Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/eODLjb9a8MmBU8laVZw3xtBrjh4.roa
File:                     eODLjb9a8MmBU8laVZw3xtBrjh4.roa (raw, json)
Hash identifier:          eC9RLcuydPAwbH/HoNA/V+EVVGDWSG0/rsMLVF5Y9Dw=
Subject key identifier:   78:E0:CB:8D:BF:5A:F0:C9:81:53:C9:5A:55:9C:37:C6:D0:6B:8E:1E
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       018CC64A972224799A12632C9EA75B7FBFF4
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/eODLjb9a8MmBU8laVZw3xtBrjh4.roa
Signing time:             Mon 01 Jan 2024 18:30:26 +0000
ROA not before:           Mon 01 Jan 2024 18:30:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3320
IP address blocks:        185.183.212.0/22 maxlen: 22
                          185.183.212.0/23 maxlen: 23
                          185.183.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 04:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:97:22:24:79:9a:12:63:2c:9e:a7:5b:7f:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Jan  1 18:30:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=78e0cb8dbf5af0c98153c95a559c37c6d06b8e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:b5:2e:71:68:6d:f2:f9:6a:69:ca:d9:67:
                    73:53:b8:35:ec:bc:22:b6:71:8f:ab:ae:c4:9d:a6:
                    00:94:1e:43:e9:48:17:e4:28:2e:7b:17:fd:34:56:
                    6c:16:94:8f:e8:37:33:23:db:06:42:ef:40:bf:b1:
                    ff:a1:ac:eb:ca:1d:d2:3a:2e:78:8e:ed:3f:01:d1:
                    1e:16:7f:66:9b:79:4b:3e:9c:66:61:bd:e7:17:e6:
                    92:ab:04:6f:f7:34:91:82:89:44:0b:15:35:ec:15:
                    21:53:ce:fe:cf:40:2b:b3:1b:04:82:53:d5:1e:91:
                    64:24:23:7b:4a:d7:d9:e4:cc:3f:3d:63:54:84:c2:
                    de:d1:73:63:4c:08:7a:3c:0f:fe:7a:12:22:9b:f6:
                    b1:1b:de:02:f7:8c:e6:b0:52:0f:2c:10:2a:dd:4e:
                    d9:a5:a3:ce:0a:c2:ef:fd:45:dc:08:e4:ea:db:28:
                    2b:f2:34:92:bb:ba:7b:ae:dc:6c:0b:dd:25:41:7c:
                    93:ba:8e:f9:2f:dd:3f:e8:e8:31:9c:b8:d0:02:47:
                    40:6a:1c:6d:6f:55:7d:12:ed:2b:0f:ce:b6:06:71:
                    ab:99:ef:98:93:a9:98:bb:51:a7:a3:13:6e:fb:94:
                    d5:22:46:27:70:03:49:4f:e1:16:a0:6c:4e:83:77:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E0:CB:8D:BF:5A:F0:C9:81:53:C9:5A:55:9C:37:C6:D0:6B:8E:1E
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/eODLjb9a8MmBU8laVZw3xtBrjh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:a2:a4:6c:6f:de:d0:a0:4b:c1:4a:c3:fe:2c:22:c6:9d:
         3e:ed:65:22:97:46:9e:db:a2:3b:d9:ac:a0:63:19:ea:79:a5:
         00:ae:01:49:84:a0:e1:ca:e9:1c:c2:be:b6:fc:4f:7f:fb:72:
         88:3c:2d:01:06:5c:3c:a8:02:eb:08:a2:74:43:e7:8d:dd:57:
         4b:0c:ae:87:91:1c:f0:2b:3b:90:13:9c:43:bc:ba:ad:c6:1a:
         b1:fb:23:19:e4:18:f4:1f:4c:3d:81:d8:ca:94:c4:57:d6:27:
         e7:39:d3:b1:fd:e3:7b:c6:24:47:35:77:04:79:9a:e1:e8:7f:
         ec:b1:85:17:bd:74:3c:34:07:cd:1c:ca:e4:fd:52:87:66:f6:
         2c:ce:e1:8f:87:51:4a:ce:a8:58:e6:a9:9a:67:11:33:09:ad:
         da:57:11:da:ed:18:9e:4c:94:d2:0f:53:56:aa:dc:a7:69:1d:
         09:6a:9f:c3:8e:76:44:f1:36:81:00:cd:ee:aa:83:e2:0f:fc:
         a0:c7:76:42:90:1b:98:c8:12:88:eb:30:55:f1:2a:f7:26:06:
         e9:91:ad:4a:69:93:0d:d2:31:64:a5:9a:bd:a3:35:56:62:8f:
         3a:d3:14:5b:25:f0:95:b2:28:74:a9:7c:63:4a:01:6d:14:7c:
         6e:55:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:35:01 2024 by rpki-client on console-ams.rpki-client.org