Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/c4Rf_FSGWiouBy98mfbsximqjgg.roa
File:                     c4Rf_FSGWiouBy98mfbsximqjgg.roa (raw, json)
Hash identifier:          HxRdMkr3kQcPEnZxOKuZ1YqY1Zu21I+Mel7yeD1SXJ0=
Subject key identifier:   73:84:5F:FC:54:86:5A:2A:2E:07:2F:7C:99:F6:EC:C6:29:AA:8E:08
Certificate issuer:       /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial:       018CCA2A376FF5E845B52018FC14910B8B79
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/c4Rf_FSGWiouBy98mfbsximqjgg.roa
Signing time:             Tue 02 Jan 2024 12:33:33 +0000
ROA not before:           Tue 02 Jan 2024 12:33:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198855
IP address blocks:        185.247.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:37:6f:f5:e8:45:b5:20:18:fc:14:91:0b:8b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
        Validity
            Not Before: Jan  2 12:33:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=73845ffc54865a2a2e072f7c99f6ecc629aa8e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:b7:00:d5:55:b7:3d:7d:3f:55:5a:77:7b:
                    cb:a1:25:a1:aa:58:0c:29:3e:54:31:d2:75:93:f3:
                    7d:0a:53:94:0d:05:f0:6e:8a:18:aa:89:8e:11:7b:
                    0e:38:9f:3f:37:e1:18:57:1a:d0:2e:eb:1b:8f:0d:
                    10:62:ec:53:f1:f8:aa:69:7c:6f:3a:d4:b0:f8:1f:
                    63:b6:02:58:48:03:f6:ea:f0:83:c6:7d:a0:15:a4:
                    76:31:73:23:ef:82:3b:d8:a7:97:c6:77:77:2b:8b:
                    cc:c6:ac:28:42:3f:4a:4f:9d:29:f1:94:02:05:70:
                    ac:cb:ad:ef:dd:fc:c0:5d:cb:66:c9:1f:0a:ff:99:
                    b5:f0:4b:7e:ba:15:d6:d7:af:02:8d:cb:e8:26:33:
                    3f:1e:96:9e:48:42:97:77:b1:2a:9e:7a:ad:a1:a8:
                    e9:3d:cd:e8:48:95:9b:0d:18:b4:66:19:61:72:91:
                    48:ff:12:b9:d7:91:ee:6f:fd:22:77:17:ff:e8:d6:
                    5e:ad:58:d1:b7:fc:04:00:5f:ab:84:a1:47:62:50:
                    77:5a:fe:e2:f0:41:c0:11:36:1b:3d:61:45:6f:27:
                    c0:28:b4:15:57:18:4c:a6:d2:67:98:20:2e:f7:2b:
                    5c:6c:62:6d:28:c1:48:06:5d:3f:6c:07:1f:e2:1c:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:5F:FC:54:86:5A:2A:2E:07:2F:7C:99:F6:EC:C6:29:AA:8E:08
            X509v3 Authority Key Identifier:
                keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/c4Rf_FSGWiouBy98mfbsximqjgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:72:21:01:14:08:03:4b:84:5d:15:71:a1:13:ab:49:91:ed:
         a6:b4:bf:eb:35:19:e5:8e:5d:a0:36:b3:68:40:e9:92:f8:59:
         62:be:9e:eb:30:fc:a3:5d:21:d8:2c:c5:ff:cf:9c:83:a6:99:
         f2:f9:3a:31:61:77:ae:7e:b6:e1:53:d0:7a:71:49:9f:8d:f2:
         ff:f4:72:47:17:d9:bb:fb:23:9c:91:19:9f:5d:2c:ab:2c:ac:
         3d:b4:fb:fb:95:8e:65:b5:8b:c3:e0:fb:07:6f:85:97:fc:b1:
         91:27:d2:1b:1e:45:ec:2c:52:2d:2c:dd:51:fe:8f:4e:05:f4:
         5e:60:aa:fb:0f:6f:16:75:39:63:20:43:37:cb:7a:4c:4a:5f:
         2c:e4:1e:13:6b:cb:05:4e:83:a0:91:8a:80:ed:c8:c8:ce:3b:
         23:f7:3f:98:ae:1e:01:a1:a5:81:a6:d3:23:f2:43:50:88:32:
         5b:32:2a:d2:5d:20:07:df:bd:9c:1e:84:76:11:fa:31:fa:d8:
         6a:c1:83:95:50:63:a2:92:99:cc:da:7e:55:f7:37:fe:6a:8a:
         13:06:01:4d:44:48:36:b4:08:6c:52:22:b9:30:9d:ac:3a:ce:
         4d:68:a6:6c:23:cd:9e:bf:4b:dd:fb:fc:10:a2:91:e9:5a:66:
         d1:11:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:02:02 2024 by rpki-client on console-ams.rpki-client.org