Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa
File:                     Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa (raw, json)
Hash identifier:          P4s6GLevOrx2CJ0bVX/4CvCtHDVfb2x8hCs8zG8YwEg=
Subject key identifier:   63:B2:79:64:C2:17:69:64:78:40:58:06:66:0C:D8:CF:AB:15:88:F6
Certificate issuer:       /CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Certificate serial:       018F80CE78922AC5DD6D5AF0B8A90097CDF7
Authority key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa
Signing time:             Thu 16 May 2024 09:49:25 +0000
ROA not before:           Thu 16 May 2024 09:49:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201746
IP address blocks:        94.158.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:80:ce:78:92:2a:c5:dd:6d:5a:f0:b8:a9:00:97:cd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
        Validity
            Not Before: May 16 09:49:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=63b27964c217696478405806660cd8cfab1588f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:20:63:d3:22:19:1c:58:89:de:e8:c1:b5:
                    4f:82:99:93:74:57:28:93:5b:14:64:2a:6f:f6:64:
                    a8:b9:2a:96:77:03:39:fa:f6:77:9b:d7:06:67:fa:
                    5a:41:9f:c8:f8:09:10:31:52:63:98:59:bf:bd:e9:
                    f1:5e:48:65:a4:48:01:c4:37:59:3d:7f:67:6e:cb:
                    55:0d:cb:37:7b:06:f6:e9:45:d7:02:50:70:27:db:
                    c8:40:d4:72:32:35:ad:93:50:8e:8d:64:5f:d4:92:
                    9d:2c:94:49:4a:c2:4f:bb:4d:b9:5b:ac:db:cd:1b:
                    76:18:ba:8d:5a:b7:59:cd:ff:82:a6:87:45:2c:c3:
                    5c:06:0f:9c:a9:50:ec:f0:7f:1e:06:dd:a3:88:2a:
                    a3:b6:e8:43:31:ae:8f:23:e4:33:8f:95:29:7a:35:
                    73:44:62:55:36:6e:65:59:eb:d7:5e:4a:cd:f1:95:
                    bd:6f:3a:f3:4c:26:e9:c7:96:74:d6:10:d6:51:d9:
                    d4:f2:b1:88:fe:59:87:5f:4d:57:7e:70:ae:56:67:
                    c2:b7:04:fd:e3:c4:ad:27:ae:41:70:13:28:0b:bc:
                    a7:58:9e:b8:c3:a0:a6:93:11:f5:40:0a:68:e8:60:
                    41:12:8f:43:6d:30:a4:fa:05:73:13:18:6f:48:5c:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B2:79:64:C2:17:69:64:78:40:58:06:66:0C:D8:CF:AB:15:88:F6
            X509v3 Authority Key Identifier:
                keyid:92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.158.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:c1:67:34:15:f6:b7:7d:9d:90:5f:c8:53:f0:df:5a:91:2b:
         76:3b:d8:25:45:82:9e:3d:f4:4e:ac:a5:e7:d8:cb:b6:2d:98:
         58:6d:1f:92:7f:7c:7e:f4:5c:94:93:8b:d2:63:92:0f:4c:ee:
         87:da:4f:bc:5f:a4:bf:f6:e0:0c:34:33:24:da:01:b0:61:5b:
         19:fe:39:fc:9b:06:86:e8:fb:ea:81:47:91:69:67:2d:d9:9c:
         99:04:b4:64:49:8e:91:4f:09:ab:f0:e2:b3:45:67:1a:2a:14:
         0c:16:4e:c6:af:cb:76:1b:d9:c2:c6:f5:ef:ba:ef:f4:33:2e:
         1d:c7:20:d1:13:4d:39:76:af:8c:fa:a2:ea:f1:d9:dc:9f:e9:
         4d:4f:cd:af:12:56:6b:53:07:2f:66:dd:ec:02:a8:3c:dc:bb:
         57:ea:ff:41:9c:7b:7c:b6:e9:57:3d:89:34:18:5f:3b:5d:4c:
         b9:28:92:3b:18:4e:a8:71:5a:21:9f:48:d4:8d:01:bc:18:51:
         e1:f3:50:9f:6b:eb:18:10:43:99:67:2b:96:97:70:11:09:fb:
         d5:7f:41:77:ae:25:bd:0c:e6:60:d5:5b:51:ba:73:5f:ca:01:
         9b:2d:d5:e1:64:b0:17:77:23:9b:3d:49:ec:d7:c5:0f:ce:10:
         d3:64:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:05:19 2024 by rpki-client on console-ams.rpki-client.org