Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa
File:                     Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa (raw, json)
Hash identifier:          BzTY1HGFdq6/1OuudHn2dPpgYPVi9k1ezkXuUXqK9Us=
Subject key identifier:   4E:0E:A5:1B:8E:CD:47:66:2B:AA:5D:FF:B5:3F:EA:AC:4F:84:CE:F4
Certificate issuer:       /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial:       018CC86EFA950983A96A3AA7D2A28E3BC9E0
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa
Signing time:             Tue 02 Jan 2024 04:29:25 +0000
ROA not before:           Tue 02 Jan 2024 04:29:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41256
IP address blocks:        213.92.216.0/21 maxlen: 21
                          213.92.128.0/18 maxlen: 18
                          213.92.128.0/17 maxlen: 17
                          213.92.240.0/21 maxlen: 21
                          213.92.248.0/22 maxlen: 22
                          213.92.252.0/23 maxlen: 23
                          213.92.192.0/22 maxlen: 22
                          213.92.190.0/23 maxlen: 23
                          213.92.192.0/18 maxlen: 18
                          213.92.196.0/22 maxlen: 22
                          213.92.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6e:fa:95:09:83:a9:6a:3a:a7:d2:a2:8e:3b:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
        Validity
            Not Before: Jan  2 04:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e0ea51b8ecd47662baa5dffb53feaac4f84cef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:b5:52:64:84:84:36:b8:c6:83:10:fb:4a:
                    3f:55:06:b2:42:53:45:76:44:7f:6a:0a:47:31:25:
                    b9:2e:f8:b2:ec:0d:27:fa:f7:e6:03:fb:01:49:32:
                    a1:3f:16:22:48:cc:56:63:e2:db:55:b0:68:0d:3d:
                    32:5b:8a:98:61:7f:8d:05:e3:2b:cc:e8:14:6b:14:
                    e6:a0:84:37:65:26:69:fe:27:5c:20:3f:f6:c5:49:
                    e4:30:61:27:dc:d5:e9:2f:4a:0d:3d:a0:c9:85:43:
                    87:d2:64:ad:1d:9b:73:6e:18:9b:02:72:34:c1:5e:
                    8f:c3:41:77:9c:dd:97:e3:f9:d5:67:6d:52:b7:27:
                    6b:e1:fe:38:b6:a9:cd:b5:8c:67:34:9b:da:e3:88:
                    a5:f3:12:b8:e3:6c:ce:03:b1:99:0d:5f:6f:89:3b:
                    5e:37:0a:0c:ce:71:2f:b0:ab:2e:62:f7:13:fe:13:
                    8c:e1:e1:6e:04:cd:1b:83:87:af:f7:a1:0e:ce:80:
                    4a:78:df:7e:33:0e:a3:27:b4:f0:3d:aa:44:66:18:
                    89:1f:4d:03:4a:02:c5:aa:50:7b:7d:17:26:02:67:
                    0f:a0:ff:1d:69:b7:c3:ac:59:c5:ef:49:f5:a3:a3:
                    86:aa:7b:db:96:74:1b:30:1c:46:20:e4:71:52:9b:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:A5:1B:8E:CD:47:66:2B:AA:5D:FF:B5:3F:EA:AC:4F:84:CE:F4
            X509v3 Authority Key Identifier:
                keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.92.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:fc:5e:fe:56:d6:f3:e1:3d:4c:df:6e:76:45:35:28:0c:
         e3:5d:59:c3:4f:64:8d:85:c4:94:b6:d7:ab:41:00:4d:6b:1f:
         2e:61:c5:04:4c:24:8b:96:f8:98:87:7e:a7:ca:ba:af:ee:86:
         6e:8e:e1:6c:c6:00:48:3b:5f:8f:d3:bf:46:70:4e:08:bf:08:
         ae:fb:9b:0e:58:b4:45:06:1a:94:a1:6f:c0:05:89:c5:64:ee:
         5e:18:73:c2:f1:54:93:cd:96:c2:48:9f:3a:94:dc:98:95:7d:
         5b:4c:6a:37:0c:f7:da:14:f3:57:87:9e:0e:6c:c1:be:a8:18:
         a0:47:1e:07:86:f3:0f:64:a0:15:2d:94:b3:dd:6e:79:9e:eb:
         2b:92:40:fe:b0:86:26:d6:58:ba:16:3f:f4:74:58:fc:7a:01:
         93:1a:9b:d4:52:3a:10:2d:1a:30:4c:6a:e3:87:2e:52:93:33:
         88:b5:10:cd:0d:76:5a:45:74:44:df:08:2e:bd:07:b0:59:22:
         5b:22:e1:ee:df:b0:98:60:59:c6:28:61:f2:d5:8c:7a:1a:f9:
         21:6b:cc:27:2b:a3:08:21:2b:1c:7c:ef:3d:38:23:5d:c6:40:
         9c:6e:fd:0a:6b:10:26:78:c4:05:c1:ea:94:f0:8d:f1:d2:bb:
         46:95:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:27 2024 by rpki-client on console-fra.rpki-client.org