Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ypAb-D1z0YVAo19yi03TGdUDjU0.roa
File:                     ypAb-D1z0YVAo19yi03TGdUDjU0.roa (raw, json)
Hash identifier:          apHd1JdjcvnO7xSuIiCBpF+QhFV5GcEOC/KfJWTB3Wk=
Subject key identifier:   CA:90:1B:F8:3D:73:D1:85:40:A3:5F:72:8B:4D:D3:19:D5:03:8D:4D
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0192FAA6B2DB9811DFC6ED66EEF31DA5CFAE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ypAb-D1z0YVAo19yi03TGdUDjU0.roa
Signing time:             Tue 05 Nov 2024 04:48:01 +0000
ROA not before:           Tue 05 Nov 2024 04:48:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34665
IP address blocks:        5.8.8.0/22 maxlen: 22
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.10.0/24 maxlen: 24
                          5.8.11.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.16.0/24 maxlen: 24
                          5.8.19.0/24 maxlen: 24
                          5.8.48.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/24 maxlen: 24
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/23 maxlen: 23
                          5.8.50.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.8.52.0/22 maxlen: 22
                          5.8.52.0/23 maxlen: 23
                          5.8.52.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.54.0/23 maxlen: 23
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.65.0/24 maxlen: 24
                          5.8.80.0/21 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.4.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.101.6.0/24 maxlen: 24
                          5.101.7.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.101.64.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.101.90.0/23 maxlen: 23
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.46.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.49.0/24 maxlen: 24
                          5.188.62.0/24 maxlen: 24
                          5.188.166.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          5.188.210.0/24 maxlen: 24
                          5.188.211.0/24 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          31.44.188.0/22 maxlen: 32
                          31.184.192.0/22 maxlen: 22
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/24 maxlen: 24
                          31.184.193.0/24 maxlen: 24
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.196.0/24 maxlen: 24
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.198.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.231.0/24 maxlen: 24
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          37.9.48.0/24 maxlen: 24
                          37.139.48.0/23 maxlen: 23
                          37.139.53.0/24 maxlen: 24
                          37.139.54.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.58.0/24 maxlen: 24
                          37.139.59.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.8.0/24 maxlen: 24
                          46.161.10.0/24 maxlen: 24
                          46.161.12.0/23 maxlen: 23
                          46.161.14.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          46.161.32.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.43.0/24 maxlen: 24
                          46.161.44.0/22 maxlen: 22
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/23 maxlen: 23
                          46.161.50.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.50.0/23 maxlen: 23
                          91.243.50.0/24 maxlen: 24
                          91.243.51.0/24 maxlen: 24
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.62.0/23 maxlen: 23
                          91.243.90.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.0.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/23 maxlen: 23
                          95.215.2.0/24 maxlen: 24
                          95.215.3.0/24 maxlen: 24
                          146.185.223.0/24 maxlen: 24
                          146.185.224.0/21 maxlen: 21
                          146.185.244.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:fa:a6:b2:db:98:11:df:c6:ed:66:ee:f3:1d:a5:cf:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Nov  5 04:48:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ca901bf83d73d18540a35f728b4dd319d5038d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:21:37:42:17:d5:17:b0:8e:65:2e:9a:9b:
                    c9:29:50:bd:ca:17:2f:d2:f8:f3:7b:19:7f:18:ee:
                    f4:20:4a:36:52:f8:be:60:96:93:ba:d2:46:1c:e3:
                    7f:d0:3a:c8:79:c9:65:6a:4c:41:8f:c5:9b:a8:c7:
                    a3:00:31:eb:ea:4f:79:29:e1:31:ce:51:c0:07:5c:
                    ba:0f:2e:8d:4f:c9:ab:49:09:21:2f:d8:87:57:25:
                    4b:f0:d0:b4:98:c1:0f:4e:f9:8c:0c:56:57:43:3d:
                    c7:76:02:bf:01:74:c6:03:4b:85:6b:c7:f8:8e:fe:
                    79:73:b6:aa:43:c2:d2:12:dc:35:26:06:dc:4d:65:
                    d8:85:e4:e9:f3:d6:45:33:d7:4d:f4:f0:ac:06:80:
                    09:2e:e9:0e:db:65:b1:9f:68:6e:ac:54:33:99:c7:
                    30:b6:c5:8a:6b:96:a5:fe:53:b3:e9:15:94:8e:bf:
                    45:b9:12:45:9f:33:af:d0:4a:41:45:d0:6a:b4:fb:
                    dc:af:a4:26:2a:9a:91:b2:10:13:23:9b:fd:20:7b:
                    50:e1:44:22:7f:ed:7a:70:41:18:28:b8:92:47:eb:
                    6b:9a:cc:db:2e:83:79:cb:31:3b:bf:f8:29:ac:ed:
                    fc:4e:4f:a3:5e:5e:24:72:80:25:34:da:af:3c:77:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:1B:F8:3D:73:D1:85:40:A3:5F:72:8B:4D:D3:19:D5:03:8D:4D
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ypAb-D1z0YVAo19yi03TGdUDjU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0-5.8.16.255
                  5.8.19.0/24
                  5.8.48.0/21
                  5.8.60.0/23
                  5.8.65.0/24
                  5.8.80.0/21
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.223.0/24
                  5.188.233.0-5.188.235.255
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.48.0/23
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.12.0/22
                  46.161.20.0-46.161.25.255
                  46.161.32.0/22
                  46.161.42.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/22
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         81:73:5c:46:a9:91:1b:ab:ca:de:ce:05:8f:1d:c0:38:8d:ad:
         f2:8a:85:d7:82:d4:9b:e0:33:55:2a:11:bc:34:b2:0a:b0:2e:
         ce:db:1d:5b:58:ce:6f:e1:01:86:ac:23:af:a9:82:cf:d5:51:
         3a:c3:67:73:d0:ae:89:01:d6:a8:30:73:4a:d2:13:d3:26:6e:
         58:87:a8:85:a1:43:9f:59:b7:27:e0:81:e9:87:f6:d8:61:3e:
         26:dc:6f:2d:15:b5:3d:88:84:4d:74:67:40:24:77:ee:b4:5e:
         ed:a9:b5:c7:cb:f5:0a:75:98:c4:9a:96:8c:74:d1:78:96:63:
         24:4b:cb:99:51:87:30:9e:22:6f:68:5c:9b:3a:63:e7:cb:84:
         59:8c:89:ef:9d:b3:f0:38:d9:40:04:a9:8a:8c:42:e4:fe:2f:
         a4:18:35:71:7a:a5:35:ad:d2:69:e7:5c:d2:d7:8b:0c:53:07:
         9c:4a:0c:b0:e1:c5:44:f6:01:a1:f1:88:13:8c:02:b4:7d:76:
         fb:70:8f:b1:d6:a3:77:cd:15:a4:a3:99:b2:fc:5c:80:5b:ab:
         69:d0:90:4c:15:0b:c9:41:38:13:a9:cc:2b:2b:a1:ba:c6:a9:
         24:85:39:51:81:98:f2:4c:55:10:33:e6:05:da:72:52:f7:96:
         17:b9:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:34:05 2024 by rpki-client on console-ams.rpki-client.org