Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/L24ujMjlzwh62P1HorUr0cSvZCw.roa
File:                     L24ujMjlzwh62P1HorUr0cSvZCw.roa (raw, json)
Hash identifier:          rEHUy78ob0si32eupL+l62gKyQ5EwyiZ0gV3gxgro9I=
Subject key identifier:   2F:6E:2E:8C:C8:E5:CF:08:7A:D8:FD:47:A2:B5:2B:D1:C4:AF:64:2C
Certificate issuer:       /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial:       018CC8DEFF8B0AE11204E8D05890EFD0E512
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/L24ujMjlzwh62P1HorUr0cSvZCw.roa
Signing time:             Tue 02 Jan 2024 06:31:46 +0000
ROA not before:           Tue 02 Jan 2024 06:31:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137
IP address blocks:        160.80.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:ff:8b:0a:e1:12:04:e8:d0:58:90:ef:d0:e5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
        Validity
            Not Before: Jan  2 06:31:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2f6e2e8cc8e5cf087ad8fd47a2b52bd1c4af642c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:63:be:22:ac:bf:61:d0:36:5f:22:f0:5c:a6:
                    5b:87:d9:4f:71:72:c4:ce:6c:cd:7d:27:29:d4:60:
                    83:69:e5:43:f5:ec:c7:ec:b3:de:e4:fd:ef:b1:11:
                    39:70:79:25:fa:ba:92:69:62:70:94:a3:f2:7d:1a:
                    31:21:6c:63:62:d1:a2:ff:b9:ed:e5:1e:a7:5e:71:
                    1d:84:fd:6d:c3:a9:84:99:9c:9a:4e:29:4d:e7:1d:
                    f7:18:49:f1:e7:47:c1:15:04:29:c5:63:ba:2e:d1:
                    ef:d5:c3:67:1a:cb:18:f0:b2:3d:11:a3:95:3a:da:
                    f4:c5:dc:fc:24:eb:9b:a7:3a:cc:d2:7a:4b:80:37:
                    ee:67:2d:41:66:4b:03:63:9a:fd:28:99:9b:a9:19:
                    65:4e:84:bf:fa:fd:54:b7:72:de:25:ed:8d:66:ba:
                    00:55:c1:cb:d1:af:47:2c:a4:cb:86:ce:aa:09:49:
                    71:8a:03:da:1d:eb:1d:b5:23:cf:86:8b:d0:89:89:
                    00:47:0a:e1:5f:74:6d:99:a9:8e:ac:9d:7f:1d:17:
                    62:1d:ae:33:7b:50:c6:e8:bb:74:9e:bc:2b:85:54:
                    ab:67:43:63:1c:d2:39:bc:1d:79:4d:b6:6e:07:15:
                    fe:e6:ae:73:d4:1a:ce:2e:dc:9d:4f:a2:36:c2:c0:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:2E:8C:C8:E5:CF:08:7A:D8:FD:47:A2:B5:2B:D1:C4:AF:64:2C
            X509v3 Authority Key Identifier:
                keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/L24ujMjlzwh62P1HorUr0cSvZCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:cf:23:46:c3:47:5f:02:09:80:09:bd:e3:8e:01:3b:0a:
         58:25:a2:1d:65:dd:96:8a:50:18:97:7e:39:fa:d2:f8:35:41:
         3c:22:d4:b1:25:76:17:72:4f:e1:14:3c:aa:5e:48:84:26:fc:
         8d:0f:1b:c7:d1:9e:10:18:2c:f0:8b:4b:d6:1d:2d:0e:8d:ca:
         25:81:b2:37:b8:7b:7e:0f:84:c9:fa:df:56:46:b1:ed:89:6e:
         e8:43:b1:d0:f6:16:18:2a:a4:d9:a4:6a:3a:05:c4:d9:ab:28:
         a6:38:44:df:d2:b6:d0:a2:bb:c4:c8:5e:aa:b9:be:06:b9:11:
         3b:b7:d8:5f:ed:b6:98:35:2f:1e:55:8c:9a:00:8f:d3:45:77:
         e1:b9:eb:73:54:f4:f1:3b:c6:66:2a:bb:b8:bf:2e:45:03:29:
         49:7c:3d:bb:0a:bd:2c:9d:16:ea:dd:1f:ac:ec:5c:b3:a1:90:
         87:48:5c:ce:fc:8e:5d:56:1f:29:76:a3:0a:2a:37:88:3e:80:
         15:37:ef:16:55:98:2c:72:aa:ff:7d:11:f3:2a:c7:51:12:c7:
         01:a0:8b:63:0c:61:bd:a0:47:38:77:e4:38:2c:bb:e8:33:a7:
         51:4b:3b:2d:74:06:ed:7b:12:70:19:55:13:7b:c4:2a:a1:29:
         99:b2:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:56:24 2024 by rpki-client on console-ams.rpki-client.org