Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q2melAOLg5S73gTs8-_LRvPAKyA.roa
File:                     Q2melAOLg5S73gTs8-_LRvPAKyA.roa (raw, json)
Hash identifier:          8BLmy7a7U7dbrXd4v9TWosqRbSm8lS2sUyU+6I8veGM=
Subject key identifier:   43:69:9E:94:03:8B:83:94:BB:DE:04:EC:F3:EF:CB:46:F3:C0:2B:20
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       01942747F03339A44628AF798B47B4727DDE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q2melAOLg5S73gTs8-_LRvPAKyA.roa
Signing time:             Thu 02 Jan 2025 13:50:13 +0000
ROA not before:           Thu 02 Jan 2025 13:50:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212508
IP address blocks:        178.218.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Mar 2025 19:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:f0:33:39:a4:46:28:af:79:8b:47:b4:72:7d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 13:50:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=43699e94038b8394bbde04ecf3efcb46f3c02b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:8f:75:86:f3:8b:3f:ba:4b:ea:82:40:08:77:
                    7f:78:bc:e6:cd:a5:3a:c4:bd:05:11:63:c3:df:57:
                    42:fa:7c:83:42:12:23:f9:c4:c0:89:e9:3a:d5:7e:
                    ff:77:b5:b2:5f:2e:32:73:ab:1b:81:81:f9:1f:f3:
                    34:95:f5:ef:1b:2d:a0:69:57:44:d4:5a:6d:c3:d7:
                    28:68:71:e7:2a:8b:12:21:f0:43:47:65:e4:6f:e6:
                    6e:eb:20:e8:21:8e:b8:f9:d3:4a:c2:9e:5d:fd:e2:
                    71:b8:17:9d:fd:59:f4:82:88:14:4b:90:b8:90:68:
                    26:a6:71:29:00:a9:77:54:58:0e:8e:77:90:19:21:
                    fd:0d:86:4b:38:49:68:4b:96:2e:db:13:ed:4e:ba:
                    cf:8e:6a:20:1d:fc:97:4f:07:5f:d3:54:f9:93:a6:
                    79:bb:ac:6b:ae:ee:b0:98:d8:59:d8:2b:25:8e:bb:
                    43:b7:97:38:0b:50:1b:22:cd:22:99:59:cc:51:d9:
                    ff:3a:32:05:2a:5e:be:a2:c4:03:ea:05:87:7a:d9:
                    82:60:1c:da:d7:c7:3c:ed:7b:70:c4:30:c4:d2:e5:
                    97:60:5d:72:88:b1:fb:db:99:39:f6:80:4d:c3:71:
                    52:78:8a:eb:39:2e:fa:8f:7e:6c:c5:5a:f8:43:e1:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:9E:94:03:8B:83:94:BB:DE:04:EC:F3:EF:CB:46:F3:C0:2B:20
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q2melAOLg5S73gTs8-_LRvPAKyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:6b:e9:9f:3a:53:1d:74:85:a8:ca:e1:2d:46:f0:42:0e:
         7b:fc:41:54:e2:d9:30:f2:be:e3:d4:e8:eb:3d:40:cb:dd:00:
         d9:82:c8:e9:e3:5f:b8:4a:cb:db:ff:bc:9b:55:a3:dc:c8:a0:
         30:45:ec:7f:b6:d3:e5:64:c5:e7:49:93:b8:c7:af:33:16:c9:
         33:0c:13:89:06:62:44:2f:a5:8f:79:71:64:d1:4b:f3:65:75:
         1c:8d:c1:bb:18:62:25:24:b5:c5:33:c7:ea:17:10:96:ed:f1:
         c9:7a:02:52:33:34:2b:f5:4b:f6:3d:9c:8a:6d:18:d1:9f:5c:
         79:d4:ab:11:9a:e0:58:2c:9a:5e:d5:f8:9a:03:4c:5d:b1:28:
         f3:27:87:1b:b3:8a:0c:aa:e5:f3:5b:b4:c3:42:6c:93:8b:e8:
         2e:96:ff:e9:53:8e:49:3f:b2:2a:d0:32:f2:c6:3e:d2:97:18:
         c4:44:73:1d:c5:87:23:55:f5:be:a0:c8:78:48:0d:ea:45:41:
         58:ee:82:49:af:8f:fe:7e:6f:26:7d:b2:ab:7f:24:95:76:b9:
         f4:ff:dd:a9:37:39:5b:9e:64:88:8b:7e:92:0d:4f:83:40:72:
         a1:6c:49:13:09:d6:b2:03:47:69:43:20:13:a6:05:ea:e0:1c:
         89:9e:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:42:03 2025 by rpki-client