Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/T6X66_HcDO_dKensekl4Q2GBxww.roa
File:                     T6X66_HcDO_dKensekl4Q2GBxww.roa (raw, json)
Hash identifier:          Me1miQF+kg30ONTVjN6oHpE9WnMLFjpx6gj0DaGj7qg=
Subject key identifier:   4F:A5:FA:EB:F1:DC:0C:EF:DD:29:E9:EC:7A:49:78:43:61:81:C7:0C
Certificate issuer:       /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial:       018CC9BC898129A0C947E8830EC93E4FDE72
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/T6X66_HcDO_dKensekl4Q2GBxww.roa
Signing time:             Tue 02 Jan 2024 10:33:45 +0000
ROA not before:           Tue 02 Jan 2024 10:33:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34971
IP address blocks:        185.136.177.0/24 maxlen: 24
                          185.136.176.0/24 maxlen: 24
                          185.136.176.0/22 maxlen: 24
                          2a06:fdc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:89:81:29:a0:c9:47:e8:83:0e:c9:3e:4f:de:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50480549481968d43406127653f780abbf9a117b
        Validity
            Not Before: Jan  2 10:33:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4fa5faebf1dc0cefdd29e9ec7a4978436181c70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:64:4a:78:67:e1:95:5a:71:aa:cd:ff:78:
                    8a:31:3c:c8:4b:1a:ad:c8:99:05:a6:f2:e1:88:d0:
                    32:20:f9:6a:19:d3:c4:f8:09:8e:ab:38:a3:4e:e7:
                    a5:29:25:7b:60:ad:5d:f8:fd:b9:25:3a:2f:7c:c7:
                    2b:23:89:8d:e1:ea:29:02:80:03:5c:7c:6b:50:d3:
                    35:93:05:c7:3e:6b:47:f9:70:9f:33:7d:df:66:6c:
                    41:3f:b9:5d:0c:d2:30:2d:96:c2:05:81:b8:1c:7a:
                    cb:ca:58:e4:9f:6d:63:8f:fb:f8:28:87:54:55:c0:
                    38:3a:69:d3:29:16:37:58:29:28:c4:3a:4f:10:d0:
                    42:59:18:a5:eb:f8:46:b2:a3:48:19:14:13:f6:4b:
                    73:d3:0f:65:ac:20:35:b4:5a:91:71:73:1b:12:79:
                    6f:46:73:09:23:47:32:fa:12:45:03:6d:19:a9:b5:
                    84:97:32:c9:c9:ac:85:c0:25:9b:14:19:e8:60:33:
                    00:35:c6:a9:01:2a:0d:1f:61:19:14:88:a8:93:4a:
                    0a:e9:0c:bf:17:32:ae:47:b7:b6:63:7b:2e:ca:1a:
                    36:b3:e2:8f:dc:2f:32:aa:d7:49:02:71:18:e2:bc:
                    e4:6b:0e:f7:15:1a:c7:e2:c0:40:0d:01:a1:6c:7e:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A5:FA:EB:F1:DC:0C:EF:DD:29:E9:EC:7A:49:78:43:61:81:C7:0C
            X509v3 Authority Key Identifier:
                keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/T6X66_HcDO_dKensekl4Q2GBxww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.176.0/22
                IPv6:
                  2a06:fdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:49:bf:7f:c5:6c:a8:5e:2e:89:3d:28:8c:75:94:59:8d:
         6f:40:04:c4:58:a4:f4:6f:72:d3:73:26:1a:b9:d4:cf:ce:73:
         cb:89:ac:98:e1:f4:68:ff:df:7e:c0:db:98:e1:05:fa:68:d1:
         18:5a:c4:d1:f2:1e:96:2d:21:b3:b6:43:bd:60:fa:10:e0:a8:
         65:21:14:de:83:bc:e5:59:bb:5d:38:87:0a:2f:96:95:37:fd:
         cb:99:be:3d:2f:8c:f4:ba:ac:e7:bb:60:51:12:35:15:37:8a:
         39:5b:40:70:0a:ea:c4:28:85:1c:7b:5d:76:74:02:07:71:2c:
         d2:19:53:e9:70:37:1c:49:17:99:98:f9:f5:d8:9e:c4:25:b0:
         48:59:67:5f:b4:da:99:5e:bd:13:ec:fb:5b:34:31:7b:9a:f5:
         c9:34:e3:9c:5e:d5:98:ff:d2:0c:b7:88:90:8d:58:72:0e:c0:
         09:6c:02:4e:eb:b9:2f:89:43:64:9e:7c:55:15:05:39:96:be:
         6b:4b:33:ce:44:e6:5f:78:c7:c6:04:b5:33:db:9a:29:3b:ef:
         31:01:18:83:cb:4b:94:70:2f:82:da:75:2d:49:f3:46:56:0f:
         ea:5c:c8:bd:2e:90:70:ec:d6:d5:4d:46:1b:2b:df:27:c4:d8:
         2e:42:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:28:00 2024 by rpki-client on console-fra.rpki-client.org