Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/G4knMZ_IgmSgl1i7fFHCPDTXDCw.roa
File:                     G4knMZ_IgmSgl1i7fFHCPDTXDCw.roa (raw, json)
Hash identifier:          CDrnAazOGWg710GoNeUfL+ezUV4CIIuRJNs5cZ9BQhE=
Subject key identifier:   1B:89:27:31:9F:C8:82:64:A0:97:58:BB:7C:51:C2:3C:34:D7:0C:2C
Certificate issuer:       /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial:       018D47178375037851F4B6EAEE37D12F5646
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/G4knMZ_IgmSgl1i7fFHCPDTXDCw.roa
Signing time:             Fri 26 Jan 2024 18:45:39 +0000
ROA not before:           Fri 26 Jan 2024 18:45:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48147
IP address blocks:        217.198.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:47:17:83:75:03:78:51:f4:b6:ea:ee:37:d1:2f:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
        Validity
            Not Before: Jan 26 18:45:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1b8927319fc88264a09758bb7c51c23c34d70c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:53:c9:ce:75:43:f9:a9:01:6b:f8:78:e2:
                    72:70:b4:66:52:ea:3d:24:64:7d:46:56:63:e3:06:
                    2f:ed:4d:ed:59:57:27:c5:d4:5f:0e:77:17:55:73:
                    22:e5:e6:ea:50:80:8d:e6:6a:42:a7:9c:19:11:22:
                    a3:1e:92:11:45:f7:0c:c3:55:e6:d4:28:51:2b:af:
                    f5:63:88:fb:f3:22:0b:00:23:c5:62:57:6f:9a:87:
                    d5:4f:e2:f7:9c:9f:a7:6a:d1:fb:45:7d:20:96:7d:
                    bf:10:60:67:03:a1:1f:13:f1:f3:47:92:18:1a:84:
                    25:67:70:2c:3c:75:8c:94:5d:04:92:98:af:4e:e8:
                    0e:7e:f0:4d:57:27:2d:6c:19:7f:eb:af:80:e1:0c:
                    db:1e:72:c2:84:1e:1f:60:4c:6d:58:00:0a:a8:64:
                    2f:46:88:d4:b9:8d:de:24:a9:f1:c3:56:68:67:53:
                    bc:aa:6c:7e:43:7e:ba:df:13:1a:f0:d5:13:6d:3c:
                    94:80:f3:2a:a1:86:49:55:fa:71:d1:12:9d:a5:82:
                    17:22:92:14:85:b2:6b:b9:b5:76:1f:e1:7f:03:5c:
                    90:12:5c:69:89:90:27:57:82:51:b9:c2:4c:6a:48:
                    63:0e:13:e2:b6:9b:b5:f8:13:c5:1b:1d:3e:ac:ab:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:89:27:31:9F:C8:82:64:A0:97:58:BB:7C:51:C2:3C:34:D7:0C:2C
            X509v3 Authority Key Identifier:
                keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/G4knMZ_IgmSgl1i7fFHCPDTXDCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.198.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:2a:fa:25:82:4b:0e:26:92:42:5c:20:20:cd:7c:b2:78:
         02:ff:15:99:82:e0:8b:b4:ef:74:a9:4a:2a:10:62:71:36:fc:
         ff:ac:56:44:0b:5d:62:12:14:92:d1:54:b1:ef:42:f8:a4:53:
         0a:cb:0a:97:5c:a5:ff:1a:a9:42:c9:80:2a:38:10:6e:b6:c9:
         8a:0f:e6:76:93:bb:c2:ab:8d:33:21:6d:03:32:48:8e:a3:38:
         cc:f8:03:6a:5f:db:a4:8e:fa:8b:3f:5a:41:61:b9:d7:20:63:
         6b:9e:7a:ae:d2:8e:b5:a7:36:50:a6:4b:c7:26:1a:ae:78:51:
         0c:3f:34:82:df:d2:68:97:76:83:05:c7:84:4d:49:82:36:57:
         7d:b1:70:74:dd:55:e3:84:bf:32:81:e0:07:cd:25:88:68:4d:
         2a:45:b1:78:1e:d0:8b:76:fa:c7:4f:2c:0d:62:aa:8c:7e:ec:
         44:02:47:c8:b2:e8:40:ba:c9:f1:08:97:76:49:84:23:8b:6c:
         b6:fd:50:3b:92:94:1c:cd:88:75:fb:2c:2d:aa:90:57:6c:b4:
         dd:c5:00:f4:18:e1:d2:c0:f5:93:d7:98:c5:9e:95:23:bb:d3:
         ed:5e:74:03:a4:bd:c1:d4:1f:66:a4:70:86:2d:d7:36:d0:a0:
         ac:bd:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:39 2024 by rpki-client on console-fra.rpki-client.org