Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/p61VML8uLf1Dr4htLC12P2Sv8GU.roa
File:                     p61VML8uLf1Dr4htLC12P2Sv8GU.roa (raw, json)
Hash identifier:          RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=
Subject key identifier:   A7:AD:55:30:BF:2E:2D:FD:43:AF:88:6D:2C:2D:76:3F:64:AF:F0:65
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       019420D5F2BFE22B9675A203B4B18A2C0B1C
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/p61VML8uLf1Dr4htLC12P2Sv8GU.roa
Signing time:             Wed 01 Jan 2025 07:47:59 +0000
ROA not before:           Wed 01 Jan 2025 07:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35625
IP address blocks:        194.5.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f2:bf:e2:2b:96:75:a2:03:b4:b1:8a:2c:0b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: Jan  1 07:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a7ad5530bf2e2dfd43af886d2c2d763f64aff065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:99:34:5d:1d:2e:60:c3:12:9c:04:1b:ef:
                    fd:78:cf:19:33:b5:a6:ee:f2:0c:92:d0:0c:2a:ef:
                    2f:b1:8c:49:a8:b9:27:ef:eb:63:1c:74:c6:e4:b6:
                    1c:07:86:7a:02:7e:9a:7b:ba:50:71:82:f8:8c:74:
                    5a:5b:27:03:06:9f:24:dd:20:de:87:ea:14:e0:e6:
                    4e:a2:29:e8:15:74:30:8a:d0:b7:17:66:b5:1f:0c:
                    cf:24:89:5b:b5:c1:3f:14:fc:a9:86:6d:57:2f:29:
                    ed:4b:42:67:4f:41:43:c8:88:e5:ad:70:30:e4:ec:
                    e1:45:19:5c:ed:8d:2c:87:86:e5:87:70:c0:88:2c:
                    bb:10:66:97:38:ab:43:3d:79:99:fe:97:e4:e6:76:
                    73:ba:f3:69:bf:18:45:ed:ba:78:3f:90:9b:35:fa:
                    c1:3b:41:2b:31:78:26:bd:6b:4f:d3:32:2d:be:7c:
                    c5:3d:18:1e:32:18:6a:d1:7b:bb:d3:92:02:c9:2d:
                    87:46:88:91:cb:3d:eb:a7:73:72:e9:ad:7b:40:fa:
                    be:98:51:b4:c3:33:b2:a2:40:c7:00:a6:51:35:55:
                    36:5a:d7:73:85:a5:7b:b9:d6:45:7b:f9:9a:8f:c8:
                    e0:cb:e0:a0:e6:40:9e:b8:1f:ca:fe:66:55:4e:7a:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AD:55:30:BF:2E:2D:FD:43:AF:88:6D:2C:2D:76:3F:64:AF:F0:65
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/p61VML8uLf1Dr4htLC12P2Sv8GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:c7:71:fb:22:f1:6e:32:77:47:e4:37:f2:2a:5f:e1:8c:
         6c:89:c2:63:07:1b:be:d4:24:9a:8d:64:b0:b0:63:e8:6a:31:
         25:52:48:56:b6:fb:60:64:2f:47:19:ea:6b:5f:ca:c0:cd:b8:
         f9:b8:81:87:94:63:b9:36:6d:04:c9:c9:ff:97:38:99:59:ab:
         0f:4a:8a:b1:f0:db:fd:70:52:4a:42:c1:64:b4:e7:97:8b:d0:
         0d:38:d3:84:3a:13:14:65:cc:7d:ac:50:ac:52:46:d2:c0:d6:
         b7:44:0c:90:90:9c:ba:c0:23:e8:8b:57:64:10:38:7c:30:4d:
         94:40:04:e1:c8:0f:80:fb:ae:5d:02:2f:24:28:50:78:ee:09:
         77:42:90:c0:f2:a2:e0:c5:89:8c:68:05:fb:81:90:86:0f:36:
         17:0a:fd:03:19:0a:f3:d4:42:88:da:79:a2:75:aa:e4:ec:6a:
         55:a4:8d:d2:df:eb:c9:c1:d5:98:f3:fa:03:2f:71:32:29:e2:
         11:1c:6a:b4:58:4f:c1:42:08:13:6a:3d:dd:f7:6b:2d:64:ce:
         87:4a:b5:0b:74:50:b0:fb:f3:a2:65:56:a2:22:b3:f1:35:93:
         c6:a9:6c:36:e7:c2:f8:8e:e2:f8:15:d8:bc:b8:92:d3:5d:fb:
         7e:e7:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:01 2025 by rpki-client