Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/8YVZ8OTgJl8O4K7vbkqzv9ABpgk.roa
File:                     8YVZ8OTgJl8O4K7vbkqzv9ABpgk.roa (raw, json)
Hash identifier:          km+xhPJFpRyb6bldDmN0TsfMYrGiKoiGv/hYyMTsMio=
Subject key identifier:   F1:85:59:F0:E4:E0:26:5F:0E:E0:AE:EF:6E:4A:B3:BF:D0:01:A6:09
Certificate issuer:       /CN=bc075a22749762ecaaff9cbc217b82f17269e362
Certificate serial:       018CC50144ED1D0D42CE1430C7F567B4AC50
Authority key identifier: BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/8YVZ8OTgJl8O4K7vbkqzv9ABpgk.roa
Signing time:             Mon 01 Jan 2024 12:30:43 +0000
ROA not before:           Mon 01 Jan 2024 12:30:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210728
IP address blocks:        213.173.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:44:ed:1d:0d:42:ce:14:30:c7:f5:67:b4:ac:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc075a22749762ecaaff9cbc217b82f17269e362
        Validity
            Not Before: Jan  1 12:30:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f18559f0e4e0265f0ee0aeef6e4ab3bfd001a609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:16:83:b1:ef:48:48:f9:c4:c9:49:a9:2d:
                    fb:61:be:08:d1:b2:80:be:72:7f:34:28:62:b8:66:
                    23:bf:22:ef:f3:77:02:6f:fe:40:98:8a:b8:96:7f:
                    49:e5:d8:e3:c0:60:8f:c0:97:60:26:85:29:d7:f2:
                    e5:ee:3a:64:6f:06:16:ff:00:da:f7:69:71:ab:65:
                    a2:ed:9a:27:c9:66:23:78:ef:d8:61:9e:3f:50:96:
                    ef:3a:a4:e2:89:fa:cd:a7:0d:1f:8e:e6:8e:25:cb:
                    af:39:23:21:4a:cd:65:af:28:22:b7:b8:55:2b:90:
                    d8:c3:2b:41:cf:e4:fc:69:36:6f:6c:e7:b7:20:b9:
                    84:e7:48:94:11:ee:24:b5:9d:df:57:14:6a:1e:93:
                    4d:f2:19:03:bc:ea:27:8d:8e:32:aa:6a:b6:8c:42:
                    c3:2f:ff:6c:5e:dd:2f:25:75:27:f0:d8:d2:c0:35:
                    5e:1a:d7:65:e5:78:2b:cd:d8:fe:6b:ef:08:83:34:
                    bc:d7:11:91:61:61:fc:13:ad:fd:2a:a2:3b:10:c2:
                    18:2b:47:8c:9f:b0:5b:c7:91:fc:81:21:49:ad:e4:
                    f3:b3:27:b6:aa:50:f5:5c:30:93:8e:e3:9c:65:b4:
                    fe:60:75:70:42:7c:52:53:6a:6f:59:43:04:45:1d:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:59:F0:E4:E0:26:5F:0E:E0:AE:EF:6E:4A:B3:BF:D0:01:A6:09
            X509v3 Authority Key Identifier:
                keyid:BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/8YVZ8OTgJl8O4K7vbkqzv9ABpgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.173.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:8b:d8:98:36:a7:87:b4:ce:6e:48:0c:38:fe:3e:4a:4f:
         cd:6f:4d:e0:5e:a5:f7:af:88:95:18:65:c3:ac:93:95:d4:91:
         a8:f3:a0:4b:7b:2e:e4:f6:90:77:6b:68:fa:51:ea:80:75:54:
         d5:b4:9d:22:7c:33:cb:51:cc:3a:59:a5:34:00:52:b5:8b:fb:
         09:9e:be:1f:78:33:3a:39:73:ec:74:e2:3d:d2:07:61:b9:9a:
         7a:fa:2f:e6:e0:aa:9c:59:fd:ff:cd:3c:39:27:05:e3:78:69:
         31:d5:73:b6:97:92:fe:6d:2d:05:14:0f:97:c6:28:20:22:f0:
         94:e5:db:14:6b:7b:21:42:48:95:42:15:06:de:6d:74:86:b1:
         cc:03:98:20:f5:bf:c5:7e:40:7d:d2:90:3b:71:4d:ee:3c:c6:
         be:34:4e:96:34:df:58:25:35:4c:56:1f:4e:a9:dc:be:56:d5:
         4c:a9:c2:24:42:40:45:50:61:25:68:6b:00:58:1b:84:30:29:
         46:ff:4a:84:7c:eb:1e:f0:bc:5d:99:69:c1:ec:84:f1:e3:3a:
         18:6a:19:6f:88:a0:5b:86:01:84:c2:43:76:4f:4e:95:53:5a:
         8e:2d:07:ea:a1:f7:71:2f:63:f5:38:64:8d:5c:b0:0d:67:ea:
         9b:e0:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:43 2024 by rpki-client on console-ams.rpki-client.org