Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa
File:                     vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa (raw, json)
Hash identifier:          HwU22PK01rBgtN18WDZiMNETC5BXPbijBWsldZQr/us=
Subject key identifier:   BE:C9:BF:26:51:CA:74:DF:20:49:22:62:76:34:25:47:D6:2B:F7:F3
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       018CC492D2A10BCAC47226583A8199998613
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa
Signing time:             Mon 01 Jan 2024 10:30:05 +0000
ROA not before:           Mon 01 Jan 2024 10:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39074
IP address blocks:        5.160.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:d2:a1:0b:ca:c4:72:26:58:3a:81:99:99:86:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan  1 10:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bec9bf2651ca74df2049226276342547d62bf7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:be:8e:f6:52:6d:1c:39:84:b3:1c:70:9a:
                    6f:fb:31:e8:55:2d:de:12:c8:08:93:6b:92:68:35:
                    51:0d:13:9e:2e:78:10:15:b7:af:a9:a2:85:03:2a:
                    3b:60:73:3b:2d:2d:ba:f5:15:95:8a:cc:21:1a:cb:
                    bb:57:83:76:52:08:d2:3f:15:12:14:0d:b5:60:40:
                    fd:3f:5c:9f:3a:92:27:3b:c4:17:df:3d:9c:a1:72:
                    c5:e2:ba:9b:1f:51:8f:5c:50:44:17:81:2d:4f:a8:
                    69:20:9d:7b:0b:97:30:a7:d3:ab:99:2c:30:1d:fa:
                    cd:52:5d:3a:21:2c:ac:12:46:a1:ec:26:09:07:59:
                    19:1b:f4:45:72:4b:98:05:86:1c:58:9f:7d:6d:37:
                    d3:a2:5e:bd:b6:fb:7c:a5:af:ae:2c:68:45:3a:78:
                    f8:2b:44:d4:22:23:99:a6:07:9d:91:2a:47:be:14:
                    c7:2d:ec:00:6c:a4:37:18:ff:f0:b5:22:f0:7c:2c:
                    ca:87:e4:96:e3:f1:9c:2e:0c:da:93:ed:9b:c5:e9:
                    54:ed:a3:19:32:a3:68:d1:64:4d:32:ad:99:c2:72:
                    42:2d:3a:0f:9e:2d:d9:2f:70:a2:43:d1:cd:34:75:
                    45:6c:1c:ec:ee:3a:8a:48:b3:d9:a2:9b:52:d8:5e:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C9:BF:26:51:CA:74:DF:20:49:22:62:76:34:25:47:D6:2B:F7:F3
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.160.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:2f:2a:0e:2e:30:1b:c9:37:7b:1a:29:6a:d3:da:eb:ae:d1:
         08:fb:65:23:c0:e5:6b:5c:54:f0:e2:51:9f:15:1d:6f:44:80:
         92:21:f6:9f:49:5b:4a:4d:56:74:96:63:ec:1c:26:20:dc:7d:
         f5:64:15:6b:7c:4b:d3:3c:65:0f:c0:18:c3:a6:59:c4:56:b3:
         50:14:fc:eb:99:b5:95:ab:58:bf:7b:54:fd:1d:ae:b1:9c:f3:
         fe:e5:76:ce:b7:b9:c3:a5:2f:ae:23:5b:53:2d:9b:23:29:69:
         36:7b:b6:a5:1b:dd:63:a3:fc:10:8b:68:c2:65:15:aa:04:0e:
         6e:c7:a3:59:2b:b6:e6:db:f4:cc:18:7c:ae:50:c4:fd:51:86:
         92:57:33:52:30:b9:3e:f2:5d:35:11:f4:22:b2:58:dd:dd:44:
         f3:5b:63:ee:32:28:45:b7:55:02:45:65:bd:21:d0:f8:95:e6:
         5a:8b:b9:34:14:07:66:57:8a:a8:9a:ff:5a:c0:a4:93:09:24:
         95:3e:1c:63:1f:1b:eb:f9:f5:ab:91:2c:60:07:14:be:04:c2:
         2e:b8:16:e8:65:4b:db:cf:7e:d8:fa:31:d8:fa:9b:f8:05:a1:
         88:b9:c5:e8:24:cc:f2:dd:b5:bf:18:6b:69:dd:57:f7:40:09:
         8a:66:2c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org