Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/BWduBefpT66bo_4Z-mEYg1_6a18.roa
File:                     BWduBefpT66bo_4Z-mEYg1_6a18.roa (raw, json)
Hash identifier:          Y0720Pa26aEsMXX1+//Jz6scoW8vciv8TbhdSlbwOL4=
Subject key identifier:   05:67:6E:05:E7:E9:4F:AE:9B:A3:FE:19:FA:61:18:83:5F:FA:6B:5F
Certificate issuer:       /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial:       018CC49353331C6F9B9B2AF2FF449D7BAA25
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/BWduBefpT66bo_4Z-mEYg1_6a18.roa
Signing time:             Mon 01 Jan 2024 10:30:38 +0000
ROA not before:           Mon 01 Jan 2024 10:30:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15946
IP address blocks:        193.41.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:53:33:1c:6f:9b:9b:2a:f2:ff:44:9d:7b:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
        Validity
            Not Before: Jan  1 10:30:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=05676e05e7e94fae9ba3fe19fa6118835ffa6b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:05:73:9e:84:97:dd:72:8a:2b:ff:84:45:
                    ed:3e:19:04:6f:e6:28:66:f5:01:a5:85:c6:e0:e2:
                    65:1c:8b:22:e5:39:b5:c9:cf:26:5f:80:7f:87:38:
                    55:02:1a:e9:e0:22:e4:e3:b4:d7:b1:ab:c6:0b:96:
                    78:67:7d:e4:90:db:53:09:6a:65:d8:f1:65:b9:d0:
                    c6:02:42:de:e0:91:49:ef:85:fc:14:68:04:07:5f:
                    66:ec:be:27:fb:ac:fb:9f:4d:5f:86:17:8f:21:c8:
                    8a:1a:e4:c5:ba:c7:86:38:11:af:b6:7d:eb:84:2a:
                    ac:b4:59:16:2a:f6:3c:3d:89:76:ff:95:58:d4:a1:
                    57:2f:f5:b8:db:33:b8:ba:db:c3:31:9f:db:44:4b:
                    92:d5:a3:19:28:45:44:dc:bd:b4:de:ca:26:e9:79:
                    97:72:9a:7a:1e:93:ef:05:a8:15:6b:dd:3d:18:b0:
                    ec:30:4d:ca:db:60:91:e4:ee:76:e1:6b:a6:35:ba:
                    fc:72:f6:a0:24:84:3e:d7:3f:68:a1:4e:2c:87:46:
                    f4:fe:6c:d5:75:0e:1b:2f:79:aa:fc:48:37:e0:da:
                    fa:a8:1b:fc:a4:6e:cb:dd:da:d0:58:42:c3:2b:45:
                    29:c2:06:d9:11:4e:10:68:5f:f0:fd:12:42:de:b7:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:6E:05:E7:E9:4F:AE:9B:A3:FE:19:FA:61:18:83:5F:FA:6B:5F
            X509v3 Authority Key Identifier:
                keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/BWduBefpT66bo_4Z-mEYg1_6a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:fc:50:3f:f1:24:e4:0d:6e:cf:4c:30:3f:ad:9d:3a:eb:
         97:11:48:4d:78:75:66:97:be:41:5c:76:08:87:56:45:f8:95:
         d6:11:f1:5a:96:a4:a7:c0:2f:b8:37:a8:eb:b0:ff:fc:c3:c2:
         76:45:28:62:74:77:d8:a6:01:2f:a3:67:5c:81:7c:9b:fc:68:
         b4:75:f1:c2:da:dc:79:16:5c:ad:2a:41:fa:73:56:e5:ef:ef:
         7b:1b:df:51:75:16:fe:42:5b:37:1f:5d:26:d0:17:d0:e9:f4:
         6f:a0:92:bf:2b:08:fd:64:e3:8c:51:63:8f:19:3c:41:fc:3f:
         5b:87:1e:5f:d9:f8:0d:66:3a:72:3b:8c:6f:8e:b8:75:47:4a:
         2e:9b:27:72:e8:86:59:7b:0c:e3:08:fa:01:b4:7d:47:26:cc:
         a1:db:f2:f4:da:4e:2a:15:f8:ef:9a:48:df:65:11:89:9a:fa:
         bd:fb:19:62:89:28:17:13:45:6b:c2:ed:7e:0a:c3:24:14:9a:
         9c:6a:58:ae:9a:20:88:c7:9a:3b:a0:2f:50:07:6b:0d:c9:cb:
         59:7d:4e:4b:44:2d:da:ce:7c:08:71:2b:47:a0:b6:f5:88:0b:
         10:46:68:d1:b4:5c:ef:a2:85:b6:d9:c2:a4:6f:dc:29:9f:31:
         ec:d1:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:01:43 2024 by rpki-client on console-fra.rpki-client.org