:03:
                    75:99:e2:86:73:42:57:ba:b9:09:04:94:4b:e5:2c:
                    aa:ef:2b:42:24:68:35:eb:a0:00:c6:36:fe:e6:73:
                    5f:42:80:87:f7:ff:96:d0:70:dd:0a:d2:16:da:36:
                    bb:d2:ba:30:33:f1:8a:b3:ba:60:91:33:f0:ea:c5:
                    61:9a:d1:3a:b9:b7:67:87:26:a6:67:a0:42:c2:4f:
                    94:14:bc:8e:ac:cb:d5:a5:16:9a:90:04:5e:22:88:
                    59:05:9b:a4:b3:50:a9:4c:53:0f:f4:46:5b:9b:71:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:61:FE:B8:2E:19:49:64:6E:E6:BB:B8:6D:CD:96:52:06:7E:5E:78
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:f6:b5:09:ee:04:e2:4a:da:dd:af:a2:57:04:a9:ee:dd:
         4b:41:12:e9:f3:13:32:44:21:e1:3b:e2:66:d6:f9:da:a7:c2:
         c5:c2:6b:78:eb:5e:ad:2b:9e:79:3c:63:6e:ac:43:44:7e:58:
         73:47:11:1d:ae:0b:6a:17:c9:77:0d:0b:f9:01:8c:f8:52:c4:
         ac:c2:63:a1:2e:81:d4:1f:1a:81:ae:78:2a:96:6f:2f:e1:cb:
         96:66:3c:66:ce:89:81:ea:68:02:a4:99:f0:eb:f3:c8:8d:fd:
         19:55:96:ea:15:c5:87:ca:5f:d1:d4:8c:87:32:f7:dd:16:ac:
         9f:9d:fb:3c:d0:a3:d6:a5:49:7a:1d:15:c0:d7:05:cf:93:32:
         0a:71:34:54:c0:ff:93:2a:c3:98:cb:f2:df:bc:a9:b1:19:41:
         d7:62:81:14:6e:6a:81:95:35:de:ff:12:27:66:0c:51:fc:bd:
         af:e0:bf:5d:4d:ed:66:01:8c:8c:8a:53:2c:02:e9:1e:87:a6:
         94:6b:2e:01:cf:fd:db:17:68:4f:50:85:ed:c7:31:4f:84:d8:
         74:6f:a9:58:15:ed:79:df:98:d6:40:a1:45:19:1b:b2:94:ca:
         9f:ac:7d:d1:b7:45:d6:19:68:52:24:1c:76:28:dc:e0:a7:61:
         28:0a:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:36:31 2024 by rpki-client on console-fra.rpki-client.org