Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa
File:                     chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa (raw, json)
Hash identifier:          sxJs5OhVzpeWdn6uT/lTHJ/e6+4PkKIC2xqmdYUez8g=
Subject key identifier:   72:17:F7:81:D8:B7:B6:5F:8C:4B:85:59:EC:E6:C0:E3:31:82:1A:08
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       018CC5002D513788AE588FDC7DD04F44C78C
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa
Signing time:             Mon 01 Jan 2024 12:29:32 +0000
ROA not before:           Mon 01 Jan 2024 12:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42630
IP address blocks:        193.200.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:2d:51:37:88:ae:58:8f:dc:7d:d0:4f:44:c7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Jan  1 12:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7217f781d8b7b65f8c4b8559ece6c0e331821a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:63:15:17:47:da:a8:65:a0:60:0f:06:b5:
                    e8:f8:fb:d5:1f:93:30:54:7d:43:4e:1d:37:d2:48:
                    99:ce:ce:4c:24:64:77:2e:bc:f8:71:ed:97:53:a3:
                    89:21:05:3b:29:90:8f:63:ad:61:a6:cc:b6:23:64:
                    59:7e:71:d2:a4:b3:86:93:ad:f9:3d:c6:7a:a8:58:
                    43:df:85:17:68:c2:81:c0:33:43:22:87:d0:12:41:
                    02:7b:30:3e:c8:38:7d:6f:66:26:9e:27:f6:a9:00:
                    c2:59:07:d5:82:0a:0b:b0:57:09:1c:61:ce:4b:3c:
                    6a:5a:18:67:78:a5:ff:9d:67:ee:cb:16:74:7f:ca:
                    dd:80:3a:63:49:41:51:56:bf:19:9f:ce:c9:05:82:
                    42:07:af:9d:c6:72:af:3a:bb:c9:b2:f3:c5:5b:44:
                    ea:a3:e1:c9:b4:dd:35:8c:cd:bc:d1:fb:e1:2e:fc:
                    d1:80:da:4e:5a:86:ea:0c:b2:4e:42:27:ab:83:79:
                    5d:63:0f:a9:0f:af:24:45:e7:32:a5:1f:8d:0c:ba:
                    a1:28:96:6f:6f:28:b6:1e:22:71:b9:a3:31:d0:b3:
                    50:b1:4b:ce:40:21:3b:34:fe:4d:05:ba:9a:dd:a4:
                    6a:6c:5f:ea:13:e4:2b:5c:77:cb:9d:b8:68:a9:ba:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:F7:81:D8:B7:B6:5F:8C:4B:85:59:EC:E6:C0:E3:31:82:1A:08
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:45:37:0a:a5:5b:84:72:35:14:61:4d:19:a2:a8:25:73:
         2f:8b:fe:68:e6:74:41:22:4e:e9:52:e7:d5:37:b1:e4:14:b0:
         8e:46:52:d1:c8:33:e6:74:2b:c2:1e:ba:81:49:19:aa:12:c6:
         66:b5:a2:e4:3b:4d:5e:5b:e2:8a:31:0d:87:80:00:84:10:d7:
         c5:cc:16:ed:ea:c8:41:49:48:ef:ff:03:c5:e7:0e:03:04:bd:
         2a:00:50:03:25:d0:ad:09:63:2d:0b:b8:95:5b:c0:fc:69:4e:
         55:ae:6b:63:06:7d:ac:d8:f0:83:88:e3:c5:12:da:2d:b0:34:
         20:2d:b4:57:61:98:57:f4:f8:cc:22:36:3d:07:07:a6:af:c0:
         a8:9e:d4:a9:6e:48:c4:58:ec:a9:15:f9:9b:a7:91:64:6e:26:
         b5:b4:4d:db:97:49:05:cc:b4:22:cf:37:46:3f:51:51:8c:a5:
         08:24:bc:b1:e6:8a:0e:2e:d1:36:48:e0:c1:ff:cb:72:8e:8f:
         79:fc:c7:1f:82:96:1a:a1:71:d6:01:31:61:94:d8:cd:6c:54:
         7b:44:e7:19:aa:68:cb:32:09:31:10:83:67:9b:50:5e:50:17:
         6b:83:d2:2c:12:58:b5:35:f6:3b:b2:30:a9:99:b1:b2:67:99:
         49:27:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:35:07 2024 by rpki-client on console-fra.rpki-client.org