Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa
File:                     CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa (raw, json)
Hash identifier:          9IsdrM1fsHHb3ey4XHd2LKfKojYUrRZfDS77c1iBUII=
Subject key identifier:   08:5B:B4:18:0C:22:31:06:48:A7:C5:8C:BC:A1:53:FA:BD:F0:7D:37
Certificate issuer:       /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial:       018CC5DC0F073B487BADE096A015227F0608
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa
Signing time:             Mon 01 Jan 2024 16:29:42 +0000
ROA not before:           Mon 01 Jan 2024 16:29:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206874
IP address blocks:        185.164.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:0f:07:3b:48:7b:ad:e0:96:a0:15:22:7f:06:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
        Validity
            Not Before: Jan  1 16:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=085bb4180c22310648a7c58cbca153fabdf07d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:16:b7:e1:1a:56:5b:55:22:cc:a4:dd:10:
                    fd:e8:e5:6a:71:ab:06:b4:8b:4a:2b:ab:91:f0:e5:
                    46:c5:f2:53:83:f2:6a:80:07:80:51:32:be:70:0d:
                    16:a4:5b:af:0c:9e:56:b7:27:bd:c9:75:93:ee:5a:
                    4f:1a:e3:19:5a:4b:de:d8:23:23:b5:a8:62:56:9f:
                    fe:20:38:7d:de:2d:64:7f:6a:3a:2a:a6:fc:94:6d:
                    96:7e:da:6d:22:00:1d:0d:1e:35:d3:6e:21:37:10:
                    10:58:d9:15:71:eb:5e:53:23:d2:3b:28:54:92:35:
                    6e:81:e7:ff:ab:e7:f5:12:c9:4a:29:d0:7a:d7:53:
                    90:0f:81:8c:1d:c4:f2:fc:23:18:a0:d5:23:08:6f:
                    4c:9c:09:ac:4c:8c:f9:00:09:a2:90:60:4d:4b:9c:
                    40:ed:4e:5c:48:d3:78:50:c3:33:c5:b1:3c:a2:8f:
                    4e:40:45:41:e9:44:a4:fb:88:07:7e:be:36:a2:0e:
                    1d:89:7b:4b:db:41:55:6f:bb:79:d5:c3:ed:48:e6:
                    17:f2:5c:87:6f:4c:27:fb:38:32:30:84:6b:03:7c:
                    c4:16:ba:a2:16:09:b6:7b:a1:95:f8:ef:f1:46:7f:
                    35:ee:94:f2:10:b7:0f:15:96:3d:e9:26:26:e3:71:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5B:B4:18:0C:22:31:06:48:A7:C5:8C:BC:A1:53:FA:BD:F0:7D:37
            X509v3 Authority Key Identifier:
                keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:0b:9b:0b:6d:6d:89:1d:ad:8d:07:fd:3a:fe:34:06:4c:
         c1:46:dd:bf:85:ba:3e:2e:03:36:49:ab:7b:a4:7e:e5:b8:3f:
         e7:a1:10:14:d9:b3:ab:96:90:b3:a2:cd:29:11:31:16:98:13:
         76:00:7f:be:70:00:d9:7e:19:61:95:91:2e:50:c0:d5:0d:6a:
         dc:af:c8:89:1b:7f:21:15:5c:51:1b:76:8e:33:72:d1:a5:a5:
         d9:97:b0:97:91:04:bc:fd:ec:0c:eb:84:43:34:b5:a9:d5:f8:
         1c:6c:ff:aa:40:00:fa:03:12:fa:4c:b3:5a:26:63:72:b9:4e:
         8c:4c:d0:8c:1b:9c:8b:79:c1:1a:0a:d9:7d:0c:35:a0:e9:85:
         31:7a:7a:30:94:56:5b:20:87:df:9a:2b:c1:05:03:03:0d:91:
         73:26:ef:60:10:ce:48:11:95:f3:49:ca:4b:9e:5d:1f:f7:47:
         45:8b:31:80:a6:4f:d6:69:5f:0b:af:8e:29:3e:fe:85:e8:43:
         2f:c1:69:23:eb:7a:d0:80:0e:ac:db:b2:9a:5e:4f:14:f5:b0:
         8b:a2:41:94:8b:d6:7d:a2:de:9e:63:2d:79:8e:d3:48:5e:cc:
         6e:2d:f5:d8:c7:0f:4f:41:be:ad:05:be:81:11:61:1b:8f:9e:
         df:28:80:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3A8HO0h7reCWoBUifwYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3
NGQ1YzUwHhcNMjQwMTAxMTYyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODViYjQxODBjMjIzMTA2NDhhN2M1OGNiY2ExNTNmYWJkZjA3ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7AWt+EaVltVIsyk3RD96OVqcasG
tItKK6uR8OVGxfJTg/JqgAeAUTK+cA0WpFuvDJ5Wtye9yXWT7lpPGuMZWkve2CMj
tahiVp/+IDh93i1kf2o6Kqb8lG2WftptIgAdDR41024hNxAQWNkVceteUyPSOyhU
kjVugef/q+f1EslKKdB611OQD4GMHcTy/CMYoNUjCG9MnAmsTIz5AAmikGBNS5xA
7U5cSNN4UMMzxbE8oo9OQEVB6USk+4gHfr42og4diXtL20FVb7t51cPtSOYX8lyH
b0wn+zgyMIRrA3zEFrqiFgm2e6GV+O/xRn817pTyELcPFZY96SYm43EGAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhbtBgMIjEGSKfFjLyhU/q98H03MB8GA1UdIwQY
MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt
NTI3YTlhNGVlNjI0LzEvQ0Z1MEdBd2lNUVpJcDhXTXZLRlQtcjN3ZlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0
LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaR8MA0G
CSqGSIb3DQEBCwUAA4IBAQCODQubC21tiR2tjQf9Ov40BkzBRt2/hbo+LgM2Sat7
pH7luD/noRAU2bOrlpCzos0pETEWmBN2AH++cADZfhlhlZEuUMDVDWrcr8iJG38h
FVxRG3aOM3LRpaXZl7CXkQS8/ewM64RDNLWp1fgcbP+qQAD6AxL6TLNaJmNyuU6M
TNCMG5yLecEaCtl9DDWg6YUxenowlFZbIIffmivBBQMDDZFzJu9gEM5IEZXzScpL
nl0f90dFizGApk/WaV8Lr44pPv6F6EMvwWkj63rQgA6s27KaXk8U9bCLokGUi9Z9
ot6eYy15jtNIXsxuLfXYxw9PQb6tBb6BEWEbj57fKIAJ
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:03:02 2024 by rpki-client on console-ams.rpki-client.org