Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/TOjF_EMwfYi8gZOM8JzTccH8l0M.roa
File:                     TOjF_EMwfYi8gZOM8JzTccH8l0M.roa (raw, json)
Hash identifier:          3DgAupwbmnUPDztrT2+zrZEZXdXe9TssQviPFXSzdsY=
Subject key identifier:   4C:E8:C5:FC:43:30:7D:88:BC:81:93:8C:F0:9C:D3:71:C1:FC:97:43
Certificate issuer:       /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial:       018CC49346F432E2D98AFA207B70854DF57E
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/TOjF_EMwfYi8gZOM8JzTccH8l0M.roa
Signing time:             Mon 01 Jan 2024 10:30:35 +0000
ROA not before:           Mon 01 Jan 2024 10:30:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15491
IP address blocks:        92.241.64.0/19 maxlen: 24
                          185.51.16.0/22 maxlen: 24
                          109.238.224.0/20 maxlen: 24
                          213.131.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:46:f4:32:e2:d9:8a:fa:20:7b:70:85:4d:f5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
        Validity
            Not Before: Jan  1 10:30:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ce8c5fc43307d88bc81938cf09cd371c1fc9743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:54:8c:fd:d6:7b:26:36:43:83:f3:a9:66:
                    61:29:69:1a:52:ec:b7:92:35:40:41:46:d7:2e:6a:
                    92:e8:7e:10:3c:00:2d:51:e6:78:22:8e:19:38:ed:
                    1f:ab:ec:3f:0d:99:18:6c:dc:57:67:57:f6:9a:1d:
                    a4:bd:c5:ce:d9:a2:a5:71:a3:37:f0:11:fb:db:6c:
                    4e:6c:d8:b1:b9:ff:1c:cf:b1:0a:e4:30:af:ce:a8:
                    a1:28:73:25:7f:85:70:f7:61:c6:ff:b6:97:54:cc:
                    16:32:ba:4a:1d:ea:d2:1a:ac:fa:ef:b4:8a:a0:8a:
                    a7:c6:10:a5:3b:e4:a8:dc:f3:b9:0b:02:b0:38:c2:
                    c1:87:40:46:0c:f3:10:cc:06:d6:e1:41:71:f8:5e:
                    0f:f7:ce:83:ca:35:17:8c:86:35:fa:66:57:d7:64:
                    66:42:4a:0f:57:b1:61:ac:8f:55:6d:9a:ac:03:d6:
                    5a:d0:1b:d4:9f:de:de:6c:a5:74:b5:0e:5a:65:fe:
                    bc:09:ef:d5:3e:b7:f9:43:32:4f:93:c2:90:2b:ad:
                    54:3a:4c:2d:44:77:9c:15:b1:e9:75:13:3d:3c:df:
                    6c:2b:25:b1:64:73:5c:f4:12:ef:bf:e6:50:48:21:
                    79:fa:a7:2b:d6:e7:ed:6c:40:e4:8c:7c:18:3b:20:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:C5:FC:43:30:7D:88:BC:81:93:8C:F0:9C:D3:71:C1:FC:97:43
            X509v3 Authority Key Identifier:
                keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/TOjF_EMwfYi8gZOM8JzTccH8l0M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.241.64.0/19
                  109.238.224.0/20
                  185.51.16.0/22
                  213.131.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:b4:e2:42:9b:75:20:c8:7a:cd:77:c6:c4:0e:ca:a0:f4:da:
         92:bb:2a:c1:d1:98:cf:e9:4f:41:1c:4d:55:56:33:b5:54:b5:
         aa:bb:75:e1:ef:d7:b9:5e:b6:75:43:39:75:50:0c:c5:53:29:
         61:4c:09:bc:15:a1:8a:ee:be:bc:4d:ba:8f:63:d1:34:66:a6:
         bb:88:19:60:04:50:ed:56:18:c0:53:5f:b4:e4:13:a5:fa:60:
         a8:7b:14:3f:07:d3:59:0e:08:67:31:27:3d:04:cd:ab:9d:a5:
         80:f9:69:71:ce:8c:32:44:61:c3:a9:27:be:1c:96:f9:4c:17:
         46:d9:1a:6b:06:63:5d:1c:44:c5:a9:65:c0:9d:08:3f:a4:f3:
         d6:0e:72:25:0f:ec:fc:94:dc:4f:77:b8:c5:46:34:b8:7b:97:
         4f:a5:05:26:40:bd:9e:cb:25:c3:d1:12:66:c7:d6:c5:a5:13:
         0b:02:02:f8:30:ad:7f:bf:9d:51:25:50:53:9e:29:76:7e:27:
         41:bd:16:d7:2d:bf:11:9e:97:c7:c1:2b:e3:e8:7d:4c:74:df:
         88:44:b5:c9:58:1a:f0:80:e9:2e:a3:f2:32:1f:93:00:29:28:
         7a:cb:c4:d1:59:4d:48:48:6d:57:cb:48:aa:3c:bf:37:73:8d:
         2e:10:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:37:43 2024 by rpki-client on console-fra.rpki-client.org