Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/riCP4CAyHz3dY19_Li897S2B9-k.roa
File:                     riCP4CAyHz3dY19_Li897S2B9-k.roa (raw, json)
Hash identifier:          i2AHS4nyyYMpKBgIk5lkdxwzIJ4W3CewrsXgki0tp1E=
Subject key identifier:   AE:20:8F:E0:20:32:1F:3D:DD:63:5F:7F:2E:2F:3D:ED:2D:81:F7:E9
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       018CC3B6F051B8D0AD845F834148EE8DE128
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/riCP4CAyHz3dY19_Li897S2B9-k.roa
Signing time:             Mon 01 Jan 2024 06:29:55 +0000
ROA not before:           Mon 01 Jan 2024 06:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3215
IP address blocks:        193.26.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:f0:51:b8:d0:ad:84:5f:83:41:48:ee:8d:e1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Jan  1 06:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ae208fe020321f3ddd635f7f2e2f3ded2d81f7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:b0:db:64:fd:b8:5f:78:64:60:f7:ff:1c:
                    bd:67:4c:2e:65:7a:48:8e:32:e5:67:24:de:2c:a0:
                    58:0f:5b:4d:97:a6:86:a5:22:59:c9:90:6a:53:3a:
                    df:68:dc:af:64:67:ab:a4:72:90:76:be:d4:fa:91:
                    0a:f4:c3:74:43:1a:61:e6:99:b9:ff:c8:87:1e:15:
                    c4:55:73:0a:44:fa:b5:b9:b3:0d:9c:08:c4:1c:4c:
                    28:d4:50:f2:25:ce:66:60:13:05:d5:23:18:2c:ff:
                    14:41:e1:f1:72:eb:92:59:29:59:8f:ad:f3:54:34:
                    89:03:61:f7:67:2c:cb:c1:7b:13:67:65:a0:43:1b:
                    0a:b9:b9:06:57:55:bd:1f:67:37:45:03:b6:da:01:
                    e3:ad:96:11:83:8a:ec:b4:df:e9:49:ce:8d:a3:27:
                    3d:99:0b:d0:20:cb:84:83:25:33:c0:66:f2:ae:77:
                    01:ce:41:9b:a9:40:27:f0:d6:39:64:5d:36:27:31:
                    1d:50:d4:41:83:29:1c:e4:20:ff:40:1c:d2:d2:b9:
                    55:fe:ef:e5:02:5c:82:45:a5:53:65:ca:0d:36:5f:
                    f3:2d:fc:aa:39:7c:88:e1:10:a3:93:48:15:ed:ed:
                    49:e4:8a:cc:d0:69:1d:b3:cd:eb:0b:ab:c8:92:23:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:8F:E0:20:32:1F:3D:DD:63:5F:7F:2E:2F:3D:ED:2D:81:F7:E9
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/riCP4CAyHz3dY19_Li897S2B9-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:43:6a:8a:a0:fe:fd:69:f3:08:d2:c4:df:d1:12:aa:e8:70:
         e0:c3:eb:07:2d:36:7a:8a:6f:ff:95:8c:b9:67:ea:2c:da:09:
         96:09:65:e7:c3:60:c3:8c:4f:7e:af:fe:1b:be:85:08:70:b8:
         f4:19:51:8f:31:58:9d:4b:1a:22:84:17:06:72:89:5d:8b:5a:
         c4:c0:7f:c7:6b:7f:9b:e0:ec:b2:4e:0b:2c:8d:bd:aa:ef:e6:
         0f:d6:b3:f9:b2:e8:50:a0:d9:f2:f1:73:f6:63:55:71:0c:c0:
         11:72:c2:4b:ce:ce:6a:64:eb:a0:f3:91:72:f1:03:ce:77:d8:
         57:e7:b3:da:80:09:8f:27:48:13:25:15:3f:62:04:fe:2c:97:
         d0:68:62:c3:6c:16:ca:9d:99:64:26:c6:0f:88:c7:e9:68:d3:
         8c:f2:26:fc:49:19:8c:df:6b:d4:f9:5e:71:99:d5:06:eb:3a:
         d9:56:10:23:22:52:a8:f9:d4:d8:dc:35:8a:c3:01:57:5b:33:
         e8:4e:4e:8c:9f:22:5d:5a:4d:cb:f6:bf:52:78:c4:08:cf:69:
         49:b4:17:98:2a:de:28:05:09:06:00:22:11:8d:7a:9a:39:ad:
         e7:88:0d:9d:09:40:7d:4c:a0:c6:d3:f9:98:2e:c4:8c:f0:ea:
         d2:28:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:53 2024 by rpki-client on console-fra.rpki-client.org