Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/4y27jSbydZOcYcs6zuy-M2jdxRU.roa
File:                     4y27jSbydZOcYcs6zuy-M2jdxRU.roa (raw, json)
Hash identifier:          EDTyCKhN+ZJCdaTKIgno0hqpC5MxeZXVxA99qIMz4bU=
Subject key identifier:   E3:2D:BB:8D:26:F2:75:93:9C:61:CB:3A:CE:EC:BE:33:68:DD:C5:15
Certificate issuer:       /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial:       018CC42486A8D74466320F366C0FFC6C522B
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/4y27jSbydZOcYcs6zuy-M2jdxRU.roa
Signing time:             Mon 01 Jan 2024 08:29:37 +0000
ROA not before:           Mon 01 Jan 2024 08:29:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8937
IP address blocks:        193.24.16.0/24 maxlen: 24
                          193.24.17.0/24 maxlen: 24
                          193.24.16.0/21 maxlen: 21
                          193.24.18.0/24 maxlen: 24
                          193.24.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:86:a8:d7:44:66:32:0f:36:6c:0f:fc:6c:52:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
        Validity
            Not Before: Jan  1 08:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e32dbb8d26f275939c61cb3aceecbe3368ddc515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:0e:39:30:68:d4:7e:cd:9b:86:fe:ef:51:
                    85:34:52:71:fb:66:2b:6e:d7:5c:f8:e8:8a:cb:ad:
                    aa:19:9a:e2:15:92:b8:c2:91:7b:6c:b8:1c:84:70:
                    57:8e:f8:a7:0e:a2:55:14:4e:4c:da:c5:b7:ab:a5:
                    1b:c1:43:24:e9:e7:45:cb:c6:77:56:71:2d:ad:a3:
                    ed:84:fa:4e:43:05:e7:ed:56:2e:d9:e2:b4:8d:a2:
                    c5:0d:a3:8d:5e:50:7c:ce:2e:76:98:12:f4:26:5c:
                    d5:bd:91:9d:ba:9b:ff:c1:5b:b1:ec:e8:18:61:db:
                    62:6f:ed:61:11:ed:10:50:54:36:c8:36:f3:8c:a4:
                    20:2b:23:0b:d0:13:e3:ae:51:20:19:d6:09:ae:71:
                    83:38:7b:97:1e:a6:3c:e0:5f:25:fc:77:37:85:2e:
                    29:98:48:8c:da:70:73:36:18:8b:0f:b5:f3:4b:d6:
                    b5:da:b3:73:4c:9f:94:79:26:4d:09:7a:64:76:6a:
                    df:72:63:09:3f:8a:d1:e7:fc:56:e9:70:06:21:6e:
                    40:eb:86:1d:b5:32:8a:e7:d4:6f:23:af:b9:c3:14:
                    73:93:c7:96:b6:c6:eb:6b:b5:b7:1d:b7:5f:42:8e:
                    fc:94:00:eb:2e:b6:38:a6:db:4b:cf:eb:26:e4:0a:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:BB:8D:26:F2:75:93:9C:61:CB:3A:CE:EC:BE:33:68:DD:C5:15
            X509v3 Authority Key Identifier:
                keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/4y27jSbydZOcYcs6zuy-M2jdxRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:93:92:29:52:72:44:23:4b:22:63:bd:ae:e7:1f:9e:bd:34:
         4e:5c:c8:40:7f:96:74:09:5b:37:67:f9:5c:d2:14:46:10:74:
         a3:24:7f:e6:aa:8e:2b:9c:fe:29:d5:52:7d:d8:29:26:d5:9e:
         b9:a4:f6:d9:78:ea:78:09:f4:ae:0a:d4:8e:14:12:2a:0d:db:
         d6:1c:71:3d:40:46:5b:31:63:64:60:71:f7:79:be:65:49:ee:
         82:7f:b8:9e:35:7f:60:f4:22:b1:73:97:f9:eb:e1:d9:5b:30:
         20:1a:06:35:c9:62:cf:49:32:61:dc:c1:2e:a4:33:21:6c:03:
         71:79:96:66:34:97:03:86:7a:68:69:f3:33:5d:e3:35:1d:2f:
         f6:1b:2e:d7:d0:98:0f:2b:ee:a6:4d:18:3e:48:b8:eb:89:d7:
         87:3c:2e:4e:81:9c:33:77:9b:2c:19:59:9c:cf:80:71:65:a0:
         07:bf:1a:db:57:5e:1c:18:00:6f:8b:81:da:ec:81:07:37:e8:
         4e:90:24:93:d7:8a:c8:c6:e4:11:b0:50:cd:44:e4:d7:53:51:
         89:bd:e9:97:6f:d2:6d:db:c2:0c:4f:b5:79:92:02:11:b4:8f:
         bc:b4:d0:be:b4:c5:21:2c:89:e2:23:da:e8:77:6f:be:2d:3e:
         07:65:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:57:26 2024 by rpki-client on console-ams.rpki-client.org