Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/CGFRZBQUgmR4OWsjEhBfVEftiuU.roa
File:                     CGFRZBQUgmR4OWsjEhBfVEftiuU.roa (raw, json)
Hash identifier:          oLBXpVqC/OcHKYqQusystutyMSHipBs55Qbtl3SLPx8=
Subject key identifier:   08:61:51:64:14:14:82:64:78:39:6B:23:12:10:5F:54:47:ED:8A:E5
Certificate issuer:       /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial:       018CC726CB2250C5753B2384B7AFE2AAA759
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/CGFRZBQUgmR4OWsjEhBfVEftiuU.roa
Signing time:             Mon 01 Jan 2024 22:30:57 +0000
ROA not before:           Mon 01 Jan 2024 22:30:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203358
IP address blocks:        185.253.59.0/24 maxlen: 24
                          2a12:c140::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:cb:22:50:c5:75:3b:23:84:b7:af:e2:aa:a7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
        Validity
            Not Before: Jan  1 22:30:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=086151641414826478396b2312105f5447ed8ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:a5:97:dd:79:a6:7d:c2:59:15:46:93:74:
                    63:1e:36:8f:a2:e7:d9:4e:9f:cf:6b:4c:c3:ac:bf:
                    08:ea:28:4a:b3:e5:23:a0:97:cd:d5:a3:e8:fa:95:
                    7e:7f:d9:52:8b:9c:62:cb:ee:dd:e6:83:5c:e6:98:
                    77:c7:e3:fa:29:69:47:97:6b:40:7a:9e:78:84:5c:
                    bd:d7:65:79:15:06:98:ce:a9:87:e3:08:c9:aa:57:
                    b2:02:6e:13:eb:d9:d8:f9:27:f4:62:68:ad:e5:1e:
                    37:f1:b2:46:50:95:e4:21:91:a3:2b:23:e1:ce:91:
                    55:67:3c:51:7b:7b:d8:20:1e:e2:cc:0e:86:32:04:
                    fb:0f:cc:29:90:80:28:e9:64:e5:e5:23:f3:3e:3e:
                    74:15:48:78:6d:0b:f9:a8:cd:03:f0:ea:17:5a:cc:
                    d7:5e:f7:76:9d:44:9d:23:84:5e:17:64:bf:f3:46:
                    b5:c8:b5:57:0e:ea:61:ff:ac:77:b2:f1:0a:84:fd:
                    7e:6a:f8:a9:40:df:44:08:a8:0c:47:79:5f:fa:b9:
                    15:3a:95:25:3c:68:b2:e4:30:5c:d0:d7:ae:bd:d1:
                    07:0f:15:bd:3b:a8:77:e7:32:07:14:0a:0a:71:be:
                    26:73:67:55:a7:63:dc:3a:b7:66:80:40:fe:13:41:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:51:64:14:14:82:64:78:39:6B:23:12:10:5F:54:47:ED:8A:E5
            X509v3 Authority Key Identifier:
                keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/CGFRZBQUgmR4OWsjEhBfVEftiuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.59.0/24
                IPv6:
                  2a12:c140::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:ee:04:fc:b7:33:03:d4:02:1f:e0:28:48:73:56:11:2f:
         da:de:3e:70:fd:4e:66:e0:96:64:e9:82:d0:e6:0c:15:50:6f:
         27:30:9e:31:69:17:97:a4:f0:1a:f0:4a:82:18:ed:e6:85:f1:
         2d:2a:59:70:36:ba:ef:f9:cb:7f:9b:8c:f9:ba:7a:ad:50:3f:
         66:69:96:a0:f6:a2:00:63:f5:70:84:f6:76:16:fc:21:8e:f3:
         c6:eb:2f:13:40:64:e1:44:d2:71:53:c1:c4:e0:4d:c5:12:93:
         bb:be:ec:cb:a4:fb:94:b3:4e:06:f4:79:31:fb:46:67:3a:43:
         ed:bf:08:20:15:d0:b5:d8:5b:c4:0d:81:4b:26:6f:95:53:8b:
         ef:2b:4c:c8:2e:a6:e4:bf:6d:5b:54:3c:f6:1b:f0:06:82:61:
         be:a8:77:92:b0:6b:97:1c:85:4d:0b:01:c8:b8:dd:81:c6:be:
         2f:de:bd:40:b7:a8:d4:60:7b:f5:cb:3f:2e:08:e4:ce:d5:ec:
         2c:b8:cf:19:b3:04:3f:5c:f5:f3:63:fb:4e:6d:c7:c1:07:bb:
         cb:c7:b0:d1:3e:8d:40:17:1c:6b:8f:39:df:91:47:c2:88:2c:
         8f:ac:f9:e6:5d:6a:82:d9:f5:8a:ea:af:08:dc:e5:0a:8b:4f:
         50:b8:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:13 2024 by rpki-client on console-ams.rpki-client.org