Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/VmCjzdlSK4pGZmouNiQYwMklcPI.roa
File:                     VmCjzdlSK4pGZmouNiQYwMklcPI.roa (raw, json)
Hash identifier:          Cl401h5h/BET638OXkM9Wf30y6YZE4Qx/crQ0tTbpCw=
Subject key identifier:   56:60:A3:CD:D9:52:2B:8A:46:66:6A:2E:36:24:18:C0:C9:25:70:F2
Certificate issuer:       /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial:       018D641F6805C9B0E3134C81185E5815CB9F
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/VmCjzdlSK4pGZmouNiQYwMklcPI.roa
Signing time:             Thu 01 Feb 2024 10:03:16 +0000
ROA not before:           Thu 01 Feb 2024 10:03:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60191
IP address blocks:        91.223.31.0/24 maxlen: 24
                          176.123.60.0/23 maxlen: 23
                          185.47.64.0/23 maxlen: 23
                          185.47.66.0/23 maxlen: 23
                          185.206.112.0/22 maxlen: 22
                          185.223.53.0/24 maxlen: 24
                          193.162.104.0/24 maxlen: 24
                          213.108.112.0/21 maxlen: 21
                          2a01:8a60::/32 maxlen: 32
                          2a01:8a60:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:64:1f:68:05:c9:b0:e3:13:4c:81:18:5e:58:15:cb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
        Validity
            Not Before: Feb  1 10:03:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5660a3cdd9522b8a46666a2e362418c0c92570f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:71:bd:02:a2:51:79:52:c4:e1:31:5a:66:
                    37:46:fe:ae:ae:9b:30:2e:82:9f:e3:c0:ac:48:e3:
                    65:5a:e9:1e:f9:cc:03:d6:e6:35:f5:98:76:d6:ae:
                    37:0a:a5:a7:e0:69:c2:0e:ea:b5:1c:d1:10:be:97:
                    f2:92:8c:fc:c6:e9:9c:fb:2f:c8:7b:0b:93:48:0b:
                    63:df:95:da:a5:72:0b:6b:b5:9d:c6:15:cb:27:62:
                    ca:96:db:32:23:63:2f:e6:d6:dc:56:84:65:7e:de:
                    67:c9:a0:f3:f1:21:fd:26:6f:af:bc:d0:74:18:fd:
                    be:a0:84:30:ff:c4:30:ea:a1:6e:eb:48:d0:80:b2:
                    7b:13:14:67:e0:89:40:27:7d:c6:de:f1:21:10:a4:
                    a9:f3:ce:65:66:e4:f6:2e:b9:39:d8:a1:5a:84:ab:
                    92:b6:53:2a:a4:de:95:81:55:05:15:dd:0f:a0:f2:
                    e4:37:ec:c6:68:7a:69:0c:ed:65:7d:52:ab:86:ec:
                    7f:a2:36:02:8e:86:7d:03:e1:f5:01:47:13:65:96:
                    1d:6e:11:f3:7c:47:0d:f0:b7:dd:6f:ef:a5:8f:81:
                    c8:b1:0f:e7:59:3d:f5:84:7c:0d:26:37:ea:31:d9:
                    bc:58:51:1e:28:94:fb:44:55:cc:de:6f:68:61:c1:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:60:A3:CD:D9:52:2B:8A:46:66:6A:2E:36:24:18:C0:C9:25:70:F2
            X509v3 Authority Key Identifier:
                keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/VmCjzdlSK4pGZmouNiQYwMklcPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.31.0/24
                  176.123.60.0/23
                  185.47.64.0/22
                  185.206.112.0/22
                  185.223.53.0/24
                  193.162.104.0/24
                  213.108.112.0/21
                IPv6:
                  2a01:8a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:ab:39:c3:0a:69:14:ff:b2:5d:47:d6:65:05:16:7c:c5:
         aa:cd:06:29:5d:d1:e3:41:e4:3b:61:8a:74:35:c4:51:cc:7a:
         ec:ce:ba:a4:85:df:87:6a:6a:35:2d:8e:64:32:50:ba:70:70:
         70:71:72:3c:ad:a0:df:5d:24:7e:39:f5:06:ad:36:99:4e:f9:
         c7:c4:60:07:e1:7b:7d:35:fd:7b:cd:8b:49:54:99:4f:c0:3c:
         c3:dc:17:f7:d9:53:4f:54:58:27:44:23:23:18:fe:64:8a:dd:
         78:f2:64:e6:be:ce:99:38:d9:fa:c6:c9:46:5a:3b:ac:7f:54:
         0c:c0:ad:1d:88:51:df:3a:1a:5a:2b:8d:d5:e9:68:93:9d:4f:
         1d:7a:27:8f:35:aa:89:d1:67:95:e2:f6:64:5b:8f:6c:7a:4c:
         ab:1d:1d:38:b9:3d:8e:73:bb:2f:1e:73:bb:4b:01:3f:03:fa:
         08:6c:2c:30:b0:9a:e8:d0:bc:e7:8e:17:4f:0f:70:b9:47:3d:
         a8:6d:de:97:62:22:00:4a:a1:18:a1:ff:8b:9c:d1:cd:1d:87:
         d2:ae:d6:3e:86:55:43:fb:f6:dc:90:b6:4f:8c:d3:d6:d5:65:
         cb:a7:cf:dd:6a:1c:76:60:a8:9e:0d:a0:c0:c7:8a:e4:f1:10:
         d5:49:2c:ac
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAY1kH2gFybDjE0yBGF5YFcufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGU1MzAxNGJmMDM4YWRlMGQ3N2FlNjc4ZmY2ZGYzNGNh
NTNkYzAwHhcNMjQwMjAxMTAwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjYwYTNjZGQ5NTIyYjhhNDY2NjZhMmUzNjI0MThjMGM5MjU3MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JVxvQKiUXlSxOExWmY3Rv6urpsw
LoKf48CsSONlWuke+cwD1uY19Zh21q43CqWn4GnCDuq1HNEQvpfykoz8xumc+y/I
ewuTSAtj35XapXILa7WdxhXLJ2LKltsyI2Mv5tbcVoRlft5nyaDz8SH9Jm+vvNB0
GP2+oIQw/8Qw6qFu60jQgLJ7ExRn4IlAJ33G3vEhEKSp885lZuT2Lrk52KFahKuS
tlMqpN6VgVUFFd0PoPLkN+zGaHppDO1lfVKrhux/ojYCjoZ9A+H1AUcTZZYdbhHz
fEcN8Lfdb++lj4HIsQ/nWT31hHwNJjfqMdm8WFEeKJT7RFXM3m9oYcEdJQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFFZgo83ZUiuKRmZqLjYkGMDJJXDyMB8GA1UdIwQY
MBaAFDQOUwFL8Dit4Nd65nj/bfNMpT3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDct
ZTE0ODIzNWI3NzIzLzEvVm1DanpkbFNLNHBHWm1vdU5pUVl3TWtsY1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDctZTE0ODIzNWI3NzIz
LzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAW98fAwQB
sHs8AwQCuS9AAwQCuc5wAwQAud81AwQAwaJoAwQD1WxwMA0EAgACMAcDBQAqAYpg
MA0GCSqGSIb3DQEBCwUAA4IBAQAr/6s5wwppFP+yXUfWZQUWfMWqzQYpXdHjQeQ7
YYp0NcRRzHrszrqkhd+Hamo1LY5kMlC6cHBwcXI8raDfXSR+OfUGrTaZTvnHxGAH
4Xt9Nf17zYtJVJlPwDzD3Bf32VNPVFgnRCMjGP5kit148mTmvs6ZONn6xslGWjus
f1QMwK0diFHfOhpaK43V6WiTnU8deiePNaqJ0WeV4vZkW49sekyrHR04uT2Oc7sv
HnO7SwE/A/oIbCwwsJro0LznjhdPD3C5Rz2obd6XYiIASqEYof+LnNHNHYfSrtY+
hlVD+/bckLZPjNPW1WXLp8/dahx2YKieDaDAx4rk8RDVSSys
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:34:35 2024 by rpki-client on console-fra.rpki-client.org