Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iUMLmj6hG_R8J-yMSdy_xDCJ2IA.roa
File:                     iUMLmj6hG_R8J-yMSdy_xDCJ2IA.roa (raw, json)
Hash identifier:          qqMr0tQqmXPeASiTRsyS9v/BFkQBcoXOm8N61NI6rPc=
Subject key identifier:   89:43:0B:9A:3E:A1:1B:F4:7C:27:EC:8C:49:DC:BF:C4:30:89:D8:80
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       018CC649E4E66DA0FC5767B5C374E16D9539
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iUMLmj6hG_R8J-yMSdy_xDCJ2IA.roa
Signing time:             Mon 01 Jan 2024 18:29:40 +0000
ROA not before:           Mon 01 Jan 2024 18:29:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197050
IP address blocks:        151.251.56.0/22 maxlen: 22
                          85.118.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:e4:e6:6d:a0:fc:57:67:b5:c3:74:e1:6d:95:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 18:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=89430b9a3ea11bf47c27ec8c49dcbfc43089d880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:0c:d3:bf:c8:a9:fd:d3:87:20:e0:e9:49:
                    b3:40:83:c9:ad:59:1c:41:95:1a:7c:e4:d0:17:06:
                    62:21:9d:49:2c:c2:cd:0b:d1:03:ca:63:dd:80:2d:
                    d3:46:6c:85:f3:e8:2e:30:48:32:b1:46:6e:4f:df:
                    67:8c:69:fd:48:4d:0c:aa:68:b3:f0:40:92:e8:5e:
                    40:a1:e7:fd:cd:e9:12:3c:ec:d1:0a:4f:36:0d:c8:
                    70:46:5a:f8:4d:5e:20:28:03:b6:2c:97:a5:19:6c:
                    88:dd:9e:43:94:27:e2:e0:43:2a:1f:f3:13:a9:89:
                    68:d3:92:9e:45:3b:eb:4b:25:9d:e0:bd:5f:89:52:
                    22:44:54:18:9a:44:8c:1a:27:0f:1a:b1:7b:f1:ed:
                    ff:a3:c1:fa:85:c8:7a:26:84:02:e7:92:bb:0c:79:
                    c8:a7:df:97:cd:c0:6d:e6:0f:c7:81:dc:be:68:e0:
                    da:0f:6a:6a:3f:11:91:f2:e5:ec:4b:e0:5f:57:94:
                    72:58:db:00:41:ae:59:05:24:c4:17:ba:4a:d8:44:
                    39:5f:f1:5c:6d:6d:f1:93:d5:59:17:0a:eb:a6:c5:
                    d8:21:fe:28:ad:84:5b:b1:be:d8:f8:58:ca:55:f1:
                    55:2c:de:d7:4d:0b:a7:0a:ca:de:31:20:49:c4:30:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:0B:9A:3E:A1:1B:F4:7C:27:EC:8C:49:DC:BF:C4:30:89:D8:80
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iUMLmj6hG_R8J-yMSdy_xDCJ2IA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.118.91.0/24
                  151.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:6b:86:49:5a:c7:af:67:62:37:23:db:e3:69:2b:d7:c9:
         30:d0:17:94:a0:6f:9d:fc:03:aa:85:19:2e:da:be:e2:a4:00:
         22:f3:2a:75:51:fe:0b:58:6b:ef:9e:25:93:dc:52:9a:95:1c:
         36:9b:a3:38:75:37:05:2d:95:53:fb:5a:7c:66:0c:71:0e:d0:
         3e:fd:65:c5:bf:42:e6:93:e3:e0:13:77:ab:bd:83:02:11:40:
         be:81:01:e2:48:1a:37:64:b5:e1:34:44:53:cc:e3:f1:0a:4d:
         7e:e0:af:99:1a:73:75:e5:ec:77:dd:75:e8:3d:46:9d:63:64:
         30:ca:65:b7:c7:eb:c4:87:7f:c8:86:bd:02:88:75:38:36:a7:
         eb:f4:3c:7e:df:55:f6:9e:cd:51:b2:76:69:a1:da:bd:a5:bd:
         51:af:f1:55:53:1f:2b:af:21:1b:28:d7:fa:f1:53:66:24:72:
         90:82:3c:b6:53:03:37:99:9d:18:53:7c:cf:19:86:48:24:ff:
         4a:f9:fa:73:fb:93:3a:0d:6c:20:fc:ba:1b:c6:7d:44:1a:11:
         db:27:d9:fd:fa:de:07:00:0d:ac:8d:0b:21:85:ab:08:63:21:
         72:04:58:47:2f:18:8e:b3:69:a4:6d:91:a0:16:a4:95:47:c6:
         fa:da:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:05 2024 by rpki-client on console-fra.rpki-client.org