Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L9pE8jo65hdDCd4F98583kwXzuE.roa
File:                     L9pE8jo65hdDCd4F98583kwXzuE.roa (raw, json)
Hash identifier:          Q+TKAP79qsbP4mlBtQ/LLF/n9JBce70IZ8yru6luKf0=
Subject key identifier:   2F:DA:44:F2:3A:3A:E6:17:43:09:DE:05:F7:CE:7C:DE:4C:17:CE:E1
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0192D347E4E7C061139075CA015FE6EF0455
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L9pE8jo65hdDCd4F98583kwXzuE.roa
Signing time:             Mon 28 Oct 2024 13:19:17 +0000
ROA not before:           Mon 28 Oct 2024 13:19:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47585
IP address blocks:        5.175.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Dec 2024 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d3:47:e4:e7:c0:61:13:90:75:ca:01:5f:e6:ef:04:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Oct 28 13:19:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2fda44f23a3ae6174309de05f7ce7cde4c17cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:2e:d2:01:92:26:26:53:07:e0:e3:ca:a2:
                    bc:5f:fb:0f:28:63:ba:7b:bb:46:5f:1c:e1:db:23:
                    97:4d:cf:49:f5:1a:55:92:b4:86:a7:49:60:a6:23:
                    56:83:3e:5d:6d:86:32:cb:d2:41:7a:98:a5:b3:b3:
                    89:40:93:f8:00:b3:52:fb:a3:fe:87:f1:6e:6c:a2:
                    f3:f9:3d:aa:2f:a6:34:98:17:87:fb:13:a7:62:81:
                    a9:c7:a1:7f:56:06:8e:cf:93:81:49:8b:70:21:f2:
                    6a:72:62:fc:f7:76:6d:dd:3b:09:76:47:36:ae:82:
                    0c:a7:d6:47:73:03:37:03:c1:65:79:46:1f:61:71:
                    85:ad:e5:37:37:50:ce:a8:67:03:d8:db:dc:d9:eb:
                    c8:3c:d9:e4:2a:8a:66:e7:69:c9:7d:13:b7:60:97:
                    5c:06:67:b8:39:13:0c:75:ad:ac:03:80:60:5d:0f:
                    d2:75:e2:66:ab:eb:37:8f:a7:24:1c:5a:50:a6:67:
                    5a:36:5d:f7:b6:48:89:85:54:08:b8:21:68:ce:90:
                    8e:6f:e4:e0:3e:46:b8:e0:cd:f3:26:48:b1:c8:57:
                    a6:5b:14:a8:ec:77:0f:6a:46:f6:95:a3:0b:a3:8f:
                    34:15:d3:27:a5:a8:a6:6e:5c:23:b9:c7:fe:a5:ab:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:44:F2:3A:3A:E6:17:43:09:DE:05:F7:CE:7C:DE:4C:17:CE:E1
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L9pE8jo65hdDCd4F98583kwXzuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.175.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:5a:ea:ec:fb:2e:78:e1:9b:d5:60:96:74:dd:60:f8:0a:
         be:2d:a2:15:02:9c:84:82:7b:e9:1e:e9:83:06:bf:fe:7a:32:
         39:ca:f3:4d:be:2b:2d:25:69:bc:cb:b5:ad:92:7c:15:95:e9:
         47:cb:e0:ef:e5:b8:a7:b2:25:9d:6e:42:e3:8e:bd:15:76:44:
         0a:73:89:4c:be:70:06:90:0d:64:fe:5e:54:97:67:cf:fe:6b:
         13:0b:ce:a4:30:9f:43:c8:df:c1:ca:ac:63:a2:72:55:b6:de:
         3a:de:4d:95:eb:54:b7:00:ba:0d:a4:6a:06:6b:1c:b0:61:8b:
         c8:7c:a6:b6:bc:5c:d3:8f:7b:da:54:f0:72:3c:4d:5c:19:f9:
         c6:ac:81:18:01:69:22:64:55:f7:28:c9:6a:9f:2c:65:bd:21:
         65:db:b6:96:62:c6:20:1e:46:37:1e:d1:54:24:3c:c2:fd:3b:
         68:85:d9:41:ea:16:b0:52:78:44:16:ac:b7:a0:0d:53:f2:57:
         16:7b:9b:6d:d2:96:61:a4:54:1a:0c:8d:31:e9:79:8d:53:27:
         d6:5b:1a:77:27:3b:06:e3:8f:c4:e5:5b:86:36:5c:99:02:89:
         60:df:86:ac:e9:1f:fd:41:70:3b:70:3c:6f:b0:58:af:a0:cf:
         c2:98:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 22:42:54 2024 by rpki-client on console-ams.rpki-client.org