Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/UgGHhXX4ThtVDMUuOZYsTAycgmo.roa
File:                     UgGHhXX4ThtVDMUuOZYsTAycgmo.roa (raw, json)
Hash identifier:          nSFBT+z+wPZZJbAPgVT3lhCaONF3iz3zCbQxg/rmCJM=
Subject key identifier:   52:01:87:85:75:F8:4E:1B:55:0C:C5:2E:39:96:2C:4C:0C:9C:82:6A
Certificate issuer:       /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial:       018CC8017823F1D62BA6C5A0A1D894BC543A
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/UgGHhXX4ThtVDMUuOZYsTAycgmo.roa
Signing time:             Tue 02 Jan 2024 02:29:48 +0000
ROA not before:           Tue 02 Jan 2024 02:29:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56841
IP address blocks:        2001:67c:acc::/48 maxlen: 48
                          2001:67c:2788::/48 maxlen: 48
                          2001:67c:ad0::/48 maxlen: 48
                          2001:67c:ac8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:78:23:f1:d6:2b:a6:c5:a0:a1:d8:94:bc:54:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
        Validity
            Not Before: Jan  2 02:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5201878575f84e1b550cc52e39962c4c0c9c826a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:9d:b7:86:e7:dd:93:52:66:f3:77:8d:b2:
                    a7:ce:4d:62:24:70:fd:3d:0f:ec:62:8c:27:b0:9c:
                    a3:ef:6b:68:88:de:1a:46:2d:43:06:59:18:78:83:
                    61:41:ae:e8:48:73:61:29:b9:b0:c3:26:56:92:4a:
                    5d:e0:c0:a2:c3:3b:90:98:38:fd:c8:bc:8a:39:24:
                    bd:81:35:a9:7c:32:e7:2a:48:c5:55:03:7c:2e:e3:
                    22:ee:5a:58:f3:80:fe:a9:68:00:7a:e8:af:22:ea:
                    c2:28:52:ad:7e:6c:ce:86:00:19:a3:be:c3:d6:05:
                    f8:75:5e:9c:48:a3:0d:e6:08:d4:dc:2b:0e:f6:c0:
                    27:95:81:d3:3a:c7:d7:c1:c2:29:9f:7d:a7:f2:38:
                    88:cc:ff:c6:53:32:bd:e1:75:06:f2:aa:10:62:c8:
                    f1:a7:9e:ea:46:b2:df:c7:e9:3a:f4:2d:f5:c3:f5:
                    5e:fd:08:93:b2:2d:ba:c3:c7:0c:78:12:96:a5:ed:
                    88:e1:e8:d8:52:85:a1:db:92:5d:32:14:cc:e8:4a:
                    bf:12:79:2d:24:ab:50:31:78:26:6a:fc:f5:ab:36:
                    fe:ba:53:96:9b:dd:6a:a5:bc:7b:34:8b:d5:38:e4:
                    de:d8:01:47:99:37:bb:db:9f:fa:fe:c0:0d:5a:3b:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:87:85:75:F8:4E:1B:55:0C:C5:2E:39:96:2C:4C:0C:9C:82:6A
            X509v3 Authority Key Identifier:
                keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/UgGHhXX4ThtVDMUuOZYsTAycgmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:ac8::/48
                  2001:67c:acc::/48
                  2001:67c:ad0::/48
                  2001:67c:2788::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:31:8c:14:ff:c6:1f:b1:9f:5a:bc:d3:da:63:4b:b1:30:03:
         53:c8:2f:4c:b1:4e:b2:e3:70:a4:7f:76:5d:cb:ee:9f:4e:be:
         2b:cf:29:93:39:61:03:08:3f:96:27:07:37:4e:42:02:5f:f1:
         0d:df:31:96:a0:41:6d:48:10:c2:5a:02:a8:cc:cb:fb:68:35:
         97:b3:76:f7:bb:33:98:fe:25:a2:0a:d5:8f:83:d5:58:f0:b5:
         40:16:14:58:e0:40:8b:be:21:90:93:2e:32:9b:95:6d:bc:6c:
         43:79:f3:e1:7d:36:94:c4:8d:69:ec:04:28:03:8f:3d:a4:01:
         e6:76:47:4a:d6:68:eb:10:4e:c1:c9:00:6f:b9:9d:2e:bd:bc:
         3b:82:84:c5:b3:a1:33:64:42:96:55:ea:91:a4:b6:14:f3:4d:
         ac:72:3b:b9:c4:98:3d:9e:d5:05:44:53:60:08:6b:17:cf:6e:
         da:a5:0d:8c:61:a2:0e:87:e6:97:d2:e2:ac:fb:17:50:5f:b7:
         2e:89:95:5b:3d:02:4c:ff:ab:30:01:d8:c3:57:7a:cf:b0:eb:
         74:5b:95:08:8f:25:01:69:db:e0:f9:9f:9e:7f:80:86:87:25:
         b1:62:da:e7:52:0a:1c:a2:7a:d5:50:de:39:77:3d:e9:5b:1e:
         2e:1b:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:24:25 2024 by rpki-client on console-ams.rpki-client.org