Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/92Rx_XxFu2m1RvHbpQ3NqVJZTqM.roa
File:                     92Rx_XxFu2m1RvHbpQ3NqVJZTqM.roa (raw, json)
Hash identifier:          cEyf1UO/9CdA1XO7Tn+oVVR9XTkwrK01eDFUGhAIaqY=
Subject key identifier:   F7:64:71:FD:7C:45:BB:69:B5:46:F1:DB:A5:0D:CD:A9:52:59:4E:A3
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018DCB6A19283B39F2C412A1DF399EAAD4FB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/92Rx_XxFu2m1RvHbpQ3NqVJZTqM.roa
Signing time:             Wed 21 Feb 2024 11:25:44 +0000
ROA not before:           Wed 21 Feb 2024 11:25:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213382
IP address blocks:        37.140.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 09:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:cb:6a:19:28:3b:39:f2:c4:12:a1:df:39:9e:aa:d4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Feb 21 11:25:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f76471fd7c45bb69b546f1dba50dcda952594ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:7e:70:0b:41:31:62:0f:23:c7:8b:c8:f2:
                    21:e4:3a:33:15:4b:b1:f1:70:10:b5:44:33:15:c8:
                    f1:27:43:73:9e:fd:c2:7e:23:7b:e5:a7:06:2e:c1:
                    c7:75:a0:35:57:97:65:69:29:fe:c4:e5:fd:67:61:
                    f5:fa:84:bd:d3:b6:57:46:b9:15:66:2d:16:fc:37:
                    97:98:ce:15:61:06:a6:15:e0:a6:e5:44:b6:80:11:
                    2e:34:b8:7c:ad:29:a0:e8:6f:d7:c5:a9:a1:74:96:
                    ff:9b:0c:3c:ff:87:38:25:5f:69:3d:68:17:56:87:
                    af:39:04:55:2f:5c:a8:a3:02:b2:72:7e:6c:10:7c:
                    79:f6:86:d1:a8:42:99:ff:1b:83:dc:98:b5:d7:d9:
                    49:0f:59:aa:bb:88:e9:70:a7:f4:7d:78:82:96:e3:
                    3c:87:ad:b6:f7:47:a1:09:dd:d6:29:d6:e5:26:cd:
                    3e:12:08:43:13:9d:be:d9:8a:9b:7f:10:d3:91:03:
                    87:f4:09:19:21:f4:fc:89:09:ac:ae:83:d1:55:79:
                    3b:f2:2d:38:24:fb:bc:7d:dd:76:7d:b6:6e:33:8a:
                    f5:fc:51:0b:a2:32:a8:db:3b:2c:ea:22:66:4b:6a:
                    10:39:0b:7a:d2:05:71:12:4c:b2:88:36:f4:d0:5a:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:71:FD:7C:45:BB:69:B5:46:F1:DB:A5:0D:CD:A9:52:59:4E:A3
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/92Rx_XxFu2m1RvHbpQ3NqVJZTqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:a6:dc:0c:32:63:73:d5:c0:47:45:a2:85:00:9a:00:9e:
         b6:89:ba:13:5c:15:c7:21:9f:2f:9c:cb:13:9d:1d:18:dc:1a:
         2a:d9:2f:80:04:bd:65:60:e5:71:56:29:37:32:68:b9:f3:d3:
         f9:bf:e8:a0:4f:92:f4:94:8b:70:b2:a3:24:c8:3e:09:4c:bc:
         41:da:b1:e9:d4:72:4d:54:21:b9:d6:e1:f6:33:b6:f3:16:46:
         0d:23:21:35:d8:55:05:34:d9:87:d3:4a:a7:36:7e:c3:f4:64:
         b7:cc:ae:e2:80:d9:e3:a4:a1:d4:ce:6a:10:81:17:8a:72:70:
         23:55:92:17:56:fd:5e:eb:66:65:df:5b:72:8c:43:3b:55:9e:
         47:7f:e7:1d:91:77:77:67:9f:09:cb:3e:42:90:17:f9:46:48:
         aa:5f:db:41:6d:92:66:3e:62:fa:6b:d1:53:6d:94:8b:e1:00:
         ca:2c:06:3c:91:9e:1c:a9:71:d1:d6:db:df:48:32:8d:1e:c4:
         68:c4:dc:e6:80:14:53:7b:70:05:ea:1c:b4:78:97:d2:44:c5:
         89:26:18:50:98:8a:cb:42:cc:e6:17:0e:99:72:73:58:19:ee:
         6e:8a:9f:ad:70:7a:b5:07:8f:09:bf:9e:ca:40:43:b5:72:02:
         b9:55:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:57 2024 by rpki-client on console-fra.rpki-client.org