Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Feuls3UmmMOpNEv9r2dPzU5BkX8.roa
File:                     Feuls3UmmMOpNEv9r2dPzU5BkX8.roa (raw, json)
Hash identifier:          n7BZick6QFB5rFmrIB/ydRcFhmb54RNsiVO4WNfqChU=
Subject key identifier:   15:EB:A5:B3:75:26:98:C3:A9:34:4B:FD:AF:67:4F:CD:4E:41:91:7F
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019324F0F063F8962F4D45C668915C22A679
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Feuls3UmmMOpNEv9r2dPzU5BkX8.roa
Signing time:             Wed 13 Nov 2024 09:53:10 +0000
ROA not before:           Wed 13 Nov 2024 09:53:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     270214
IP address blocks:        201.77.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:24:f0:f0:63:f8:96:2f:4d:45:c6:68:91:5c:22:a6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Nov 13 09:53:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=15eba5b3752698c3a9344bfdaf674fcd4e41917f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:05:f3:3d:c2:d8:d0:40:68:80:04:88:99:
                    2a:94:65:fc:84:25:e1:05:b5:2c:ec:d7:d7:71:d8:
                    e2:a3:a9:a1:62:26:fa:c9:92:df:5d:71:30:fa:1c:
                    31:43:a6:75:9d:e0:da:f6:9b:ee:17:fb:3e:c7:2b:
                    02:e2:96:b6:e5:95:c1:dc:2f:1d:ed:17:8d:5d:d3:
                    91:60:00:b6:f8:4d:16:27:8d:6e:c9:43:ed:31:93:
                    df:0a:ae:77:fc:b8:d0:0c:ed:a2:77:e0:50:15:bc:
                    af:12:bb:c5:27:b9:d1:19:4f:da:a1:cc:d2:2a:67:
                    0c:f1:67:cb:93:a4:cd:57:24:01:71:0a:84:ee:55:
                    4f:38:d5:7e:5b:ec:cb:11:88:4f:3e:23:2c:ec:9a:
                    c2:60:5f:29:88:a7:0d:88:af:7c:2d:d7:f2:dd:cb:
                    e2:73:70:96:d6:9d:b9:16:dd:2e:ea:09:42:22:8a:
                    c7:d1:18:d7:d9:86:4c:76:4c:43:c4:89:67:22:bd:
                    79:44:1d:62:af:c5:c5:37:d9:0f:49:3d:90:9d:20:
                    ab:c3:18:3f:b4:95:81:14:fe:de:62:15:50:9f:71:
                    f9:bd:f9:63:fd:69:f8:c6:5d:d8:d9:b8:9c:83:79:
                    51:b7:cb:aa:12:4a:d3:30:1d:7c:24:af:c6:55:3c:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:A5:B3:75:26:98:C3:A9:34:4B:FD:AF:67:4F:CD:4E:41:91:7F
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Feuls3UmmMOpNEv9r2dPzU5BkX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:1d:f2:23:03:c4:ea:18:e1:1e:bb:3b:03:c2:18:76:8a:
         04:8a:23:73:40:8f:60:11:3c:70:1c:89:b8:d5:38:d5:9a:6c:
         41:b3:a5:9e:a2:5e:ef:9a:f1:db:91:00:e1:51:cc:01:17:24:
         a5:f0:1a:c6:91:d9:1f:b7:82:e6:7d:99:cb:7d:cf:e9:57:36:
         03:2b:a4:9e:40:e1:ed:d9:09:1a:b9:8c:61:82:a5:46:5f:80:
         93:91:44:c8:67:0c:75:bc:51:70:11:46:52:0b:b5:19:2e:93:
         64:65:ff:7e:4e:08:16:9e:06:a0:95:68:3e:a4:48:af:97:8a:
         ce:87:9f:73:71:5b:f8:bd:70:e7:72:32:86:b9:a3:44:e1:56:
         2b:56:ee:37:7b:9a:a5:dd:6b:9d:27:cb:24:8d:64:8c:ee:6d:
         d3:c9:38:7e:4e:10:a5:07:65:4d:c3:13:f3:3a:26:b8:be:49:
         75:5b:02:93:d5:de:08:f8:95:ce:06:db:1c:ff:e9:20:89:4a:
         ba:6c:ea:d6:d3:99:f9:5e:33:2f:ae:99:37:05:8d:de:0a:d8:
         6e:c2:8b:69:76:24:90:7f:bd:ab:2f:56:fa:3f:98:3c:86:de:
         44:57:c6:d3:6f:c2:59:20:a2:6f:84:27:c7:a8:f1:01:ec:17:
         79:2f:6b:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMk8PBj+JYvTUXGaJFcIqZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQxMTEzMDk1MzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWViYTViMzc1MjY5OGMzYTkzNDRiZmRhZjY3NGZjZDRlNDE5MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq8F8z3C2NBAaIAEiJkqlGX8hCXh
BbUs7NfXcdjio6mhYib6yZLfXXEw+hwxQ6Z1neDa9pvuF/s+xysC4pa25ZXB3C8d
7ReNXdORYAC2+E0WJ41uyUPtMZPfCq53/LjQDO2id+BQFbyvErvFJ7nRGU/aoczS
KmcM8WfLk6TNVyQBcQqE7lVPONV+W+zLEYhPPiMs7JrCYF8piKcNiK98Ldfy3cvi
c3CW1p25Ft0u6glCIorH0RjX2YZMdkxDxIlnIr15RB1ir8XFN9kPST2QnSCrwxg/
tJWBFP7eYhVQn3H5vflj/Wn4xl3Y2bicg3lRt8uqEkrTMB18JK/GVTxXmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXrpbN1JpjDqTRL/a9nT81OQZF/MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvRmV1bHMzVW1tTU9wTkV2OXIyZFB6VTVCa1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyU04MA0G
CSqGSIb3DQEBCwUAA4IBAQA9bh3yIwPE6hjhHrs7A8IYdooEiiNzQI9gETxwHIm4
1TjVmmxBs6Weol7vmvHbkQDhUcwBFySl8BrGkdkft4LmfZnLfc/pVzYDK6SeQOHt
2QkauYxhgqVGX4CTkUTIZwx1vFFwEUZSC7UZLpNkZf9+TggWngaglWg+pEivl4rO
h59zcVv4vXDncjKGuaNE4VYrVu43e5ql3WudJ8skjWSM7m3TyTh+ThClB2VNwxPz
Oia4vkl1WwKT1d4I+JXOBtsc/+kgiUq6bOrW05n5XjMvrpk3BY3eCthuwotpdiSQ
f72rL1b6P5g8ht5EV8bTb8JZIKJvhCfHqPEB7Bd5L2uX
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:09 2024 by rpki-client on console-fra.rpki-client.org