Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/wks5M1pKpcuQboKVY-a4pFofgHM.roa
File:                     wks5M1pKpcuQboKVY-a4pFofgHM.roa (raw, json)
Hash identifier:          cuWBBH2BQcQx7q/ptjVzheIwBIdpgizgJfvo6+iwm0Y=
Subject key identifier:   C2:4B:39:33:5A:4A:A5:CB:90:6E:82:95:63:E6:B8:A4:5A:1F:80:73
Certificate issuer:       /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial:       018CC8DE0FD73511971AA1B3751574824467
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/wks5M1pKpcuQboKVY-a4pFofgHM.roa
Signing time:             Tue 02 Jan 2024 06:30:45 +0000
ROA not before:           Tue 02 Jan 2024 06:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16292
IP address blocks:        5.63.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:0f:d7:35:11:97:1a:a1:b3:75:15:74:82:44:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
        Validity
            Not Before: Jan  2 06:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c24b39335a4aa5cb906e829563e6b8a45a1f8073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:9a:c9:c4:2c:2c:93:22:cd:0e:1c:7a:12:
                    0c:70:09:69:1d:53:fc:60:c7:b0:16:81:7b:a3:ba:
                    6e:cf:11:23:9a:76:23:51:16:3f:74:b4:ca:0a:01:
                    ae:c8:57:78:08:dc:6a:3d:d6:2c:5e:17:22:a3:ca:
                    b4:ed:b7:65:2e:63:a2:07:c6:f7:83:22:0a:40:73:
                    39:f4:54:8e:bd:8d:6e:4e:44:48:e9:b4:ab:be:e8:
                    30:a3:05:90:0d:2a:50:cd:1b:82:a7:87:df:15:19:
                    4b:47:0f:c9:04:77:71:d8:f6:9b:54:ce:9d:4c:2f:
                    ab:93:bb:e6:02:6f:30:07:e3:54:da:a1:8d:13:e2:
                    62:9b:68:f7:53:3c:9c:2f:bc:14:1f:cc:1c:91:6b:
                    62:ef:2e:6e:13:bb:c8:fc:a7:26:a3:8d:ac:48:ce:
                    58:42:a2:3b:8e:77:62:c3:ac:61:7d:97:be:72:37:
                    1e:26:33:cd:2e:8d:0b:4b:b3:de:07:a1:08:37:1d:
                    5a:fa:47:d1:25:2d:94:f7:d8:46:ac:89:9a:c2:3c:
                    8a:0b:2d:05:70:c9:b6:0b:a9:d1:42:66:f9:e6:f6:
                    4d:80:12:fd:0e:7e:11:f1:93:ef:ba:74:e9:69:60:
                    58:18:a7:9a:12:db:2a:a6:f9:ea:d8:73:69:80:cb:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4B:39:33:5A:4A:A5:CB:90:6E:82:95:63:E6:B8:A4:5A:1F:80:73
            X509v3 Authority Key Identifier:
                keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/wks5M1pKpcuQboKVY-a4pFofgHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.63.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:32:0b:93:ac:53:2b:9a:fe:61:f7:ae:c5:75:ea:46:b8:
         b9:34:fc:cb:32:c8:af:a7:7e:49:8a:ed:89:86:7c:a4:ff:a1:
         f6:9b:b8:66:a5:86:61:80:8f:05:63:2a:b7:11:83:4a:3c:ff:
         57:76:23:4a:01:9a:92:a8:cc:95:79:0b:3c:c1:6f:13:7a:8c:
         81:33:c0:44:75:3b:0e:02:b1:31:8c:56:53:6a:3e:6e:90:b6:
         13:2f:4e:e9:8f:01:d9:26:e9:d0:86:9d:4a:cc:34:db:7f:f0:
         16:d8:00:3a:17:0c:2a:28:3b:08:b0:ea:a3:cd:5a:2d:03:9c:
         75:5b:15:8a:08:39:bb:7b:ab:5c:5b:b2:cf:ab:0e:ce:bf:48:
         77:13:a1:13:98:f3:5f:f9:ff:2a:f0:65:61:7d:5e:a8:46:b5:
         d6:b9:14:51:cc:05:c5:2d:26:29:56:5f:ba:57:30:09:28:90:
         55:c8:8e:d6:49:57:a4:15:8b:cf:c3:a7:4e:2b:c7:73:f9:6c:
         b7:9d:7c:ce:bb:97:ab:9d:1a:2a:ef:46:91:d8:21:82:d4:40:
         34:ca:0e:a8:86:b4:29:0d:10:e9:f8:48:7c:77:45:41:21:62:
         24:4e:d9:c1:f2:99:1a:f4:4d:f0:fd:c6:ec:69:9c:fc:73:83:
         05:44:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:58:25 2024 by rpki-client on console-fra.rpki-client.org