Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa
File:                     CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa (raw, json)
Hash identifier:          01QGHOr/tTVr7LHXtGSQtxFOCcYLeg5ViSxyNQrBr4E=
Subject key identifier:   08:43:22:64:B4:75:47:F0:D9:DB:75:EC:59:93:7A:C6:CB:CE:8E:48
Certificate issuer:       /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial:       018CC79429A8A1C78719B2BAFE53F433741A
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa
Signing time:             Tue 02 Jan 2024 00:30:25 +0000
ROA not before:           Tue 02 Jan 2024 00:30:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208200
IP address blocks:        45.154.72.0/23 maxlen: 24
                          2a0f:b300:1000::/36 maxlen: 48
                          2a0f:b300::/36 maxlen: 48
                          2a0f:b300:b300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:29:a8:a1:c7:87:19:b2:ba:fe:53:f4:33:74:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
        Validity
            Not Before: Jan  2 00:30:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=08432264b47547f0d9db75ec59937ac6cbce8e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:ee:86:78:f8:16:d3:ad:96:f8:88:85:0c:
                    b4:d3:7b:a0:10:ab:74:c6:ca:68:d6:48:1d:27:76:
                    ae:99:dc:01:0a:31:66:54:c4:55:22:83:3e:21:96:
                    dd:be:22:00:92:9b:e3:a1:23:2c:03:e4:80:49:1b:
                    bb:59:b8:5c:a1:0c:01:1a:35:8d:08:73:49:7a:bb:
                    3c:b1:90:93:e5:8f:38:4f:5c:7c:34:df:61:7c:c1:
                    22:ac:1b:13:d1:fa:2d:db:2d:4f:14:fc:f3:5d:02:
                    88:8c:90:b5:65:39:20:e1:13:7e:71:4c:ae:29:77:
                    1e:7f:23:86:66:4e:d7:d2:86:59:9f:90:32:d4:6c:
                    a6:b3:d2:f7:94:1a:8e:e4:47:85:40:15:e5:71:a3:
                    68:67:3c:d6:c9:a6:ce:f6:75:9b:32:da:3c:b8:f6:
                    2f:cc:b3:d5:55:dc:5e:ee:d3:98:dc:7e:3d:2d:b6:
                    3b:80:6c:64:47:1b:73:96:e5:79:61:79:89:56:0a:
                    cc:58:97:cb:d8:c0:d0:dd:3c:2e:54:69:a8:be:d2:
                    27:5b:f9:ce:87:04:33:30:38:9d:f5:92:1f:58:01:
                    ab:90:52:b2:ff:b8:3c:2b:97:bd:ad:cb:2b:93:c9:
                    58:3d:2b:e1:f4:09:40:5c:74:52:c9:9d:e8:3a:1e:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:43:22:64:B4:75:47:F0:D9:DB:75:EC:59:93:7A:C6:CB:CE:8E:48
            X509v3 Authority Key Identifier:
                keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CEMiZLR1R_DZ23XsWZN6xsvOjkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.72.0/23
                IPv6:
                  2a0f:b300::/35
                  2a0f:b300:b300::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:7f:76:a6:29:c2:da:64:c8:99:62:7a:b5:43:20:26:d0:
         42:e9:26:89:bc:06:91:e7:44:34:cf:73:27:e8:0d:7b:2d:09:
         45:99:7b:54:72:eb:2b:4b:e1:c0:b2:83:94:ed:b5:a2:66:3e:
         59:d8:af:30:07:89:f8:0e:59:30:53:9a:c8:15:1f:05:6d:f6:
         85:60:ee:e3:40:08:7e:59:a2:47:ba:d5:0a:bd:35:7f:9f:27:
         0d:5d:cd:25:31:96:55:15:9c:ac:4f:68:fd:fa:e5:3a:d6:4a:
         37:71:3d:96:3a:64:37:fe:d1:37:e2:e3:6f:2c:db:93:f7:13:
         0b:62:bc:f7:41:77:13:7e:3e:4d:3a:74:ac:5d:f2:7f:c5:69:
         00:31:c3:ce:4f:5f:78:16:dd:30:99:64:54:bf:53:35:e2:81:
         e1:08:23:f2:13:64:38:c2:7a:cb:8f:d9:e1:29:c2:93:3b:ac:
         59:0c:c1:49:8e:35:5e:4e:0d:77:31:90:c4:f9:31:4d:b4:65:
         fd:e3:ad:4b:f6:93:2a:54:e9:ab:0c:d0:db:71:c7:b7:fd:57:
         e1:74:07:11:86:76:fc:e9:2a:96:f1:b5:3a:f5:d2:bf:02:0e:
         dd:84:e3:0f:62:48:bb:1f:93:64:d2:00:be:31:b1:92:38:ac:
         49:a6:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:54:49 2024 by rpki-client on console-ams.rpki-client.org