Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/7JdiqCpwMM4RS0slvPhvuSgQ0Zk.roa
File:                     7JdiqCpwMM4RS0slvPhvuSgQ0Zk.roa (raw, json)
Hash identifier:          ZVqFQJMkDhXrES62OLJNsHEP1s89tgGhmHoViu58+d4=
Subject key identifier:   EC:97:62:A8:2A:70:30:CE:11:4B:4B:25:BC:F8:6F:B9:28:10:D1:99
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       01903178143A29621B0C8534417BCC6C0ECF
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/7JdiqCpwMM4RS0slvPhvuSgQ0Zk.roa
Signing time:             Wed 19 Jun 2024 17:07:51 +0000
ROA not before:           Wed 19 Jun 2024 17:07:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56971
IP address blocks:        193.164.155.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:31:78:14:3a:29:62:1b:0c:85:34:41:7b:cc:6c:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Jun 19 17:07:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec9762a82a7030ce114b4b25bcf86fb92810d199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:23:76:4c:89:db:b6:62:6c:a4:e4:41:34:
                    45:c2:50:3b:19:8b:b1:9f:2a:ba:2c:b0:35:5b:ab:
                    22:b0:f4:26:65:85:96:b9:53:c1:34:de:b3:2f:10:
                    67:ba:1c:9b:06:1c:05:2a:19:90:5f:2e:a1:75:26:
                    0a:52:85:c6:06:97:11:f4:f5:b5:63:a6:54:f3:4d:
                    12:56:50:8c:1a:e6:ef:7f:d0:af:a2:2c:d8:0f:62:
                    11:b0:18:46:4b:85:9b:5c:d0:42:8d:f1:46:45:3f:
                    1b:de:a9:89:ec:ab:6e:bb:a9:de:51:d1:d8:ac:af:
                    ca:37:2a:bc:e9:93:7c:71:9f:e1:c2:42:4d:57:9f:
                    d1:1b:79:be:04:fd:d3:47:d4:94:a7:75:b6:17:4d:
                    54:8c:00:f1:bf:83:2f:36:49:56:77:48:11:d4:20:
                    99:c5:0c:04:01:28:32:6c:3f:1d:b3:c9:2f:79:5b:
                    09:c6:15:03:f1:8f:2e:6d:15:9e:ad:a6:7f:cb:d0:
                    91:34:7a:f3:43:a4:f4:be:4b:c0:59:e7:1a:f2:97:
                    49:c4:95:c9:ae:63:82:de:32:50:da:e8:2a:e6:d6:
                    0d:37:90:f6:e9:d5:57:e6:89:9d:f2:c5:05:45:17:
                    5d:48:1c:b3:1f:9c:1f:08:0a:f5:72:a4:82:86:d8:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:62:A8:2A:70:30:CE:11:4B:4B:25:BC:F8:6F:B9:28:10:D1:99
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/7JdiqCpwMM4RS0slvPhvuSgQ0Zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:51:f1:a2:5a:15:79:02:3d:89:69:a1:82:4a:54:95:17:
         3e:69:b2:53:2d:38:29:fc:43:bb:f4:bd:a5:6a:dc:c1:ae:a0:
         f5:cb:bf:fc:5c:90:bf:66:26:9a:62:cf:f0:42:33:aa:b5:44:
         e2:f2:a7:7e:d7:db:0f:a5:2a:6a:e4:7c:97:a0:1b:69:dc:0b:
         b3:1d:2a:d4:5e:51:d8:3f:50:67:ea:99:67:bf:67:82:54:d3:
         4e:67:66:dd:3a:77:5d:07:31:c8:fa:40:05:48:47:cd:80:be:
         42:f5:24:56:d7:f4:be:1d:54:1f:6a:77:f2:eb:49:18:52:a6:
         30:da:12:5c:68:7c:02:56:09:c3:32:93:fe:20:ef:59:58:ba:
         a0:3c:9e:f3:e4:b0:9e:32:c5:da:cf:fe:78:1a:c5:c8:0a:a6:
         b1:4a:e3:58:b6:b8:80:47:c4:4f:e2:a6:27:aa:be:4d:2a:d4:
         e8:d0:d2:af:04:50:bc:27:49:82:d3:4c:4e:89:3b:4d:f5:2f:
         4e:db:bc:83:f8:c7:1d:4b:9c:ce:74:79:61:0f:f8:11:49:f7:
         d5:01:63:2e:0a:0c:af:39:97:18:79:08:68:71:5f:75:a9:97:
         a5:5b:62:11:9a:d2:e9:a7:fa:33:3b:95:43:3d:4f:dd:b6:c0:
         04:1b:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:37:01 2024 by rpki-client on console-fra.rpki-client.org