Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa
File:                     UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa (raw, json)
Hash identifier:          xiJa2lGBfTDMcUIPrbXwXpn0e7DzOLKhZxFKWIqSBwE=
Subject key identifier:   50:E1:E0:45:FD:72:A7:48:6C:BC:0D:1F:61:09:50:3F:4B:53:D0:7A
Certificate issuer:       /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial:       018D7E0FB900829924066383185D63736FED
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa
Signing time:             Tue 06 Feb 2024 10:56:15 +0000
ROA not before:           Tue 06 Feb 2024 10:56:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56701
IP address blocks:        46.8.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7e:0f:b9:00:82:99:24:06:63:83:18:5d:63:73:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
        Validity
            Not Before: Feb  6 10:56:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=50e1e045fd72a7486cbc0d1f6109503f4b53d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:f3:c2:44:fb:a0:11:92:37:5c:79:a5:4c:
                    ac:50:fa:27:e9:01:7d:cb:23:53:bc:35:b7:ad:ea:
                    3d:08:83:f4:05:56:f4:bb:55:1f:15:7f:ee:8b:d6:
                    ed:b5:01:84:fe:e9:46:d4:9f:b1:16:93:75:db:93:
                    7e:dd:28:41:d6:44:ed:e2:ab:a1:ee:2c:68:4a:78:
                    b4:6a:57:52:ed:0a:0b:be:f8:27:f8:1d:6f:f0:8b:
                    02:ed:56:75:13:77:07:3d:38:17:3b:94:63:4b:54:
                    52:25:77:cd:87:5f:78:78:ab:a4:ff:d8:04:61:b2:
                    27:de:52:6f:3f:c3:db:05:69:1b:38:ec:0b:f0:79:
                    d6:e8:62:01:ac:0a:ea:46:e1:1e:28:f5:97:55:d7:
                    36:c4:18:10:83:a9:97:5a:40:53:36:ad:7f:82:b2:
                    f6:b6:de:f6:b1:8c:c3:29:30:55:f9:dd:ca:91:e2:
                    df:1f:6a:d6:6c:6a:41:d0:94:a7:4c:6e:22:13:83:
                    b7:a7:37:c6:f6:8c:47:22:cb:b5:63:42:90:08:10:
                    1a:49:70:43:cd:af:81:48:1e:f0:34:64:fb:38:be:
                    e4:a2:69:81:be:2f:27:9b:a5:78:0e:8d:ee:9c:9b:
                    23:21:27:e4:7c:04:28:85:6e:47:e4:e0:15:eb:c2:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:E0:45:FD:72:A7:48:6C:BC:0D:1F:61:09:50:3F:4B:53:D0:7A
            X509v3 Authority Key Identifier:
                keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.8.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:47:01:2a:8e:2c:97:a4:2e:45:22:8a:9d:32:b7:8e:37:
         79:4e:76:35:f7:89:61:f5:22:94:84:2b:76:54:ca:85:3f:13:
         c8:6a:b2:3e:4d:0b:5e:8a:54:91:e0:d8:b5:ba:61:1b:bd:6c:
         34:1c:22:fa:03:2c:1a:f8:4d:eb:5f:13:ca:9d:d5:94:d0:bf:
         46:6e:85:34:a2:3f:3b:78:27:ec:f4:1e:40:6e:b6:49:2e:a5:
         66:d2:77:91:50:e5:77:5b:24:92:7e:e1:56:2f:41:93:bf:f4:
         c5:50:80:43:93:d4:bf:70:f5:48:86:b0:e9:b0:43:4b:9f:06:
         a6:c9:45:5f:da:5c:8e:f8:90:e2:df:e5:0b:8d:e0:bb:62:16:
         64:49:64:f5:03:93:ff:81:2e:0c:6c:f6:6b:28:1b:fb:ed:22:
         28:80:2d:1f:81:26:e4:69:19:bf:19:cf:83:a9:4d:c1:10:69:
         c6:23:57:bd:58:2b:01:eb:bf:ef:87:a2:e2:3f:74:ee:c9:62:
         f2:be:3f:c5:33:9c:5c:b4:cc:e4:17:78:37:68:24:c6:07:09:
         01:1c:da:05:80:6b:72:78:b8:0b:7e:4b:40:87:03:2f:1d:8c:
         47:0a:cc:ee:be:8f:66:64:f6:54:b4:41:58:74:47:f0:9b:97:
         25:ee:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:58:54 2024 by rpki-client on console-ams.rpki-client.org