Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/gT3wugUI4Aw5B0MBu793Gkj7g-8.roa
File:                     gT3wugUI4Aw5B0MBu793Gkj7g-8.roa (raw, json)
Hash identifier:          4IEE+98b5XBgMZ2bvOTabHnCk7uL0HYkzVHO7z3d8zM=
Subject key identifier:   81:3D:F0:BA:05:08:E0:0C:39:07:43:01:BB:BF:77:1A:48:FB:83:EF
Certificate issuer:       /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial:       018CC795004309B16D88C5091A6C94300817
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/gT3wugUI4Aw5B0MBu793Gkj7g-8.roa
Signing time:             Tue 02 Jan 2024 00:31:20 +0000
ROA not before:           Tue 02 Jan 2024 00:31:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63023
IP address blocks:        193.106.251.0/24 maxlen: 24
                          193.106.250.0/24 maxlen: 24
                          193.106.249.0/24 maxlen: 24
                          193.106.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:00:43:09:b1:6d:88:c5:09:1a:6c:94:30:08:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
        Validity
            Not Before: Jan  2 00:31:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=813df0ba0508e00c39074301bbbf771a48fb83ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:f2:27:47:12:db:04:77:93:71:3b:ae:36:
                    d5:a6:4c:ca:1d:e1:9f:e3:3a:2a:be:22:8e:ae:9d:
                    5b:e8:d7:c1:33:ec:cf:8a:6b:6a:ff:10:07:c0:f7:
                    8f:69:6a:1b:23:e0:0c:ff:87:10:03:04:75:37:80:
                    48:5f:b9:33:0b:89:a0:13:bc:a1:0c:36:1e:ea:dd:
                    8a:da:0a:c3:9c:ee:37:6d:ad:da:a4:25:14:d3:8b:
                    c9:40:3e:fc:e6:d2:d3:3b:ce:6e:97:bf:d7:59:79:
                    c6:b7:0c:55:b9:84:25:93:7b:b9:ae:24:07:4c:f5:
                    19:da:14:03:4c:ab:99:5a:63:c0:02:70:98:10:e1:
                    6b:c5:f2:ac:c6:77:9e:73:24:8f:c6:d6:be:d4:78:
                    37:b8:97:eb:90:e9:fc:77:52:16:19:7a:4c:f9:ec:
                    c5:49:29:30:fd:f6:f9:e3:16:74:3c:37:20:99:6a:
                    22:84:f4:36:4d:ff:1f:4d:04:54:84:9a:78:79:79:
                    e4:6c:21:7c:9e:c1:ed:c8:6c:67:8e:29:13:9e:6e:
                    9b:b7:39:6b:f4:7c:c1:b6:b1:62:d0:25:08:4f:13:
                    04:b5:8e:04:2c:ee:52:03:04:f5:fc:38:8a:f2:7d:
                    7b:28:bc:5e:30:27:ab:28:3b:72:28:4e:15:ad:93:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3D:F0:BA:05:08:E0:0C:39:07:43:01:BB:BF:77:1A:48:FB:83:EF
            X509v3 Authority Key Identifier:
                keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/gT3wugUI4Aw5B0MBu793Gkj7g-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:3d:44:39:71:62:3d:d6:24:74:3d:f9:56:e7:c1:dc:37:
         64:01:c0:81:ce:5d:59:e7:eb:01:03:98:05:47:c1:98:82:d7:
         33:3c:69:cb:42:7d:f7:59:cc:ad:04:f8:34:80:13:b3:90:78:
         89:b4:d5:74:37:52:b9:fd:1b:cf:a7:61:32:88:80:33:f2:49:
         5e:13:33:30:18:f1:5d:11:ad:7c:11:31:f1:78:9c:c7:09:97:
         14:56:6f:a5:b3:51:dc:1c:fc:16:11:7c:5a:cd:aa:62:40:02:
         fb:63:22:02:0d:14:10:cc:66:c3:54:a7:f3:50:bc:9b:ea:8b:
         90:09:7f:5f:e4:f3:f7:de:4f:fc:9f:66:7d:84:c4:3c:79:2c:
         62:dc:6f:df:2f:fc:db:3d:05:03:67:f2:fa:1d:67:52:f0:09:
         c1:c2:bc:78:a4:f5:8c:05:0f:17:6d:08:b1:85:cf:1c:5b:ae:
         c1:69:50:5d:27:e8:1d:a3:43:5d:ff:4a:a2:be:a2:9f:c3:03:
         c2:d5:c6:2b:f9:81:ea:5f:b3:9d:cc:31:d0:90:ed:71:4d:cb:
         92:70:eb:5a:7e:8d:6f:87:79:5b:26:2e:73:0b:9f:3c:95:9f:
         4d:a4:cb:b8:48:07:09:9f:81:c8:dc:eb:16:32:88:8c:17:30:
         94:83:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 04:32:21 2024 by rpki-client on console-ams.rpki-client.org