Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/9cNkOnvTCog2hgiasaGZdrnPHbM.roa
File:                     9cNkOnvTCog2hgiasaGZdrnPHbM.roa (raw, json)
Hash identifier:          zS/Xw5VN1/8hexWf6gdCNIvqiL7JGNesOL/kTQHZ+ew=
Subject key identifier:   F5:C3:64:3A:7B:D3:0A:88:36:86:08:9A:B1:A1:99:76:B9:CF:1D:B3
Certificate issuer:       /CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
Certificate serial:       018CC72754563C6DC7E9EC668E0B62441113
Authority key identifier: 65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/9cNkOnvTCog2hgiasaGZdrnPHbM.roa
Signing time:             Mon 01 Jan 2024 22:31:32 +0000
ROA not before:           Mon 01 Jan 2024 22:31:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     24904
IP address blocks:        194.38.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:54:56:3c:6d:c7:e9:ec:66:8e:0b:62:44:11:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
        Validity
            Not Before: Jan  1 22:31:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5c3643a7bd30a883686089ab1a19976b9cf1db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:74:36:17:ad:fb:5f:af:e0:fb:3d:4d:f5:
                    8c:86:f5:29:43:62:9c:15:81:24:6b:9c:bd:d3:d2:
                    8b:95:d2:69:04:6b:de:89:81:00:e8:9a:27:eb:79:
                    7b:69:43:ad:c5:ca:a8:a0:8e:9f:a7:9f:54:d8:d7:
                    92:28:16:c0:b2:f4:93:c8:8d:79:d4:43:41:b7:b0:
                    a3:3a:c8:15:e5:05:be:34:45:24:b3:d5:b2:57:86:
                    86:62:63:c4:d0:25:09:f2:69:34:8e:ac:f3:53:3b:
                    6b:de:12:77:b6:d1:a8:a5:04:5b:a5:9b:07:64:30:
                    f9:09:95:15:4b:d1:cf:25:78:1c:aa:55:b4:83:b9:
                    f4:a6:dd:b9:02:cf:59:3b:2a:c0:15:ee:40:df:da:
                    e3:22:76:ac:70:a1:d8:37:91:67:70:a9:92:64:8c:
                    dd:aa:e2:d7:7c:e3:c7:b2:76:45:40:c9:7e:f2:ac:
                    bb:5d:c5:02:e0:23:ce:d7:38:59:f7:fd:82:cb:6c:
                    12:a5:d9:b2:69:a4:03:fe:5d:fb:e8:ce:94:98:1f:
                    98:b3:1b:d0:d7:4d:59:04:b3:54:72:70:57:58:c1:
                    7f:90:bc:d2:ef:1c:73:67:6c:f9:81:1f:05:a7:38:
                    db:9d:bf:be:97:cd:13:35:67:fc:84:99:1d:6a:f2:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:64:3A:7B:D3:0A:88:36:86:08:9A:B1:A1:99:76:B9:CF:1D:B3
            X509v3 Authority Key Identifier:
                keyid:65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/9cNkOnvTCog2hgiasaGZdrnPHbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.38.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:b8:80:cb:9c:4b:6b:a2:96:b9:46:cc:2d:f3:9f:2b:c2:
         10:fa:36:76:e2:3e:df:6a:9c:31:c9:f9:6e:a4:ed:ec:b6:8a:
         02:d9:f0:db:05:98:48:bb:55:fe:78:64:74:54:25:33:15:5e:
         cd:43:54:50:89:19:e0:01:ee:3b:b9:f9:a6:f2:8b:7d:17:c7:
         38:7f:36:1d:fc:c8:4e:11:82:f0:fd:d8:33:7d:3d:f4:21:6c:
         7a:a5:20:e8:17:80:1e:8e:14:9c:8b:24:39:b1:ba:fe:00:c9:
         14:d5:15:59:1d:8c:23:c4:95:8f:bf:e6:77:50:30:a1:11:bc:
         f4:2e:82:6f:0d:55:8d:dc:e9:88:e0:01:79:05:93:93:f9:a4:
         4b:8e:1f:bf:74:0f:bf:6d:1b:cb:9a:8d:0d:7a:ab:06:cf:96:
         7e:06:95:3d:ee:43:ab:d5:ff:d0:98:26:5f:2f:ca:36:76:03:
         8d:4e:05:51:03:0b:1b:50:2d:95:55:3e:d4:d4:06:fd:c1:19:
         a4:4d:16:98:e1:99:be:13:57:28:96:23:17:a5:97:ed:b7:51:
         d5:5d:cf:6e:ce:d6:97:3c:b0:37:1b:4e:22:85:45:5f:56:a4:
         14:8a:45:92:03:f7:f1:c7:da:4c:7f:bb:4e:3b:7d:95:0f:7f:
         21:7c:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:48 2024 by rpki-client on console-ams.rpki-client.org