Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa
File:                     U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa (raw, json)
Hash identifier:          xYdDt5sefA9c3Do+dzsPZm4stlI6uY172Lao1mLLokc=
Subject key identifier:   53:C0:E8:10:E6:19:C2:2D:E1:17:10:E1:23:F6:5E:C8:4C:C0:29:68
Certificate issuer:       /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial:       0196E7599737A638138E71998335B8A0876F
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa
Signing time:             Mon 19 May 2025 07:02:10 +0000
ROA not before:           Mon 19 May 2025 07:02:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9318
IP address blocks:        46.236.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e7:59:97:37:a6:38:13:8e:71:99:83:35:b8:a0:87:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
        Validity
            Not Before: May 19 07:02:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53c0e810e619c22de11710e123f65ec84cc02968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:05:39:11:db:00:b3:07:b6:ae:46:d3:9c:
                    cd:8c:a6:9d:8c:3e:3f:b0:37:21:69:1a:4a:6d:ec:
                    78:31:c5:8e:bc:a6:a2:8c:8f:e5:81:bc:81:84:b8:
                    7a:bf:6c:06:25:73:c4:27:46:05:9a:66:62:4f:9e:
                    44:d6:9d:b1:9c:52:d7:52:b5:76:f8:f0:11:e9:ad:
                    51:ce:fd:eb:c0:73:8c:00:0a:65:f4:83:f6:ab:49:
                    66:84:ed:67:3c:b5:2b:cf:9e:4b:7a:f0:f2:aa:66:
                    35:27:05:1f:94:a7:d8:c8:4f:b0:fa:d3:f5:a7:6f:
                    c3:b8:0c:6d:c7:79:07:52:f6:8e:c6:83:04:db:48:
                    4c:5a:2a:63:a2:ef:3a:7f:fa:ec:c7:11:11:11:a2:
                    a6:0c:12:fe:27:e8:5d:40:df:8f:9d:31:33:4d:77:
                    52:3b:35:6c:99:f1:d9:d5:4c:9f:83:f6:2e:80:0c:
                    ab:4f:0e:fd:09:f5:ca:06:3b:1c:73:7c:6a:1e:65:
                    97:1f:ae:37:9f:ea:44:1a:e3:dc:c7:fe:e7:da:f6:
                    28:f4:53:f3:db:29:18:71:8c:e0:f8:1e:a6:e5:43:
                    b0:c1:83:79:56:d1:1f:a1:34:d3:7c:92:88:58:c3:
                    4c:58:9d:75:1c:c1:45:8b:6e:01:33:69:57:51:6d:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C0:E8:10:E6:19:C2:2D:E1:17:10:E1:23:F6:5E:C8:4C:C0:29:68
            X509v3 Authority Key Identifier:
                keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.236.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:18:f7:92:66:1b:2c:86:03:c7:14:ab:68:ce:0b:95:cd:fd:
         50:16:f8:2e:eb:0a:e3:d0:1a:40:22:ad:80:52:9a:c4:71:5d:
         20:dc:1a:2a:e8:32:1c:91:f8:73:f4:58:fa:6d:ba:77:6b:23:
         c4:7a:94:ce:f1:01:bb:c6:ab:74:f8:93:48:8f:94:a7:32:21:
         da:e3:1e:b3:55:60:f8:cc:db:0d:58:91:77:3e:66:6c:0d:31:
         bd:e8:f4:c9:e7:1b:49:04:3a:4a:0d:42:ad:cc:00:a0:21:54:
         66:e2:0e:c1:ca:f8:7c:95:1f:83:f4:53:84:38:e7:67:b1:13:
         ad:5b:07:c9:c7:49:aa:f2:45:72:9b:e9:f4:77:2c:fc:6c:fa:
         28:c4:54:cb:2a:d5:c9:0f:94:de:6c:7a:f2:55:88:54:3e:92:
         76:41:92:6c:14:b2:fa:90:8f:d2:8a:59:a7:6b:90:8b:4a:68:
         7d:48:89:90:a4:4e:60:7a:3d:e1:f5:91:44:e0:ca:9a:c2:7a:
         0f:2b:b6:50:8e:b9:06:88:a7:9b:bb:de:84:b9:53:9b:69:29:
         12:be:79:63:24:71:e0:a4:ec:04:7d:76:bf:8b:86:27:30:06:
         0d:7d:29:98:55:55:2f:65:e5:36:0e:2a:22:cc:57:8c:97:74:
         22:3a:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:44:17 2025 by rpki-client