Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6wE8yN_LQLoinPyORqwUaWHPbCE.roa
File:                     6wE8yN_LQLoinPyORqwUaWHPbCE.roa (raw, json)
Hash identifier:          z3Vyg5Q1YVeTUUUios5HnhSFDUjYU8kIjujya1qmjMs=
Subject key identifier:   EB:01:3C:C8:DF:CB:40:BA:22:9C:FC:8E:46:AC:14:69:61:CF:6C:21
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018CC500BB5672082285A19490A0DACE8928
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6wE8yN_LQLoinPyORqwUaWHPbCE.roa
Signing time:             Mon 01 Jan 2024 12:30:08 +0000
ROA not before:           Mon 01 Jan 2024 12:30:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        193.189.82.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 07:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:bb:56:72:08:22:85:a1:94:90:a0:da:ce:89:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  1 12:30:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb013cc8dfcb40ba229cfc8e46ac146961cf6c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:22:3c:62:61:c6:f3:d9:dc:46:ea:47:94:
                    7c:f1:eb:3f:0b:74:22:5a:27:eb:f5:0d:42:ab:d5:
                    8d:6e:b7:c5:72:c9:44:a4:50:44:78:1b:2c:83:e8:
                    34:94:19:2c:d5:b7:61:15:5a:eb:a0:cd:00:18:1b:
                    70:23:b7:89:fd:7e:e0:db:ef:2f:3f:26:00:90:97:
                    46:d5:8f:16:a2:d0:54:8e:a4:f1:9b:62:51:d6:c6:
                    52:8b:8f:17:e6:c3:73:ba:05:7b:e2:77:b9:57:34:
                    b9:fe:64:f7:77:2d:4b:b3:44:52:ce:bd:1c:f6:26:
                    a4:1e:45:41:35:c3:32:18:00:e4:49:27:ae:95:0d:
                    51:c7:7a:43:47:9e:db:04:71:cf:38:c2:36:c0:b9:
                    03:48:56:38:57:3f:82:05:9a:cf:65:33:22:11:b5:
                    66:b9:25:0b:9b:17:c5:cb:3f:a0:9b:82:20:2f:35:
                    b6:26:b2:70:37:0d:ff:0d:f7:56:d3:42:a6:71:54:
                    86:63:db:fe:70:fa:6e:ea:02:c3:69:c0:98:dd:b4:
                    90:09:70:8e:1b:a2:3d:10:d4:82:0a:51:f8:29:a8:
                    0f:78:0e:b9:f7:ff:c5:25:7b:28:5c:bc:5b:1b:89:
                    13:f6:02:e4:57:c9:84:2e:06:65:1f:67:2a:39:f8:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:3C:C8:DF:CB:40:BA:22:9C:FC:8E:46:AC:14:69:61:CF:6C:21
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6wE8yN_LQLoinPyORqwUaWHPbCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.189.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:7d:bd:11:cf:4a:28:55:95:cf:f7:58:73:f8:4f:3c:76:
         a5:5d:85:24:b8:e6:c4:1d:65:90:19:a9:57:f5:7f:a2:ff:82:
         f1:1f:62:ee:8c:ab:0a:0c:da:4b:03:29:3e:42:f0:f9:7c:27:
         2d:ad:f1:98:c3:07:e3:a6:65:a4:d2:69:7d:7d:eb:62:d7:56:
         0f:9c:c4:a0:8a:51:0b:1f:3b:dc:be:15:c0:bb:fc:f8:82:99:
         47:36:1b:0f:9a:1c:99:68:6c:c3:18:de:a6:fb:47:15:97:21:
         c1:4b:0c:1a:3c:21:ce:53:6a:bc:d4:67:15:63:a3:84:1d:54:
         46:57:ec:70:41:d7:ee:e1:55:c5:4c:70:af:3a:e3:a4:63:82:
         c6:63:7d:7a:ed:02:1e:e8:25:ba:c6:4f:45:e4:19:c8:11:a4:
         41:95:4d:70:7a:bd:af:c3:a8:c4:08:a0:5d:f7:fb:e0:96:48:
         86:05:ec:8b:6c:b9:05:71:e5:ed:db:00:d4:39:e3:0c:c1:6e:
         61:6d:d1:a9:54:84:a7:be:7f:87:31:8e:3c:f1:91:c5:90:c6:
         f3:e1:b9:aa:ce:4f:46:0f:3b:74:3b:71:b9:4a:99:77:40:83:
         e4:cf:bd:6f:a8:15:9c:08:ad:75:8a:29:ad:84:36:f8:70:fd:
         4c:79:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:22:32 2024 by rpki-client on console-ams.rpki-client.org