Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa
File:                     LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa (raw, json)
Hash identifier:          brzj2PLQjt+FqlZTi6y7m3QGOFzLDfzi/MQ/T+R9xgQ=
Subject key identifier:   2D:B3:12:CD:68:E3:D1:BE:D1:03:28:55:13:FA:F0:5F:47:A8:26:C1
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       018CC3B6A7EAF767276E632BA24B1F00AECB
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa
Signing time:             Mon 01 Jan 2024 06:29:36 +0000
ROA not before:           Mon 01 Jan 2024 06:29:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     680
IP address blocks:        141.43.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:a7:ea:f7:67:27:6e:63:2b:a2:4b:1f:00:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Jan  1 06:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2db312cd68e3d1bed103285513faf05f47a826c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:ec:17:28:65:df:ee:c6:ec:9f:71:d1:07:
                    de:7e:9f:58:fe:0b:72:3b:eb:cd:58:5c:01:4c:2e:
                    69:b5:78:04:60:7b:62:97:7b:3e:8c:2b:73:8c:ee:
                    7f:56:35:9c:8d:76:d9:e7:dd:a9:ea:40:04:2e:e1:
                    b7:30:87:36:8b:02:10:f4:fa:0c:5d:f2:fc:e3:2d:
                    15:29:df:40:e8:c3:15:c2:90:ea:c5:90:48:41:a7:
                    c3:a0:92:7f:03:7a:63:08:cf:cd:33:96:48:c1:29:
                    83:51:8e:17:8d:8a:a2:05:46:17:0b:64:81:ee:60:
                    79:c0:c9:ef:ba:70:1c:b0:61:3a:14:ce:74:a4:63:
                    3f:bb:36:d3:32:fb:b6:3d:33:b3:d6:2a:9b:80:ba:
                    5b:4a:e5:8a:f3:3c:2d:98:b9:c9:7d:07:06:08:fa:
                    01:76:55:fd:93:5e:7d:ea:6a:10:32:8d:f5:9f:ea:
                    2f:97:8f:4c:d2:2d:1d:16:8f:7f:b1:e7:08:db:05:
                    3b:e7:7f:a9:0f:e1:7a:c4:eb:a3:71:49:3e:59:b7:
                    38:9c:8f:87:36:73:00:88:ce:16:e1:3d:71:17:fb:
                    4c:91:bf:45:0b:5e:f2:88:e9:70:23:48:6d:4a:59:
                    3c:ff:7c:75:7e:72:00:53:33:2b:7a:e1:e6:52:b1:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:12:CD:68:E3:D1:BE:D1:03:28:55:13:FA:F0:5F:47:A8:26:C1
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:f4:59:f7:af:99:28:98:f0:a8:b9:01:73:50:6d:e5:e2:
         a4:49:ef:36:d8:32:a1:eb:93:16:fc:14:ec:4c:1e:3e:eb:09:
         c4:04:9b:fb:f1:40:60:44:f6:88:6f:55:77:86:39:ec:d4:fd:
         c0:1f:93:ad:2d:b0:57:4d:d5:bf:33:cc:b1:13:95:ed:a8:e2:
         54:87:b9:34:1b:26:7a:1c:4f:89:7c:ec:b9:a1:16:a9:bb:06:
         4f:30:b9:2c:23:9a:8c:86:19:1c:de:68:33:d1:79:81:06:3c:
         7b:7b:d4:8d:16:51:bf:64:f2:49:4b:50:3f:0d:23:4a:8d:07:
         2c:f6:7c:e2:d2:fc:20:2b:0c:fe:5c:a1:1b:69:c5:52:ff:a8:
         a8:32:42:54:f4:fc:41:24:4a:64:e1:58:62:7d:4f:ca:af:93:
         09:4a:00:57:ca:86:5e:f2:73:b9:aa:8d:53:09:ed:e3:17:57:
         a4:99:8b:21:f7:ad:0d:81:cb:5d:6d:9a:40:42:c4:6b:2b:bc:
         ab:57:75:ec:97:50:10:fb:dc:18:27:fa:e2:0c:86:b1:19:3c:
         c6:90:49:fc:6b:31:36:f3:bf:c0:17:42:fe:e8:d8:fb:bb:67:
         b4:16:de:94:5c:16:35:86:74:74:a8:9e:fe:2a:59:ae:8f:b3:
         86:3c:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:18:18 2024 by rpki-client on console-ams.rpki-client.org