Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa
File:                     4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa (raw, json)
Hash identifier:          Xwy2J4T3u2rEQl/pI/cSkrUkLpdIg3KFW31/bkXfxBg=
Subject key identifier:   E2:DB:19:6C:BE:40:FA:5B:78:AB:10:61:F2:5B:EB:70:94:88:60:DE
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       018CC56DFA3A343D2DB4B1995AEE46258724
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa
Signing time:             Mon 01 Jan 2024 14:29:28 +0000
ROA not before:           Mon 01 Jan 2024 14:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42481
IP address blocks:        91.192.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6d:fa:3a:34:3d:2d:b4:b1:99:5a:ee:46:25:87:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: Jan  1 14:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e2db196cbe40fa5b78ab1061f25beb70948860de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:a4:7c:11:ec:a3:8b:5c:2c:5e:0a:88:39:
                    18:ee:a4:6a:13:1d:fd:57:6d:1a:22:72:00:63:28:
                    97:67:a8:64:97:4b:66:45:ce:0c:2a:3a:3a:70:9c:
                    b4:f9:c6:2e:aa:cb:6c:77:cf:e2:72:3c:85:48:12:
                    11:88:d3:46:a0:56:6e:70:3e:2c:74:b0:43:7e:7d:
                    40:b0:7e:88:31:e0:cb:60:70:4c:1e:b4:64:d3:ad:
                    3e:f3:8f:df:b0:27:09:22:45:c1:d1:3a:37:6a:52:
                    07:37:bb:5d:f9:f1:f4:32:f3:c0:c5:40:88:f9:5f:
                    b0:c7:e0:b6:98:02:dc:ea:bf:e1:fb:67:59:cf:97:
                    cc:b2:ae:82:88:8e:8b:83:f2:e0:7e:ce:34:bc:85:
                    ea:e2:83:0c:04:f8:3c:20:4f:b0:e2:a1:1a:60:f2:
                    2a:71:ff:d9:31:d9:58:8d:e9:48:aa:12:c9:c7:b5:
                    17:71:7c:a3:2a:64:08:46:81:96:a7:27:27:00:32:
                    94:c4:3d:98:74:e1:c6:42:56:63:fd:1a:3f:ef:94:
                    2f:9f:bc:63:30:de:f7:e4:1f:ec:2c:87:de:7e:f9:
                    3f:b2:1d:40:5c:d7:e9:ea:f2:94:d4:19:d0:04:1b:
                    49:ca:92:5f:15:78:8c:7a:25:6d:83:65:f4:80:a1:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DB:19:6C:BE:40:FA:5B:78:AB:10:61:F2:5B:EB:70:94:88:60:DE
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:c9:8e:57:7c:43:3b:72:dc:ff:2e:85:2b:3b:57:d6:4a:
         af:1e:54:7b:2b:1e:1f:ba:6c:5c:74:1e:b8:43:80:56:89:ee:
         fb:cd:73:1a:41:cc:1d:e1:15:f2:4e:90:d6:28:1b:a2:8a:41:
         b3:74:fc:77:1d:a2:cf:68:ba:61:21:fe:d3:56:9c:8a:11:d2:
         c8:da:76:58:36:3e:71:80:69:a3:0a:7e:3f:6d:5e:af:64:7e:
         c6:f3:be:bc:db:62:e8:51:6e:70:fc:78:22:14:26:d1:53:6f:
         b5:64:46:cd:46:1d:f3:ce:47:99:63:7f:e4:03:bb:5d:22:82:
         89:25:18:2d:65:a9:25:bf:c3:19:df:53:75:0f:cd:32:4c:0f:
         47:e0:88:36:81:85:31:e4:f8:5a:8f:8f:2a:19:09:0e:f3:0f:
         04:67:79:a7:ac:97:8e:98:a2:40:18:c2:f3:99:95:91:4b:66:
         04:7e:c7:0f:ce:17:5c:aa:14:7f:fd:5e:f4:1a:8c:53:34:f3:
         2f:4b:77:5d:1a:bd:6c:94:7c:d5:59:f1:4b:2d:e0:58:13:30:
         7a:2c:0b:ef:0f:3f:98:0b:7e:41:38:21:d5:e7:c0:7e:47:6c:
         ea:cc:48:84:1d:75:36:3b:f1:08:f7:a8:8b:38:ed:3b:2c:87:
         72:63:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:43:42 2024 by rpki-client on console-fra.rpki-client.org