Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/bSBaZbXyGK6s-45ETJbR2_RRyog.roa
File:                     bSBaZbXyGK6s-45ETJbR2_RRyog.roa (raw, json)
Hash identifier:          AE9bc+6rfxb8joZMQ0FdtiMtcQNUyac0ka4fvtDIFk0=
Subject key identifier:   6D:20:5A:65:B5:F2:18:AE:AC:FB:8E:44:4C:96:D1:DB:F4:51:CA:88
Certificate issuer:       /CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Certificate serial:       018CC493745259BDF512CBD916DE23975B7A
Authority key identifier: DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/bSBaZbXyGK6s-45ETJbR2_RRyog.roa
Signing time:             Mon 01 Jan 2024 10:30:47 +0000
ROA not before:           Mon 01 Jan 2024 10:30:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60940
IP address blocks:        185.23.93.0/24 maxlen: 24
                          185.23.94.0/23 maxlen: 23
                          185.23.92.0/24 maxlen: 24
                          2a04:2500::/32 maxlen: 32
                          2a04:2500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:74:52:59:bd:f5:12:cb:d9:16:de:23:97:5b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
        Validity
            Not Before: Jan  1 10:30:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6d205a65b5f218aeacfb8e444c96d1dbf451ca88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:e9:10:ae:cd:29:e2:93:ad:b5:4f:7a:6d:
                    1c:e0:b6:ed:b8:c5:47:57:48:15:ec:e7:55:31:e2:
                    e2:8d:8c:ce:0e:45:1f:6d:e8:a3:f6:64:a5:ac:bb:
                    8a:aa:2b:ca:08:1a:63:c7:20:0e:56:b2:43:e1:57:
                    e1:cb:57:8c:2c:b0:5f:3e:7e:80:f6:6c:80:f7:4c:
                    35:66:a9:1e:54:5c:4e:c7:5d:fa:f8:07:18:87:6e:
                    d8:dc:e9:0d:12:57:71:f6:e0:fd:4c:d2:ec:aa:75:
                    fa:8b:f0:5f:2f:24:b9:d2:c3:70:eb:dd:1a:aa:c9:
                    2c:ba:69:2c:b9:0d:5e:6e:e2:37:08:e2:00:f0:d3:
                    59:5c:9b:75:b7:06:12:93:f2:24:bc:93:ca:1e:2a:
                    ad:86:3c:70:a5:1f:b4:df:fb:d1:55:bd:8d:fc:45:
                    a3:13:83:0f:5b:f4:d6:23:a5:db:39:65:ae:20:e5:
                    e0:af:0b:6f:41:7e:1a:05:8b:d6:3e:ed:80:df:5b:
                    b7:6e:08:19:9d:37:ff:bb:ab:45:82:59:d8:d1:5f:
                    fc:9c:54:50:d0:13:7b:31:c3:3b:6b:a1:9b:a8:46:
                    4f:44:b7:be:68:e5:a5:75:cb:d2:40:df:e0:39:2b:
                    b7:5b:c7:10:40:0f:c7:7d:b4:9d:b7:7f:4c:d9:29:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:20:5A:65:B5:F2:18:AE:AC:FB:8E:44:4C:96:D1:DB:F4:51:CA:88
            X509v3 Authority Key Identifier:
                keyid:DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/bSBaZbXyGK6s-45ETJbR2_RRyog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.92.0/22
                IPv6:
                  2a04:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:ee:2c:5c:4b:69:8f:1d:e3:83:78:6d:92:8e:c0:1a:6f:
         7c:58:7d:4e:97:29:f4:73:25:9f:a5:b3:66:cf:2b:8b:bd:f4:
         a1:b2:84:40:64:b9:ee:13:dd:b7:97:d8:d6:1c:5a:17:91:69:
         d0:7a:6d:96:e8:0b:b0:04:34:58:04:0d:48:b0:c0:34:45:38:
         5a:09:39:01:99:35:b2:b5:a1:69:5c:30:4d:06:8c:10:63:05:
         50:9f:77:d2:d1:90:57:48:a7:b9:96:33:49:58:98:21:f5:57:
         ca:89:43:53:00:55:82:e1:6a:da:a5:df:d0:80:35:fd:2f:ac:
         c8:16:71:16:4a:cf:3b:27:41:3f:3a:3c:6a:2d:20:71:d6:e5:
         1d:d2:35:f1:d9:cf:46:5c:cc:c8:29:2b:f6:e7:f8:23:a4:40:
         45:10:9f:9b:9d:2f:e1:bc:46:a9:0c:d8:9a:f9:a7:de:33:9b:
         2f:d3:4f:1f:46:7c:c5:4d:64:b1:ae:83:4c:d2:a3:a3:11:08:
         4f:77:ae:20:ff:cd:f1:b0:c2:29:9d:7c:31:41:a9:b9:c7:04:
         ff:a2:53:58:1c:ad:47:b7:19:f3:60:81:68:64:61:cc:52:a0:
         5c:34:ff:81:a2:c1:72:f8:01:e2:ee:87:94:be:41:1a:fe:25:
         42:88:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:33:20 2024 by rpki-client on console-ams.rpki-client.org