Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NwRc8p7U8Eiaw8dhsviB5w9IsoU.roa
File:                     NwRc8p7U8Eiaw8dhsviB5w9IsoU.roa (raw, json)
Hash identifier:          1b34yhLBiGtm0WEhWovEGFt3W3gFi/gmzVuZ0ggaSDE=
Subject key identifier:   37:04:5C:F2:9E:D4:F0:48:9A:C3:C7:61:B2:F8:81:E7:0F:48:B2:85
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       018CCA2A1536A6EE3256AD55BBF0FA9AD701
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NwRc8p7U8Eiaw8dhsviB5w9IsoU.roa
Signing time:             Tue 02 Jan 2024 12:33:24 +0000
ROA not before:           Tue 02 Jan 2024 12:33:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56673
IP address blocks:        146.120.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:15:36:a6:ee:32:56:ad:55:bb:f0:fa:9a:d7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 12:33:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=37045cf29ed4f0489ac3c761b2f881e70f48b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:1c:8a:ea:39:f2:79:45:b7:91:19:7f:5e:
                    38:1f:96:3a:57:a7:fd:d1:b0:de:03:35:fd:1b:9c:
                    ed:6e:a0:99:d0:68:75:fe:de:a1:5b:32:17:34:7a:
                    b6:fc:02:7b:7f:8a:83:b9:0b:29:36:d6:fa:c1:01:
                    6a:95:23:c0:85:3a:db:a1:e7:11:8a:a4:43:34:a6:
                    eb:27:91:1e:b7:f4:34:27:27:9f:f1:39:26:c6:a7:
                    ac:5b:42:3e:30:2f:c7:4a:7c:5f:d4:6b:41:fb:f6:
                    8a:70:c7:c5:67:2d:9f:b6:62:89:d5:01:45:6d:ef:
                    8d:c5:9d:63:d0:9b:0c:b7:0e:72:7d:34:ca:3a:59:
                    02:04:33:02:fc:a8:42:10:f7:05:d3:84:c5:cd:ff:
                    2c:b5:6c:d0:17:be:9e:e1:52:0e:4d:31:8b:32:b8:
                    66:7e:d8:c0:e2:4f:65:d7:45:7d:95:6a:3d:5c:4d:
                    c6:78:14:68:1a:ed:aa:85:e8:9b:78:2d:78:bf:6d:
                    43:85:4f:9a:d5:cf:15:7f:a9:1a:c1:fa:f7:a7:d0:
                    29:9f:81:5f:aa:1b:ac:08:e8:d7:55:d3:3e:11:9c:
                    8d:30:82:7f:bd:6b:90:63:dd:d4:ad:d8:f8:07:50:
                    77:12:1c:11:ca:47:ab:a5:73:db:19:b3:45:14:a4:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:5C:F2:9E:D4:F0:48:9A:C3:C7:61:B2:F8:81:E7:0F:48:B2:85
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NwRc8p7U8Eiaw8dhsviB5w9IsoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.120.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:eb:3f:4d:af:7a:11:bb:3c:12:99:8b:a3:59:6b:70:4f:
         c8:d2:b6:07:8a:e9:f6:60:f6:91:48:01:44:5c:31:6a:b9:18:
         21:bc:11:2a:fd:d0:c9:3e:e1:01:9b:de:e0:c0:14:fb:52:4b:
         f1:56:a8:a1:68:94:e5:0f:e7:24:bb:e2:2e:af:31:ef:8d:27:
         89:1f:51:8d:82:95:70:19:9e:92:90:20:f3:9c:2c:00:b6:58:
         10:22:1b:a8:3a:71:0b:cb:b3:64:0d:6d:42:95:b7:3c:ec:2f:
         85:25:c0:43:4f:45:e6:01:45:b4:21:df:ce:fb:0d:db:b4:aa:
         f4:e7:d7:79:f7:7f:9b:38:41:4c:4f:8e:de:8a:45:9e:78:eb:
         99:91:e4:6c:66:01:d8:9e:1a:ba:2f:0c:ce:8b:a6:d6:52:c0:
         a0:0a:16:6d:db:5d:53:8b:63:84:18:f4:4d:a9:8c:c5:82:ee:
         83:f4:58:81:af:ae:dd:bf:5d:71:ba:7d:c2:65:c4:c8:2f:1c:
         12:12:a4:97:3b:a7:80:97:36:da:2a:9a:86:ed:e7:22:b0:12:
         95:6a:2e:b2:20:50:1e:3c:d5:e2:48:22:88:71:40:1d:2d:7a:
         7e:5a:16:b5:79:04:3e:e5:67:c2:c9:0d:a9:ae:f5:e8:e0:f8:
         3c:ec:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org