Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/y9tyRqOLLUT_DwpRxJU4rfsUofc.roa
File:                     y9tyRqOLLUT_DwpRxJU4rfsUofc.roa (raw, json)
Hash identifier:          QxAA9PJgP+N/IOUyh3aZtr9O/6xAdcLGq1DAdJPGn6g=
Subject key identifier:   CB:DB:72:46:A3:8B:2D:44:FF:0F:0A:51:C4:95:38:AD:FB:14:A1:F7
Certificate issuer:       /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial:       018CC9BBBE6E3B8830E52C1264F4AEDA9252
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/y9tyRqOLLUT_DwpRxJU4rfsUofc.roa
Signing time:             Tue 02 Jan 2024 10:32:53 +0000
ROA not before:           Tue 02 Jan 2024 10:32:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3320
IP address blocks:        91.103.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:be:6e:3b:88:30:e5:2c:12:64:f4:ae:da:92:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
        Validity
            Not Before: Jan  2 10:32:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cbdb7246a38b2d44ff0f0a51c49538adfb14a1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:df:b0:e3:fb:36:35:da:5c:8b:3c:c8:3a:
                    84:33:5d:8e:fa:a4:f9:fa:58:2a:1b:4b:ca:67:92:
                    ea:a6:36:16:b3:73:1c:81:7c:b1:08:2e:96:08:26:
                    39:ee:8e:c5:28:b6:76:ae:11:4b:85:0d:20:58:28:
                    9c:dd:63:b6:cc:e9:0a:78:c5:1c:45:9d:87:e4:7c:
                    b7:e0:ac:4b:83:42:93:7d:14:f3:51:b8:08:0d:94:
                    61:db:0b:61:89:d9:38:5d:83:7d:f8:dd:24:f6:ff:
                    ef:ca:50:cf:5f:28:ef:f2:d4:2b:47:04:15:bd:10:
                    2e:bd:33:4d:87:15:44:60:7f:05:47:59:58:2a:25:
                    4f:78:c5:03:dc:78:99:71:bc:c0:5a:57:29:6a:45:
                    80:29:04:21:9d:aa:da:c3:e4:67:95:f0:6a:af:95:
                    3e:bd:d5:27:d3:d5:27:c6:64:2f:20:d8:46:c6:92:
                    b8:b3:4a:fd:22:68:65:f9:4f:20:eb:f9:e7:ca:59:
                    69:7f:1c:d7:91:5e:e4:5a:50:0a:02:e6:4c:ab:bc:
                    44:06:52:ae:df:00:14:d7:3d:4a:24:7f:76:6c:d8:
                    4a:b3:88:73:84:ab:ba:f3:4d:01:e1:d3:e7:11:b7:
                    fc:4e:ca:2a:83:ff:ee:a8:76:5b:8c:6c:18:ac:44:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:72:46:A3:8B:2D:44:FF:0F:0A:51:C4:95:38:AD:FB:14:A1:F7
            X509v3 Authority Key Identifier:
                keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/y9tyRqOLLUT_DwpRxJU4rfsUofc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:be:51:3e:0d:9a:2b:7a:76:15:95:cf:cf:ed:5e:a7:ae:
         aa:be:4e:7f:d8:e9:e1:6f:58:48:2f:7a:fe:f2:a1:3c:cf:2b:
         1f:f4:42:81:ce:82:09:aa:4f:88:ef:b1:6e:73:31:68:4e:ae:
         a2:a5:3f:85:9e:f4:a4:1e:c6:a9:8e:66:b3:90:ee:e3:73:96:
         c7:66:0a:64:49:aa:3b:ee:d6:3a:51:8f:c7:95:fd:58:54:f9:
         d4:de:79:20:0c:42:32:14:8d:99:f4:30:ab:e7:8b:95:fa:75:
         3d:cf:f0:44:01:f9:b9:01:d1:8f:ea:e8:a5:12:64:a6:e6:38:
         bc:1c:44:97:17:1e:97:c8:bf:13:15:cc:c9:cd:e4:54:ab:2c:
         7c:d1:a5:5e:3d:44:ff:de:1f:a8:bd:e0:24:ce:13:24:17:06:
         45:bf:e8:7c:87:6b:e7:13:83:1e:32:02:ff:4a:4c:9c:0b:01:
         19:7b:b3:93:b3:90:1a:bb:e7:8e:ac:48:d8:0d:93:c8:ea:a3:
         90:18:46:47:53:c2:52:41:3d:15:70:ee:84:4c:8e:d2:be:0e:
         09:ca:e3:96:da:ae:3d:21:7e:70:87:f1:ab:d1:ee:de:16:40:
         dd:36:73:f7:88:2d:db:a2:c3:e4:da:f2:17:38:11:b7:b1:ca:
         7a:e4:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:34:01 2024 by rpki-client on console-fra.rpki-client.org