Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa
File:                     UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa (raw, json)
Hash identifier:          Fp5gE9ini9ohmtOOSoiv1sAvwlKmXLR7OjVZ0JVySBI=
Subject key identifier:   50:77:59:FC:15:88:98:6E:02:F8:BC:AB:09:DA:5B:06:FD:EA:15:77
Certificate issuer:       /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial:       018CC56E24FCA4A93971183F5674591FEA8A
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa
Signing time:             Mon 01 Jan 2024 14:29:39 +0000
ROA not before:           Mon 01 Jan 2024 14:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39093
IP address blocks:        45.158.144.0/22 maxlen: 22
                          185.46.252.0/22 maxlen: 22
                          88.81.96.0/19 maxlen: 19
                          2a02:3d8::/32 maxlen: 32
                          2a0f:6380::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:24:fc:a4:a9:39:71:18:3f:56:74:59:1f:ea:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
        Validity
            Not Before: Jan  1 14:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=507759fc1588986e02f8bcab09da5b06fdea1577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:7e:7b:db:ea:3e:ed:5a:3e:5c:09:01:01:
                    e6:e5:64:6b:cb:ce:80:ef:10:35:69:b3:b7:c7:ff:
                    57:15:53:11:ac:67:fe:85:b6:79:72:2b:8e:34:46:
                    ad:55:a2:81:77:02:2b:7c:71:b0:6f:da:71:a1:40:
                    b6:3a:44:77:6d:62:4d:38:e6:a6:5a:9c:45:e2:1e:
                    0a:3d:59:22:02:12:48:71:0b:c5:62:9f:8d:4a:41:
                    07:60:88:00:82:84:3e:0c:a0:e3:10:9e:6e:61:42:
                    1a:a1:02:84:38:fc:76:bd:61:6f:1c:5e:5c:be:ac:
                    5f:4a:18:71:1f:2b:8d:69:79:7f:a0:5a:81:0e:a1:
                    e1:c4:eb:79:6d:6e:8a:75:61:d7:fe:97:12:f2:8a:
                    d2:d4:89:ba:df:c2:94:62:e0:11:0a:3f:31:e0:d5:
                    62:26:74:6f:d2:44:fb:25:2f:7a:c2:c3:4b:46:e8:
                    76:9f:7c:92:c0:7f:7d:09:1c:a4:e2:71:3b:57:fb:
                    ca:2a:8a:53:aa:8b:eb:40:d3:b5:5b:13:c4:c5:b8:
                    18:41:33:b2:16:9a:02:32:7d:fc:bf:ac:d9:bb:4d:
                    7a:42:38:ed:f6:5e:1c:da:c3:cf:04:8f:c5:ec:6c:
                    d9:d8:a5:b3:db:fd:ad:89:e8:fc:fb:87:80:db:73:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:77:59:FC:15:88:98:6E:02:F8:BC:AB:09:DA:5B:06:FD:EA:15:77
            X509v3 Authority Key Identifier:
                keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.144.0/22
                  88.81.96.0/19
                  185.46.252.0/22
                IPv6:
                  2a02:3d8::/32
                  2a0f:6380::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:87:08:e9:e0:75:bf:8a:c1:43:26:f9:97:53:36:df:ea:ed:
         69:bb:c9:bf:ee:91:23:b3:70:a2:74:d5:79:1c:54:d1:ff:81:
         d9:a1:fc:08:d1:bd:88:5f:3a:31:41:84:d0:d3:f2:fa:4a:d2:
         4e:91:85:af:e5:d0:ab:5c:73:9e:20:f2:67:0f:bc:c4:a4:c4:
         36:2c:a0:c2:6d:eb:58:ce:d2:2f:af:09:90:46:1d:e0:b7:b9:
         56:f7:e9:48:d6:9c:cf:1d:5a:70:4e:58:a5:56:f8:94:a6:32:
         06:2c:7b:c6:a4:30:b1:e8:12:72:eb:e8:14:06:72:44:fe:48:
         28:27:51:a0:ed:31:50:92:52:5d:09:5f:8a:53:d9:df:f8:7c:
         04:4c:86:8e:45:dd:18:01:2a:b9:32:19:b2:56:11:0c:d8:b1:
         4d:8d:35:6f:ad:00:3d:99:4f:45:a2:29:07:b3:c6:7a:77:0f:
         2f:d8:73:eb:3a:ce:b5:e9:96:af:84:11:5d:b2:27:38:29:6c:
         ad:c9:b4:fc:0a:a5:f0:af:24:02:02:a4:d6:e3:5f:24:64:89:
         a5:60:36:45:69:45:80:25:00:19:c7:20:fd:59:8e:14:f3:c9:
         64:65:7a:a9:97:d0:b7:4c:09:1c:81:d9:4c:49:02:32:52:fd:
         eb:ab:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:58:10 2024 by rpki-client on console-ams.rpki-client.org