Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eqjfAI1toaK54YbA61BXDhpKFX8.roa
File:                     eqjfAI1toaK54YbA61BXDhpKFX8.roa (raw, json)
Hash identifier:          wxLDKQfeJYdIwsgoxUYv8VDGFWGskR8WkdSySZrRt7c=
Subject key identifier:   7A:A8:DF:00:8D:6D:A1:A2:B9:E1:86:C0:EB:50:57:0E:1A:4A:15:7F
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01909EA7C9E2FFE0E5B3DF246AE0C814BBE8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eqjfAI1toaK54YbA61BXDhpKFX8.roa
Signing time:             Wed 10 Jul 2024 21:58:34 +0000
ROA not before:           Wed 10 Jul 2024 21:58:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216084
IP address blocks:        5.83.155.0/24 maxlen: 24
                          77.90.61.0/24 maxlen: 24
                          77.90.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9e:a7:c9:e2:ff:e0:e5:b3:df:24:6a:e0:c8:14:bb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jul 10 21:58:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7aa8df008d6da1a2b9e186c0eb50570e1a4a157f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:8c:96:34:ff:bb:90:f1:35:18:eb:c1:92:
                    11:24:f1:2b:a3:f2:bc:71:1b:a1:8a:68:bb:76:1f:
                    e1:25:66:12:16:ff:4a:b1:23:bb:c3:3c:10:59:10:
                    87:04:98:0a:16:37:82:0f:d8:15:cc:9d:ba:82:e3:
                    6d:73:d5:fa:f8:6c:c1:a2:74:0b:73:77:99:30:97:
                    2f:ab:fa:28:b0:9b:bd:91:dd:80:de:cf:a6:54:08:
                    a4:e7:4c:9f:a4:bc:50:98:b8:88:74:f9:dc:db:9d:
                    4c:bc:9a:f0:d5:ef:10:92:c9:c3:8f:98:14:94:32:
                    cf:d6:6f:80:6d:ec:e3:2e:1c:fc:1c:45:7b:ad:12:
                    58:f1:83:36:b0:99:b3:c3:13:62:fc:8c:66:69:65:
                    a8:fa:7c:28:48:93:e9:d7:a7:3b:56:f1:2c:41:45:
                    a2:31:ca:81:85:1e:60:9b:5e:0e:f1:5e:11:43:e4:
                    65:70:3d:4c:b8:2e:bc:fa:02:28:d2:4f:4c:fa:28:
                    36:04:52:06:37:7a:2b:3e:9d:e1:de:04:ef:51:5e:
                    3a:b0:59:af:8d:33:98:3d:54:28:1f:f7:0e:e4:31:
                    f6:41:a2:06:49:a8:85:2c:d2:25:bc:d2:cf:5f:53:
                    73:86:d0:ec:56:47:4d:36:76:e0:b7:0f:ba:7e:bf:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:DF:00:8D:6D:A1:A2:B9:E1:86:C0:EB:50:57:0E:1A:4A:15:7F
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eqjfAI1toaK54YbA61BXDhpKFX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.155.0/24
                  77.90.61.0-77.90.62.255

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:21:0d:08:ef:9a:a7:31:59:fb:ec:9d:1c:37:f9:09:5f:
         76:7a:cd:85:90:2a:6b:49:98:1b:f5:98:c7:7e:55:01:bd:3a:
         d7:58:92:84:c5:9e:29:cb:85:b3:e2:33:95:04:ed:69:6a:68:
         71:13:04:2a:7d:77:ed:0b:bd:c7:2f:73:ee:e7:36:e0:0a:b0:
         87:a7:25:94:96:ad:84:7a:7f:15:8e:62:bc:03:52:70:8c:a9:
         94:0d:15:49:cd:4e:2e:47:4c:da:1c:69:81:f5:a1:68:bb:b8:
         5a:f0:60:2b:fd:20:c8:0f:5e:20:a2:78:4d:37:dd:2f:47:47:
         4d:d0:c9:18:13:61:c1:02:05:9d:e8:35:11:9a:27:69:97:00:
         41:65:f6:aa:10:b6:e5:9a:92:71:e9:dc:7b:ed:ce:d5:91:63:
         e6:bf:63:ae:b4:a4:01:e2:97:59:1d:47:d7:5e:31:2f:75:d3:
         3c:86:1b:4a:3f:16:f7:9d:76:e9:ee:99:8b:3a:cc:2f:da:27:
         8e:fa:34:1f:92:34:05:61:ce:87:eb:45:5d:1f:47:7d:89:37:
         68:93:51:ae:f7:96:70:5e:64:47:fd:64:3b:62:c2:42:6d:4e:
         56:8f:4b:48:c3:f3:a7:70:7f:a2:4a:99:51:d2:26:76:40:5b:
         97:da:cb:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org