Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/wVRGyzNYDT51wQpACnK6L1I9uQ0.roa
File:                     wVRGyzNYDT51wQpACnK6L1I9uQ0.roa (raw, json)
Hash identifier:          RzeeIpkpREgFfRR5tPZDuwKs4+lA3yme0eHDNJxRij4=
Subject key identifier:   C1:54:46:CB:33:58:0D:3E:75:C1:0A:40:0A:72:BA:2F:52:3D:B9:0D
Certificate issuer:       /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial:       018F5DDA92FF514A7A1E153DF6E5083478D6
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/wVRGyzNYDT51wQpACnK6L1I9uQ0.roa
Signing time:             Thu 09 May 2024 14:55:56 +0000
ROA not before:           Thu 09 May 2024 14:55:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202391
IP address blocks:        80.75.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:da:92:ff:51:4a:7a:1e:15:3d:f6:e5:08:34:78:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
        Validity
            Not Before: May  9 14:55:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c15446cb33580d3e75c10a400a72ba2f523db90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:34:ce:62:63:1e:7a:d5:91:f0:49:27:69:be:
                    b7:5d:ec:f0:86:15:5f:75:58:8a:fc:92:ac:2f:8c:
                    a7:15:90:46:04:23:f4:11:c5:92:7b:b5:da:be:8d:
                    a1:eb:f0:5c:95:4d:78:8f:df:06:19:06:e6:71:2c:
                    24:aa:32:f0:ed:ee:19:03:1a:3e:ea:a2:e9:e8:2a:
                    eb:cd:a5:e7:c6:a7:2b:56:84:d5:1d:b6:e4:0d:3b:
                    7a:41:74:46:dd:09:7a:87:69:72:21:0d:9c:89:90:
                    71:90:8b:ef:76:09:fa:dc:53:74:9a:b7:a7:0a:0d:
                    bb:f6:71:46:f3:fe:f5:c6:7e:b1:e2:36:30:02:07:
                    aa:c7:3a:42:5e:06:c6:ab:0e:3e:0e:a4:2d:96:c4:
                    73:af:33:cd:ae:ee:9f:42:ea:ea:5e:bf:67:35:92:
                    f5:67:57:53:72:ee:d8:bb:55:99:2d:5b:c7:9f:73:
                    81:a8:9a:3d:fa:8e:9d:7b:cd:83:62:4c:c8:35:5e:
                    be:14:f2:ca:2d:5e:9a:3c:6a:74:d8:e9:b9:c6:89:
                    43:38:56:83:0a:d0:46:3c:c2:a6:3b:b5:6c:ea:80:
                    26:9b:76:6a:7e:6b:5d:65:89:c1:5f:45:a4:6f:d0:
                    13:0d:db:50:b8:b4:cf:24:ea:39:2d:4b:ca:d1:a7:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:46:CB:33:58:0D:3E:75:C1:0A:40:0A:72:BA:2F:52:3D:B9:0D
            X509v3 Authority Key Identifier:
                keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/wVRGyzNYDT51wQpACnK6L1I9uQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fc:17:ca:55:8d:76:21:ce:3b:96:8c:99:64:15:29:39:69:
         13:c7:9e:d8:14:31:d8:54:c7:60:8a:80:28:e9:c2:59:7b:59:
         15:8a:a3:5c:4b:78:dc:e0:08:a4:b1:f3:e0:9a:9d:c4:84:eb:
         05:05:3f:eb:a0:4d:1d:4f:1a:ee:d2:32:89:1c:2e:da:de:23:
         98:5b:23:bf:8d:61:5d:8d:62:33:8b:f2:a5:1f:37:d2:4f:55:
         e4:a0:41:9b:d9:03:ed:51:a9:e5:fb:02:30:da:40:80:af:9b:
         5d:2d:23:7e:ae:f7:ae:ae:27:d5:fa:18:4c:77:11:a2:6e:c7:
         aa:a3:d9:65:04:27:02:90:e1:e4:27:22:b8:b2:a8:25:7e:33:
         21:c7:86:98:02:54:7a:79:c5:f2:14:ce:fc:d1:f9:17:52:6c:
         4d:fb:c3:90:45:31:70:03:40:22:e9:ea:31:c1:f9:c2:02:29:
         b6:c6:be:db:41:53:88:d2:d6:03:fd:7f:32:75:4f:60:c5:11:
         18:d6:00:2f:72:30:23:e4:6f:77:0d:e8:f3:03:04:9b:00:f0:
         0c:c2:95:2e:a3:29:52:12:86:f8:1c:79:fe:29:3e:3c:47:22:
         b2:70:26:bf:81:8e:00:b9:b8:39:6f:07:84:91:f7:01:aa:2a:
         bd:e6:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:14:27 2024 by rpki-client on console-fra.rpki-client.org