Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/MqQ8JwmG8t9DD3JB1HNlSD9812o.roa
File:                     MqQ8JwmG8t9DD3JB1HNlSD9812o.roa (raw, json)
Hash identifier:          FMKDfgZTk82B/LRBhq+9PEqBmELPnka580RUtLMHx+U=
Subject key identifier:   32:A4:3C:27:09:86:F2:DF:43:0F:72:41:D4:73:65:48:3F:7C:D7:6A
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       018F59950807154D3EEC2F1559AC79432824
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/MqQ8JwmG8t9DD3JB1HNlSD9812o.roa
Signing time:             Wed 08 May 2024 19:01:30 +0000
ROA not before:           Wed 08 May 2024 19:01:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208410
IP address blocks:        212.102.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:95:08:07:15:4d:3e:ec:2f:15:59:ac:79:43:28:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: May  8 19:01:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=32a43c270986f2df430f7241d47365483f7cd76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:dd:86:4d:f9:1f:9f:e1:76:7b:b7:57:5b:
                    0a:1c:20:1a:3c:39:83:78:1a:fe:de:a8:a7:db:20:
                    3a:dd:e3:f7:32:1d:41:fb:b7:b7:4d:fb:98:ba:b3:
                    5d:4a:73:d0:d6:82:92:98:76:ee:b1:42:b1:f0:e6:
                    44:d4:32:ec:26:3d:87:cb:49:7f:cb:67:ca:e3:c1:
                    b7:8d:5f:20:9d:2a:3c:44:a6:1b:f0:b6:c8:c8:5c:
                    10:4c:b5:f0:8d:18:42:38:b4:3e:6f:58:4d:3e:b2:
                    b6:63:49:c8:de:aa:71:66:56:7d:6a:46:7e:be:97:
                    e4:c4:8c:2d:2a:8e:15:f2:31:6d:0c:b2:77:29:89:
                    d9:66:c3:5e:68:c1:b3:3a:6b:9c:d8:47:19:5d:62:
                    35:56:8a:b0:51:4c:1d:92:2b:7f:88:bb:06:d1:5a:
                    bd:6d:ef:e3:5e:57:8f:0b:3f:7a:6c:1f:f4:42:d0:
                    1e:b0:dc:22:0f:df:db:17:b6:57:8f:96:cb:9d:fa:
                    d7:ed:3e:f2:8a:bc:c1:08:66:4a:d8:65:12:e1:56:
                    ea:2b:29:ed:f2:06:78:2c:26:18:db:14:d3:5c:d2:
                    5d:ad:4d:92:d6:0e:d5:eb:73:3f:e3:66:14:b5:96:
                    3a:71:c8:70:20:b1:0a:71:96:fe:7e:b4:12:c3:21:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A4:3C:27:09:86:F2:DF:43:0F:72:41:D4:73:65:48:3F:7C:D7:6A
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/MqQ8JwmG8t9DD3JB1HNlSD9812o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.102.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:08:6b:fa:12:7a:5f:4a:bb:96:b8:39:44:ce:bd:f2:3b:96:
         88:b9:71:91:89:78:b1:35:14:45:34:81:ff:f8:32:4a:3e:7d:
         c9:61:a0:a9:49:fa:2d:dc:4e:22:2f:28:36:8c:6c:a5:5d:25:
         46:28:50:d5:12:11:35:7f:b7:68:48:8b:8c:3a:39:5f:f6:11:
         92:b4:9f:e0:d7:86:62:c3:e2:9f:b6:a6:c3:0d:9d:96:cf:9b:
         ee:fa:ca:47:d2:04:61:91:06:c2:6c:ce:09:99:c6:1b:64:c6:
         70:bc:4b:b8:99:2e:e0:6f:3d:17:78:c3:23:8a:1d:e6:98:bb:
         81:ce:cd:33:b7:c7:14:c9:32:b5:f9:31:b7:c4:05:7b:4e:c0:
         41:89:34:4a:44:eb:2e:0b:cd:1c:92:bd:dd:8c:bf:26:85:32:
         e0:09:8d:58:77:2c:c3:be:c8:03:a9:89:63:0c:70:9c:c4:0b:
         1a:40:98:36:a1:1c:07:6c:6e:af:0f:48:84:45:58:59:13:ca:
         ef:40:5a:f3:2d:9b:59:82:fe:46:9c:0a:16:8a:73:16:f2:f6:
         97:9e:6e:61:3d:f7:7d:94:fb:cd:c4:d8:f4:72:48:55:87:b4:
         71:f9:4a:26:67:49:73:41:17:66:aa:45:e5:34:16:59:88:24:
         61:95:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:04:32 2024 by rpki-client on console-fra.rpki-client.org