Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/q4lNPBtz8ZaBtp1jN3aEccFqII0.roa
File:                     q4lNPBtz8ZaBtp1jN3aEccFqII0.roa (raw, json)
Hash identifier:          v520n7QwZuOfGczkEsIXWHKVYYGORgRjg5gMGfhocwA=
Subject key identifier:   AB:89:4D:3C:1B:73:F1:96:81:B6:9D:63:37:76:84:71:C1:6A:20:8D
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       018CC6B93A4B1CFF3CF566EFB6B046065118
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/q4lNPBtz8ZaBtp1jN3aEccFqII0.roa
Signing time:             Mon 01 Jan 2024 20:31:16 +0000
ROA not before:           Mon 01 Jan 2024 20:31:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31463
IP address blocks:        109.71.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:3a:4b:1c:ff:3c:f5:66:ef:b6:b0:46:06:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Jan  1 20:31:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ab894d3c1b73f19681b69d6337768471c16a208d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:00:0a:d4:1e:fe:06:3e:4b:0a:67:a9:36:
                    f5:d1:08:e2:3d:4e:54:df:98:ba:94:16:28:a5:f8:
                    8b:b4:1f:a1:c5:94:b9:5a:5d:54:f2:bb:ce:a0:45:
                    3a:d5:2d:3a:44:fc:c2:39:dc:7e:3d:7e:99:37:08:
                    72:76:58:34:44:74:0e:45:24:b8:a0:c8:dc:7b:a7:
                    9b:e2:ea:fc:2d:b4:44:8e:bc:08:d0:bc:b9:df:8b:
                    c2:93:99:08:fa:63:c0:60:06:ac:b0:ed:8c:5c:1b:
                    1b:e9:7c:f1:d2:76:5a:9a:cf:39:40:8e:cd:94:a3:
                    5d:5e:fa:b2:ad:2e:a1:26:8e:fb:97:11:02:fe:32:
                    8f:7a:f5:4c:27:34:a7:e0:02:55:c5:a8:36:fd:87:
                    37:ac:7b:76:27:05:d9:61:fb:c9:69:a6:7e:9e:e1:
                    92:14:ca:c9:44:50:46:b5:87:d3:ec:59:ef:37:1a:
                    b8:5f:22:da:8b:4c:40:6e:7f:a7:c7:e3:db:2c:a6:
                    30:5c:fb:31:21:52:0e:cc:5b:1e:fd:26:13:50:56:
                    f0:46:72:41:1c:98:51:ee:df:a2:17:24:15:65:cc:
                    75:ba:8c:c4:be:d9:02:f9:be:b1:cf:f8:66:e9:e0:
                    60:bc:c8:b3:ef:24:f1:a4:c6:dd:cf:de:80:7c:31:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:89:4D:3C:1B:73:F1:96:81:B6:9D:63:37:76:84:71:C1:6A:20:8D
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/q4lNPBtz8ZaBtp1jN3aEccFqII0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:71:1d:f5:b4:7c:57:c7:bb:4f:49:73:c7:df:31:ee:7d:ee:
         1e:0c:69:7f:69:7a:bf:9d:24:1a:ed:ac:92:f1:c3:15:7c:9c:
         4f:d0:72:82:e1:77:47:01:28:f5:57:b3:d7:4f:c8:f8:fd:76:
         c0:8d:71:e4:6e:e5:15:d2:7b:16:ac:56:ab:89:6c:3f:a0:7c:
         81:7b:06:89:46:79:fd:84:3e:3b:15:69:8a:50:ff:bc:cf:b2:
         f4:b9:35:f2:4f:00:1c:43:ad:72:16:93:1a:4e:38:6c:c4:4d:
         8d:db:13:df:bc:48:18:93:c1:90:0e:0b:1e:4e:af:2f:27:82:
         33:12:87:8f:d6:ec:55:67:f7:81:4f:15:ad:08:33:5e:ac:58:
         83:d8:32:66:0c:31:ed:ce:e4:1a:82:ca:4f:4d:47:5c:00:81:
         1d:c9:3a:53:31:ab:58:5a:bd:36:d8:2f:da:4c:32:e4:cf:73:
         2e:bb:90:71:b9:28:8b:01:ea:12:9f:9a:27:76:92:0e:d8:77:
         1a:0e:ec:f5:49:df:ed:ad:86:2f:2f:36:cc:2c:e9:57:b9:90:
         c3:34:fd:6b:14:52:fa:38:4f:fe:29:30:35:eb:62:2e:88:f6:
         c3:3e:98:1b:b2:46:eb:31:f2:7e:60:c9:46:87:62:4e:1f:75:
         4a:17:27:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTpLHP889WbvtrBGBlEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi
NWI4NGYwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjg5NGQzYzFiNzNmMTk2ODFiNjlkNjMzNzc2ODQ3MWMxNmEyMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiioACtQe/gY+SwpnqTb10QjiPU5U
35i6lBYopfiLtB+hxZS5Wl1U8rvOoEU61S06RPzCOdx+PX6ZNwhydlg0RHQORSS4
oMjce6eb4ur8LbREjrwI0Ly534vCk5kI+mPAYAassO2MXBsb6Xzx0nZams85QI7N
lKNdXvqyrS6hJo77lxEC/jKPevVMJzSn4AJVxag2/Yc3rHt2JwXZYfvJaaZ+nuGS
FMrJRFBGtYfT7FnvNxq4XyLai0xAbn+nx+PbLKYwXPsxIVIOzFse/SYTUFbwRnJB
HJhR7t+iFyQVZcx1uozEvtkC+b6xz/hm6eBgvMiz7yTxpMbdz96AfDG7AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKuJTTwbc/GWgbadYzd2hHHBaiCNMB8GA1UdIwQY
MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt
NjA4MDk3ZjE4ZDgzLzEvcTRsTlBCdHo4WmFCdHAxak4zYUVjY0ZxSUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz
LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUdOMA0G
CSqGSIb3DQEBCwUAA4IBAQCZcR31tHxXx7tPSXPH3zHufe4eDGl/aXq/nSQa7ayS
8cMVfJxP0HKC4XdHASj1V7PXT8j4/XbAjXHkbuUV0nsWrFariWw/oHyBewaJRnn9
hD47FWmKUP+8z7L0uTXyTwAcQ61yFpMaTjhsxE2N2xPfvEgYk8GQDgseTq8vJ4Iz
EoeP1uxVZ/eBTxWtCDNerFiD2DJmDDHtzuQagspPTUdcAIEdyTpTMatYWr022C/a
TDLkz3Muu5BxuSiLAeoSn5ondpIO2HcaDuz1Sd/trYYvLzbMLOlXuZDDNP1rFFL6
OE/+KTA162IuiPbDPpgbskbrMfJ+YMlGh2JOH3VKFycx
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:38:33 2024 by rpki-client on console-ams.rpki-client.org