Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0NCzHTwsPBaGJT9lphUx5lKC5rw.roa
File:                     0NCzHTwsPBaGJT9lphUx5lKC5rw.roa (raw, json)
Hash identifier:          SJTRuu5StLMkRSb5bWueZ2Rc9ezY6jgheYpfyxkJF6I=
Subject key identifier:   D0:D0:B3:1D:3C:2C:3C:16:86:25:3F:65:A6:15:31:E6:52:82:E6:BC
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       018CC7952BEE6B64F046F58E7817CBB8922F
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0NCzHTwsPBaGJT9lphUx5lKC5rw.roa
Signing time:             Tue 02 Jan 2024 00:31:31 +0000
ROA not before:           Tue 02 Jan 2024 00:31:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202592
IP address blocks:        185.96.56.0/22 maxlen: 24
                          194.38.48.0/22 maxlen: 24
                          193.168.200.0/22 maxlen: 24
                          193.160.220.0/22 maxlen: 24
                          185.136.16.0/22 maxlen: 24
                          147.185.196.0/23 maxlen: 24
                          147.185.206.0/23 maxlen: 24
                          207.244.196.0/22 maxlen: 24
                          43.240.148.0/22 maxlen: 24
                          207.244.208.0/22 maxlen: 24
                          45.12.100.0/22 maxlen: 24
                          2a07:5b40::/29 maxlen: 48
                          2a05:ff00::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:2b:ee:6b:64:f0:46:f5:8e:78:17:cb:b8:92:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Jan  2 00:31:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d0d0b31d3c2c3c1686253f65a61531e65282e6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:ac:46:50:52:c7:04:7c:33:e9:6f:b5:7c:
                    cb:9c:a3:ca:3c:9e:43:d3:db:4f:3f:30:fd:58:e5:
                    c1:07:be:d2:da:17:ec:4e:ec:67:de:36:06:90:e4:
                    ef:11:9f:8b:ad:c9:08:c5:43:b1:e3:a8:66:00:7e:
                    53:81:b4:5d:f4:a9:09:ab:b6:a6:a3:e0:70:0c:94:
                    a0:8f:ec:53:c3:99:7a:72:b5:10:e3:4e:4b:b3:00:
                    d0:41:97:08:38:15:4c:29:d2:4b:08:c8:4d:89:17:
                    af:4c:e4:64:f0:8d:1b:b7:79:1a:c8:d6:34:bf:c6:
                    4d:c5:6d:67:2b:85:de:47:b8:66:dc:f6:b4:77:b1:
                    d8:48:d0:a9:b4:f9:37:76:c0:52:ce:0e:6f:f7:30:
                    12:22:55:47:0e:6b:20:92:31:a3:d5:9a:b1:e6:38:
                    3f:de:ee:9c:35:08:1c:77:9e:fc:8e:ce:5e:d5:aa:
                    36:06:4c:ad:fb:fc:4d:e1:67:e3:54:97:62:bd:19:
                    06:86:86:9f:01:09:26:1d:44:d9:3c:75:7a:23:02:
                    38:50:a4:0f:71:64:99:65:59:a3:89:46:ef:19:a0:
                    4c:7d:25:d3:31:0b:00:2c:f2:e8:8b:df:fd:6d:de:
                    76:06:70:b5:7f:46:b7:26:66:4d:2a:51:16:fc:b3:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:B3:1D:3C:2C:3C:16:86:25:3F:65:A6:15:31:E6:52:82:E6:BC
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0NCzHTwsPBaGJT9lphUx5lKC5rw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.148.0/22
                  45.12.100.0/22
                  147.185.196.0/23
                  147.185.206.0/23
                  185.96.56.0/22
                  185.136.16.0/22
                  193.160.220.0/22
                  193.168.200.0/22
                  194.38.48.0/22
                  207.244.196.0/22
                  207.244.208.0/22
                IPv6:
                  2a05:ff00::/29
                  2a07:5b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:da:eb:89:87:d6:8a:c1:85:05:4c:75:9a:b7:8c:c9:03:33:
         7e:44:df:05:dd:d3:60:2d:9c:7f:a7:3b:40:5d:85:f1:56:a4:
         d4:77:61:95:79:18:ec:4f:f2:01:c0:e0:54:de:1c:36:a7:12:
         b6:29:8c:eb:f0:62:57:ee:e9:f7:e6:d3:4f:de:8e:df:70:b4:
         ec:7c:a1:cd:ad:3d:9c:ed:d0:2f:c7:d6:6f:1e:0d:1d:5f:5f:
         11:f1:9a:c2:f2:aa:87:83:71:a0:a1:5d:a3:00:3b:38:7e:5a:
         e2:dd:ba:de:99:9b:c3:89:c2:7c:5e:cc:64:ff:b4:2b:a9:47:
         48:9d:4c:7e:cb:61:b3:46:cb:49:b6:7c:c6:f8:44:22:8d:5b:
         ba:a4:55:d0:db:d9:64:76:05:80:ed:6d:36:ad:94:97:73:47:
         b8:23:ae:5f:08:92:55:80:7e:ef:cf:ae:52:ed:34:6d:ec:31:
         9e:51:37:3e:70:eb:58:c0:52:1f:a3:b3:36:03:5b:28:9c:26:
         99:82:1d:7d:79:75:c4:a3:4c:7e:1e:d7:d1:47:e2:35:e8:40:
         28:b9:40:b1:20:35:00:07:cd:65:d6:fa:05:d4:f1:3a:cb:d7:
         2e:43:8e:e9:ec:ef:b3:79:9a:d2:6a:7d:ab:c2:7c:12:8b:0f:
         81:e2:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:57:44 2024 by rpki-client on console-ams.rpki-client.org