Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xEUM5_-bOrjYIJSfRbII-Ga7hok.roa
File:                     xEUM5_-bOrjYIJSfRbII-Ga7hok.roa (raw, json)
Hash identifier:          iLuKdr2vVKNh7H3vamhLqdEU1vgQTrEk4mF7e51Rcm8=
Subject key identifier:   C4:45:0C:E7:FF:9B:3A:B8:D8:20:94:9F:45:B2:08:F8:66:BB:86:89
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       018CC795382D074F0AB4F1E25E8650C546EF
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xEUM5_-bOrjYIJSfRbII-Ga7hok.roa
Signing time:             Tue 02 Jan 2024 00:31:34 +0000
ROA not before:           Tue 02 Jan 2024 00:31:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8283
IP address blocks:        94.142.242.0/24 maxlen: 24
                          94.142.240.0/21 maxlen: 21
                          94.142.241.0/24 maxlen: 24
                          94.142.245.0/24 maxlen: 24
                          94.142.246.0/24 maxlen: 24
                          94.142.244.0/24 maxlen: 24
                          94.142.247.0/24 maxlen: 24
                          185.52.225.0/24 maxlen: 24
                          185.52.226.0/24 maxlen: 24
                          185.52.224.0/24 maxlen: 24
                          185.52.224.0/22 maxlen: 22
                          185.52.227.0/24 maxlen: 24
                          94.142.240.0/24 maxlen: 24
                          2a02:898::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Feb 2024 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:38:2d:07:4f:0a:b4:f1:e2:5e:86:50:c5:46:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Jan  2 00:31:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c4450ce7ff9b3ab8d820949f45b208f866bb8689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:c6:38:74:bc:a8:c0:d3:c4:f4:30:dc:ec:
                    7d:06:d3:0c:29:0e:9f:63:f4:51:65:c1:7a:81:92:
                    3c:b0:85:3e:25:24:fc:b4:55:ac:cb:28:30:ee:6a:
                    fa:e0:2b:43:e8:4a:1c:70:a1:c3:7b:e2:b7:ae:18:
                    80:d9:51:ce:4a:8c:2d:7a:62:74:f7:45:58:c1:6f:
                    86:13:62:c5:36:b7:2d:aa:d1:b4:cb:89:b1:8e:78:
                    ea:17:1d:7d:30:d7:d0:e3:d6:ec:4a:cf:1c:22:8a:
                    55:92:a7:9a:0a:f1:dc:b7:6c:94:68:6b:63:7d:84:
                    50:dc:62:45:7c:72:74:e0:4e:69:6e:c7:76:5a:cb:
                    02:59:c3:24:54:68:90:f1:83:5e:ac:a3:52:d3:02:
                    06:d9:36:9d:9b:8e:34:57:7f:c6:a2:c7:a5:d5:a7:
                    6c:98:24:cf:0d:63:f8:38:d7:f2:c7:7e:8f:87:c1:
                    8f:3c:8a:12:aa:53:b0:b4:ff:d3:77:00:92:31:41:
                    92:72:56:b6:9b:ae:cc:27:1d:f8:f3:fa:bc:d7:48:
                    4f:01:85:07:49:45:3e:2b:53:c0:1a:a0:64:b7:50:
                    41:30:44:0e:81:c1:1a:5c:9e:41:ad:c0:2e:1a:1c:
                    d9:f4:59:e2:f9:1b:f3:e3:27:1f:24:65:7d:b0:10:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:45:0C:E7:FF:9B:3A:B8:D8:20:94:9F:45:B2:08:F8:66:BB:86:89
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xEUM5_-bOrjYIJSfRbII-Ga7hok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.240.0/21
                  185.52.224.0/22
                IPv6:
                  2a02:898::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:d3:d5:18:86:9b:b0:68:10:20:33:21:36:fd:49:98:b0:
         4a:1f:60:f2:87:19:5a:a1:98:5f:18:6b:21:c0:3c:0c:a5:94:
         d0:4f:d6:28:da:1e:74:dd:8f:ec:e5:30:78:15:3d:da:2f:8b:
         51:0a:99:0f:ff:36:b4:9f:fd:86:d4:73:fb:4a:ce:c7:40:db:
         f7:17:22:e3:7e:a1:50:c3:3c:57:74:a5:f1:ab:83:26:7b:3f:
         4a:d3:3c:38:77:4f:4f:b4:64:99:63:68:75:27:ea:8b:df:4b:
         3b:cd:d9:e9:f1:c5:f5:e0:8a:f6:87:1e:17:38:1c:46:e5:2f:
         58:8c:96:02:9f:18:af:57:60:47:40:b6:f9:93:bb:85:25:1e:
         28:1d:fc:4a:8d:a2:dd:51:43:35:f4:dd:a6:41:46:41:39:7c:
         55:1a:c9:aa:9f:7e:58:0b:38:e4:a6:78:6f:bf:5d:a8:da:ec:
         10:de:bb:d3:d8:ca:8c:86:95:4e:d3:b0:1c:d4:ac:26:94:04:
         e3:4f:2b:7f:2d:c6:64:d3:35:40:18:d3:28:59:97:28:a5:9c:
         6e:e8:89:55:f9:99:b6:08:98:7a:0e:08:ec:8a:a7:a0:d2:85:
         c7:71:b2:29:22:bd:9d:49:d5:3c:b1:14:74:69:df:72:27:3f:
         b8:16:b9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 18:19:57 2024 by rpki-client on console-fra.rpki-client.org