Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SjWTSMA0UUCpk8YgJUpTte7Z9Vc.roa
File:                     SjWTSMA0UUCpk8YgJUpTte7Z9Vc.roa (raw, json)
Hash identifier:          +NrrDWKM9vRq4PwgJgw6fssXim+9H6VihAB0392u2eE=
Subject key identifier:   4A:35:93:48:C0:34:51:40:A9:93:C6:20:25:4A:53:B5:EE:D9:F5:57
Certificate issuer:       /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial:       018CC86FEF38A7533D1113B7356E907294A7
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SjWTSMA0UUCpk8YgJUpTte7Z9Vc.roa
Signing time:             Tue 02 Jan 2024 04:30:28 +0000
ROA not before:           Tue 02 Jan 2024 04:30:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48313
IP address blocks:        213.14.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:ef:38:a7:53:3d:11:13:b7:35:6e:90:72:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
        Validity
            Not Before: Jan  2 04:30:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4a359348c0345140a993c620254a53b5eed9f557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:c7:d9:05:bd:ae:cb:46:98:3e:11:f9:43:
                    40:35:94:57:7c:f6:20:cd:1b:1c:83:b5:c2:7c:7e:
                    48:c9:47:19:0e:46:f7:06:2b:79:1c:d3:a5:99:91:
                    da:6a:40:ca:a0:40:8e:13:49:c7:69:21:16:2c:27:
                    62:3e:81:a4:17:8f:c2:6f:47:fa:dd:f4:5e:89:9d:
                    5c:05:4c:0c:7f:ce:c9:95:74:48:03:fe:cf:cc:a1:
                    f1:6a:71:d8:d1:36:2c:8a:08:bd:b0:96:96:38:75:
                    35:be:60:ab:12:35:07:cd:ed:c0:df:f9:36:53:74:
                    9b:fd:32:de:03:d9:8a:5e:65:00:fd:ca:3e:63:ff:
                    19:b7:de:cd:59:5a:d7:b2:ea:b6:c6:3f:66:a3:34:
                    48:17:b5:f1:17:60:7e:aa:30:0e:61:61:72:1a:72:
                    e4:5f:77:27:f3:39:4b:a8:b7:ab:c1:75:c8:b9:7c:
                    aa:e6:c0:84:33:31:43:84:dd:f9:7b:81:f2:da:9e:
                    a5:79:8f:dd:6a:10:0a:c1:35:84:f8:38:86:bf:b0:
                    70:7f:db:f7:e7:e1:8f:73:ab:f9:dd:3e:5d:5f:35:
                    03:78:b4:15:6c:c4:13:75:82:cf:9e:c5:ab:f6:4e:
                    fb:25:7b:0a:0c:04:86:9d:10:49:04:3a:1c:3d:82:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:35:93:48:C0:34:51:40:A9:93:C6:20:25:4A:53:B5:EE:D9:F5:57
            X509v3 Authority Key Identifier:
                keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SjWTSMA0UUCpk8YgJUpTte7Z9Vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.14.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:49:d9:30:e7:44:97:57:3d:dc:1b:0c:db:5f:59:86:43:
         1d:a3:b5:af:93:77:ef:85:97:c7:79:f7:da:3f:55:a5:f1:74:
         f7:5c:b5:f1:c4:1d:67:39:db:f7:ac:dc:39:13:f2:c4:87:6d:
         fe:fb:f7:f3:87:78:62:09:69:bd:b3:70:37:6b:1d:1d:d2:c6:
         d4:ad:3d:32:e6:21:9f:05:5f:15:ec:1c:95:5f:42:70:78:bf:
         c2:8d:28:07:37:65:c3:58:fc:d0:e7:19:69:d7:ab:cd:ba:04:
         0a:3f:27:8c:be:17:df:83:21:b6:69:89:a6:e8:d6:df:3e:dd:
         d7:06:e4:11:36:49:c0:b8:1c:0e:62:f0:64:7a:c8:4c:e3:27:
         76:81:98:81:35:74:c0:7d:71:78:f2:f0:31:5d:59:fd:5d:c7:
         4f:5b:34:a1:1c:d0:bb:a2:19:5f:01:da:71:26:e6:96:35:be:
         2e:3d:a6:08:2e:5e:1c:d3:8d:12:a0:1d:b8:d9:d9:d9:ab:46:
         f1:86:08:c9:a0:81:2a:31:90:ce:d2:ce:df:de:f6:fe:f1:3d:
         5f:f5:ef:10:f0:43:ab:48:c0:07:ac:af:99:bc:bd:02:f8:3a:
         b4:02:92:9d:08:69:93:11:3c:8f:1c:ad:ed:f7:7f:e4:e9:0f:
         8a:4b:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:43:21 2024 by rpki-client on console-ams.rpki-client.org