Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ludEbwS3UyhkPLDn7PMF1MQpcUg.roa
File:                     ludEbwS3UyhkPLDn7PMF1MQpcUg.roa (raw, json)
Hash identifier:          JdhqMiGOgeGTen/PDyn57GYrXlXJ/uzaqT4cNA6hh2Q=
Subject key identifier:   96:E7:44:6F:04:B7:53:28:64:3C:B0:E7:EC:F3:05:D4:C4:29:71:48
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018D11011911014D5B6029EC3FF09F67CCBD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ludEbwS3UyhkPLDn7PMF1MQpcUg.roa
Signing time:             Tue 16 Jan 2024 06:41:40 +0000
ROA not before:           Tue 16 Jan 2024 06:41:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49981
IP address blocks:        188.213.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:11:01:19:11:01:4d:5b:60:29:ec:3f:f0:9f:67:cc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan 16 06:41:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=96e7446f04b75328643cb0e7ecf305d4c4297148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:ec:60:a9:78:29:44:47:76:6c:8e:47:88:
                    9d:eb:6b:b9:6f:ff:66:3b:52:2b:32:8e:4d:ae:3b:
                    70:67:7e:84:67:7a:76:06:2e:ba:e5:33:3f:0d:f7:
                    22:b4:15:06:9c:88:e2:3e:58:37:90:48:c9:a7:85:
                    77:5a:75:68:b4:6c:8c:b0:1c:53:f3:cf:36:53:48:
                    9d:57:fe:83:28:4b:b4:86:0f:15:dd:c4:77:98:1e:
                    63:05:31:ca:c3:fe:32:00:77:19:cf:b8:00:f8:37:
                    cf:ea:a6:fb:f0:1c:c5:b8:30:6b:b9:99:35:4c:87:
                    fa:f3:27:4d:65:fd:c8:fe:46:df:e3:3b:7b:ff:60:
                    cb:1c:19:fb:1e:9f:7d:36:f8:36:4b:52:94:ab:84:
                    0b:aa:dd:2d:5e:0d:ee:7c:c5:06:d8:0e:93:11:a5:
                    a0:98:53:11:68:3c:aa:2c:c8:bb:6e:5e:d4:8c:3b:
                    a6:90:33:34:4e:e3:1f:a8:1a:4a:cb:23:36:30:dd:
                    75:0b:46:84:0e:b8:39:ed:e8:2d:96:ea:95:08:70:
                    01:10:1f:44:54:6b:e2:64:d5:e4:3d:2f:12:37:4b:
                    19:36:28:96:2b:ab:4a:59:77:2f:30:3f:15:cf:f0:
                    d9:b0:a8:55:7b:31:e5:00:e0:46:b7:79:fb:fd:d2:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:44:6F:04:B7:53:28:64:3C:B0:E7:EC:F3:05:D4:C4:29:71:48
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ludEbwS3UyhkPLDn7PMF1MQpcUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.213.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:1b:d8:b0:a2:98:df:69:b1:4a:c4:4c:c4:92:01:60:46:
         3b:d0:58:1f:b5:29:00:7e:3e:28:d1:dd:a5:a5:60:06:c8:b8:
         f7:af:80:ba:ca:2c:22:f7:a9:9e:82:7e:d5:64:81:fd:0f:20:
         6d:19:9f:06:f8:89:31:bc:2c:aa:66:bd:5d:0b:b2:b5:a6:f6:
         49:5f:69:4b:01:0a:53:ff:59:63:b2:4e:5f:48:e2:f4:c5:66:
         4f:99:4d:a7:71:61:1d:a4:3f:c0:53:94:f4:af:f2:5c:37:fe:
         8e:c6:c7:17:0a:65:88:0f:cd:db:1c:4c:fa:1e:5d:b6:b0:06:
         61:74:09:b6:9b:bc:f7:74:38:70:5b:1f:db:99:8d:71:ff:19:
         88:2e:ad:2f:6d:30:16:68:d7:37:fc:57:82:bf:02:64:44:98:
         41:a3:5c:83:c1:d7:cd:d6:8c:b8:0b:40:86:10:51:2a:d4:77:
         ca:5e:a9:a5:31:ac:8d:4b:ab:bf:29:25:61:1f:db:97:3f:fe:
         6c:ad:83:6e:a6:ba:e6:5b:ff:34:dd:b4:cf:34:a4:2c:b2:2b:
         50:b4:45:02:21:95:e5:e2:1c:eb:4e:16:00:80:1b:cd:44:0b:
         8a:56:d0:d5:b1:bc:2b:93:68:3f:1e:67:b1:c0:cb:16:87:1f:
         76:a5:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:50:25 2024 by rpki-client on console-ams.rpki-client.org