Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa
File:                     hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa (raw, json)
Hash identifier:          LBMejMZNY68D7GhaHpmCBm3aRtUKShAwuiL4AF/E/T0=
Subject key identifier:   86:04:8D:68:BD:14:C6:E3:B4:10:AD:5F:B2:B5:47:01:CA:A4:34:30
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018D417B8A3873D72731B5D038786527AFA4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa
Signing time:             Thu 25 Jan 2024 16:37:11 +0000
ROA not before:           Thu 25 Jan 2024 16:37:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205220
IP address blocks:        94.176.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Dec 2024 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:41:7b:8a:38:73:d7:27:31:b5:d0:38:78:65:27:af:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan 25 16:37:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=86048d68bd14c6e3b410ad5fb2b54701caa43430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:a5:bb:1b:1a:e9:fa:f4:e4:be:0f:f7:85:
                    d5:9a:a7:0d:a9:80:d7:a1:26:de:cd:8d:d4:00:1b:
                    69:81:88:30:25:48:d0:75:3a:2d:06:1a:00:4e:ff:
                    c8:34:1e:f1:ee:4e:65:7e:71:09:e2:f2:07:63:85:
                    6d:7a:20:5c:99:82:52:ab:b6:5a:2a:ca:b7:80:2e:
                    95:11:3f:70:b2:0b:52:58:90:c4:f2:be:ae:c9:72:
                    a8:d3:47:0d:fd:89:f8:6f:cd:88:3c:1f:3e:bf:dd:
                    f4:c1:9d:24:61:d0:57:2e:f8:c2:c6:ac:fc:36:ea:
                    3b:f5:47:69:7c:83:d1:52:63:73:a1:48:08:72:63:
                    75:53:2b:16:cb:9d:96:43:5d:95:9b:4c:c4:2b:ae:
                    3f:e5:c6:59:1c:df:56:11:9b:5b:01:bc:bd:f2:21:
                    61:50:26:f0:d7:c0:30:92:a6:08:63:2b:b5:a2:f1:
                    a3:fc:03:0f:4d:29:55:8b:f1:ad:8e:90:fa:f5:2a:
                    87:dc:48:0f:44:a9:db:50:9d:49:d5:bd:69:cc:e9:
                    00:fe:e9:16:e2:66:8a:41:e9:2e:2f:20:82:39:2a:
                    6e:79:df:b4:13:21:92:99:be:16:95:07:1c:c9:20:
                    c4:3c:72:c3:c5:21:15:db:08:a3:1c:73:13:4f:9c:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:04:8D:68:BD:14:C6:E3:B4:10:AD:5F:B2:B5:47:01:CA:A4:34:30
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:bf:06:63:d8:30:af:94:f4:bf:5e:51:26:05:35:9d:9b:
         ba:87:28:48:f2:ea:71:86:09:73:69:cf:eb:2c:c4:7e:8c:4e:
         59:64:86:7c:2a:9e:5e:c6:a5:2d:ff:63:52:0e:f5:18:52:f3:
         a9:81:43:59:d7:41:89:cb:9e:8f:af:38:85:3a:71:5d:0c:0a:
         72:0b:ca:7d:8a:8d:5b:d3:b6:ff:37:41:c1:e6:d3:c4:fb:7b:
         51:e6:01:47:5e:22:93:ad:75:7e:fe:a3:3f:35:bb:66:06:54:
         b9:41:d3:4e:5d:c3:90:27:ee:03:f2:c8:ac:88:8a:2d:7d:a8:
         c6:40:ee:27:66:2d:f1:07:a3:19:8b:16:9b:43:f2:b9:04:dd:
         73:7d:3a:86:59:74:05:ae:c9:60:ff:9b:58:71:7c:7b:46:41:
         41:8c:5a:6b:a5:ce:54:bd:9f:26:87:81:19:74:e4:5b:96:28:
         bc:20:ac:8d:29:cc:ae:c5:e1:24:1f:0e:f8:4b:eb:fc:28:2d:
         8a:7b:ee:2d:fa:7c:7e:7d:d3:83:13:09:e2:71:61:71:d5:85:
         f7:34:9f:1a:3a:0e:18:19:3a:e8:dd:33:69:8f:45:ca:c9:c8:
         11:a4:ec:ea:e1:41:2a:ef:b2:5c:2f:4d:9c:0b:40:a1:8a:24:
         66:dc:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 06:53:14 2024 by rpki-client on console-fra.rpki-client.org