Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iWhFm14jBiXGrr38QojUHc-PEcs.roa
File:                     iWhFm14jBiXGrr38QojUHc-PEcs.roa (raw, json)
Hash identifier:          uzvLN5HP69YfYwKFJ1uugdTUPEGTgSuuqB/gYJQYkD8=
Subject key identifier:   89:68:45:9B:5E:23:06:25:C6:AE:BD:FC:42:88:D4:1D:CF:8F:11:CB
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       018E9F2B661A75D530CF6B672ACDE369C2CE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iWhFm14jBiXGrr38QojUHc-PEcs.roa
Signing time:             Tue 02 Apr 2024 14:16:45 +0000
ROA not before:           Tue 02 Apr 2024 14:16:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44812
IP address blocks:        146.19.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:9f:2b:66:1a:75:d5:30:cf:6b:67:2a:cd:e3:69:c2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Apr  2 14:16:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8968459b5e230625c6aebdfc4288d41dcf8f11cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:30:55:f1:34:e7:91:2f:02:ff:4f:13:53:
                    d3:66:f9:a2:52:ad:06:a7:82:08:43:a2:64:c5:bc:
                    b6:28:f8:34:11:bf:a5:c9:01:8b:1a:a0:32:f1:22:
                    67:b8:91:ba:5d:b5:25:ee:c1:87:5e:ec:93:66:28:
                    d6:73:7b:0c:57:58:fe:bb:74:03:a3:4b:16:5c:d6:
                    fe:33:b5:24:b8:98:04:51:88:a8:67:d9:05:1c:a4:
                    bc:98:08:d7:61:5d:a3:50:77:9e:85:02:9d:89:0b:
                    48:ac:37:c2:7b:5f:4d:05:71:5c:4c:48:96:fb:57:
                    62:80:66:14:8f:86:a7:8a:2f:fa:12:96:9a:5b:10:
                    f7:a0:1f:63:ad:5b:14:9c:48:7f:cb:36:5b:ac:ef:
                    c6:f8:7f:af:9b:87:0c:17:50:e3:26:70:62:2d:fb:
                    96:72:8b:b8:b1:a4:e9:e1:7c:46:9c:f9:6e:e8:53:
                    6e:8a:12:10:69:d0:dc:43:21:b2:d2:e0:ef:95:08:
                    a7:6b:f3:17:ee:13:8f:88:fe:68:a6:c0:1f:2f:aa:
                    58:da:0a:6f:c5:e7:5a:98:b0:8a:41:fe:10:cc:2e:
                    bc:ae:8b:76:a4:11:a0:b3:5a:8f:93:a2:f5:53:ef:
                    6a:10:20:d3:89:15:fa:86:22:93:2d:58:85:e1:c7:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:45:9B:5E:23:06:25:C6:AE:BD:FC:42:88:D4:1D:CF:8F:11:CB
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iWhFm14jBiXGrr38QojUHc-PEcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:80:0a:e5:36:28:9c:f5:ac:ee:0c:b3:8c:4b:17:eb:f3:e9:
         60:06:82:26:10:d2:a8:5f:a8:83:30:80:56:47:61:b1:56:fb:
         fe:2d:b2:2c:74:54:70:f1:24:a1:89:0c:dc:09:2f:d3:3d:54:
         3b:d4:1a:0f:63:3d:fa:99:e8:16:d8:bc:7d:9c:f2:9f:17:06:
         29:2f:85:56:4c:6c:17:e6:05:a1:3b:99:1f:e4:a0:a9:d7:5d:
         03:c7:06:89:06:f5:71:25:98:8a:33:a5:75:a5:c2:64:68:10:
         cc:54:43:c0:6e:a2:f3:ad:4e:64:a6:98:89:9d:25:ea:48:95:
         d0:d1:42:64:88:ff:cb:fe:5a:a8:76:bf:72:0c:0a:59:1d:13:
         66:b3:1c:e4:b6:78:1d:5b:aa:28:b3:6b:a6:41:2f:08:4f:2e:
         60:e0:09:66:09:b3:e2:c7:42:46:5d:39:47:50:a1:30:bd:58:
         2f:10:3d:3d:5b:d6:df:e4:2f:6c:a8:49:2b:f4:c7:61:33:ab:
         27:b1:6a:18:8b:cc:95:ab:5a:86:da:43:ad:9a:aa:33:e4:d4:
         8e:5a:16:a7:7c:87:9f:f0:d2:a8:98:fd:70:3a:88:50:da:f5:
         75:d4:27:34:87:79:39:60:c5:4d:41:5e:da:82:f9:2d:c5:30:
         db:1e:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:33:43 2024 by rpki-client on console-ams.rpki-client.org