Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/T99PmFEYdT-WIgDSqKNBb_i0cGk.roa
File:                     T99PmFEYdT-WIgDSqKNBb_i0cGk.roa (raw, json)
Hash identifier:          jVUbheO1XVt6+DQw9BagH9wzGP860/NLqUilS7H5Vhw=
Subject key identifier:   4F:DF:4F:98:51:18:75:3F:96:22:00:D2:A8:A3:41:6F:F8:B4:70:69
Certificate issuer:       /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial:       018CCA9981DCD69CE8A8BB548D7B8F9951C7
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/T99PmFEYdT-WIgDSqKNBb_i0cGk.roa
Signing time:             Tue 02 Jan 2024 14:35:07 +0000
ROA not before:           Tue 02 Jan 2024 14:35:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42673
IP address blocks:        91.240.130.0/24 maxlen: 32
                          91.240.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:99:81:dc:d6:9c:e8:a8:bb:54:8d:7b:8f:99:51:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
        Validity
            Not Before: Jan  2 14:35:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4fdf4f985118753f962200d2a8a3416ff8b47069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:66:37:f6:a7:7c:50:a3:fb:0f:df:03:60:
                    d7:45:7e:6c:cf:4d:d3:d1:c6:b1:b4:39:be:61:ba:
                    f3:74:25:6a:ea:b2:1d:8e:99:b4:19:a7:ac:cd:c4:
                    30:73:81:de:69:0d:53:2e:8f:82:b0:f3:4c:67:9f:
                    73:22:f5:18:c8:8c:2e:f5:92:ab:a1:64:4a:1a:7d:
                    37:78:76:fc:dc:ef:ca:2d:92:42:c6:e1:8c:52:dc:
                    d3:ef:12:d5:0e:5e:e2:9b:29:b9:12:54:93:92:01:
                    6f:c9:c0:02:21:50:f4:d4:08:13:f0:3a:1f:02:74:
                    9f:dd:8d:39:47:f7:48:52:17:1d:64:a7:60:23:8f:
                    5a:0b:93:7b:44:b4:ce:c3:19:57:5a:bb:74:9b:fa:
                    54:00:62:09:b0:cd:6e:48:31:0c:c2:83:78:f1:67:
                    fc:88:d3:b6:c0:d7:eb:19:6a:6e:8b:ef:ce:2f:26:
                    af:ce:e9:da:83:47:73:c8:59:17:c1:47:0c:6f:24:
                    c9:78:30:a8:0e:b8:d7:de:72:be:6f:24:08:da:f5:
                    21:66:32:24:ac:d9:6c:f2:93:86:96:fe:c9:f8:0f:
                    7f:a7:53:1f:60:fb:45:60:f8:f9:59:d5:b9:3e:97:
                    09:90:76:85:8c:1a:a1:bd:27:18:13:6d:5a:ac:34:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DF:4F:98:51:18:75:3F:96:22:00:D2:A8:A3:41:6F:F8:B4:70:69
            X509v3 Authority Key Identifier:
                keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/T99PmFEYdT-WIgDSqKNBb_i0cGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.130.0/24
                  91.240.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:aa:f6:86:fb:38:e6:48:5c:e6:ea:3f:b8:1a:e9:a1:b4:8e:
         6a:0e:54:ca:0b:8b:26:83:de:fe:cc:59:3f:cc:ae:be:dd:7a:
         dc:2c:a7:bb:1f:eb:9e:2a:5b:94:1c:41:f4:71:b5:b4:d8:17:
         7b:e6:04:10:65:d1:a7:e3:89:39:a2:3b:63:11:71:b4:ab:76:
         59:ed:c0:9c:2f:11:e7:ef:64:58:c8:52:3e:0c:09:95:f6:af:
         74:7a:51:5a:3f:90:d7:57:21:b4:f5:0b:b9:ff:ca:43:8b:fd:
         e6:18:82:8b:b0:0e:7b:78:b1:52:d3:99:23:6f:b8:ac:5d:99:
         1f:82:9d:84:68:c7:af:84:f2:82:59:56:14:07:27:99:ba:16:
         18:9f:7f:36:41:76:fc:db:1b:78:87:fa:30:57:d3:90:fa:e9:
         63:09:87:75:eb:df:70:c4:e8:a6:45:e7:56:f0:a3:9a:87:7a:
         58:2f:08:a6:47:22:5c:a1:4b:57:80:57:15:c1:53:15:37:28:
         2c:82:85:6e:4f:1d:07:e9:fa:e8:01:9c:b6:b8:bf:87:54:c1:
         18:f4:f4:23:7f:a2:fd:09:39:82:ed:76:8f:48:74:6b:31:da:
         31:d1:86:4a:1f:4c:c8:fa:2b:e3:c8:2c:21:8d:50:45:5c:ce:
         74:80:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 16:43:40 2024 by rpki-client on console-fra.rpki-client.org