Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kdKrTC3wvvSsOrULVCbsYjQ8Z8A.roa
File:                     kdKrTC3wvvSsOrULVCbsYjQ8Z8A.roa (raw, json)
Hash identifier:          09LITrH5JxRNzcjmtE0+h1ex037xUAp2Luy5FQFO9Qw=
Subject key identifier:   91:D2:AB:4C:2D:F0:BE:F4:AC:3A:B5:0B:54:26:EC:62:34:3C:67:C0
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       019097B0561CC0C854F5E00F5A4379834AB7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kdKrTC3wvvSsOrULVCbsYjQ8Z8A.roa
Signing time:             Tue 09 Jul 2024 13:30:34 +0000
ROA not before:           Tue 09 Jul 2024 13:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211384
IP address blocks:        31.210.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:97:b0:56:1c:c0:c8:54:f5:e0:0f:5a:43:79:83:4a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Jul  9 13:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=91d2ab4c2df0bef4ac3ab50b5426ec62343c67c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:97:52:e1:b0:b4:4e:55:a3:94:5a:13:5d:
                    4d:74:c2:14:f8:ae:4f:43:5d:3a:a9:46:f3:00:38:
                    c9:82:48:38:ff:25:1e:f9:da:4b:d4:ff:8e:18:db:
                    42:18:12:2b:bc:bb:5d:23:e3:18:df:6d:15:56:e4:
                    3a:b9:71:37:9c:da:d9:10:bb:d5:50:64:79:e3:6b:
                    d5:30:4f:5a:96:f1:11:75:a7:43:5e:ce:af:1a:56:
                    e9:67:87:e7:c1:08:a0:3e:ff:bd:f4:46:44:df:bd:
                    df:4b:46:ad:06:14:eb:c6:6a:50:00:85:47:61:5a:
                    fe:f4:e3:0d:c5:02:94:9f:c6:aa:47:57:82:6e:a9:
                    44:75:39:64:18:7c:54:17:90:59:e3:ea:36:39:d5:
                    5c:b3:8a:79:b1:10:2c:63:ec:b3:ff:55:4f:b4:af:
                    89:86:f3:8c:61:27:67:c5:3b:06:e4:b3:82:71:d2:
                    98:8b:e9:80:86:2c:43:70:d5:0d:14:53:7c:b4:a5:
                    ad:82:fc:bd:f1:d4:29:45:7e:52:a1:81:7f:ae:e7:
                    9e:8b:6b:8a:9a:a9:6c:30:d2:7f:85:1c:61:40:ba:
                    04:4d:3d:68:8c:c6:b7:3c:e6:c8:89:42:76:6c:8d:
                    25:cf:0c:55:c1:88:36:73:c1:73:74:a8:ed:d2:d7:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D2:AB:4C:2D:F0:BE:F4:AC:3A:B5:0B:54:26:EC:62:34:3C:67:C0
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kdKrTC3wvvSsOrULVCbsYjQ8Z8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:8a:d7:f7:ef:68:40:f5:4d:81:c6:0a:5e:ae:08:75:28:
         f1:90:e5:1e:09:56:b0:64:50:84:e4:40:80:ee:f7:03:ef:f9:
         fd:91:4c:1d:21:17:5d:e1:fa:d5:9c:5c:35:e5:fe:8e:e6:83:
         e1:6b:2d:d1:54:a9:f0:1c:28:27:df:61:d2:80:44:c2:14:5b:
         82:d1:57:49:89:0e:48:e2:4c:92:e7:30:7a:83:22:e7:ff:25:
         02:43:c9:1f:16:35:df:60:60:69:a3:6d:7b:0a:29:95:1e:17:
         81:16:c2:01:ac:29:12:ae:d6:66:b6:db:0d:e5:04:4b:be:2c:
         da:b6:88:75:83:18:86:c5:0f:ad:2a:a6:bd:e2:5f:f9:c5:c5:
         d5:bf:c1:53:84:e4:d2:15:bd:d1:37:f9:ae:80:c0:1e:3c:ff:
         39:e7:c7:84:ca:74:64:26:bb:b1:65:a8:b7:2a:9a:73:55:2f:
         9e:a7:22:9e:b4:b8:3d:18:59:32:f3:3b:42:ce:19:e0:ab:fe:
         79:c9:9e:b4:1b:1e:84:8c:25:0a:af:db:8d:c5:10:a1:e0:07:
         9d:cd:aa:c4:13:ce:f0:3d:07:1c:fb:24:e1:07:9a:dc:3f:85:
         18:7a:0c:88:58:e1:82:34:b0:9c:2a:26:00:21:77:e0:d3:d3:
         4e:b1:fa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:12 2024 by rpki-client on console-ams.rpki-client.org