Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/KkzZYCxeWj4Im2W7LvYsE7PQvfg.roa
File:                     KkzZYCxeWj4Im2W7LvYsE7PQvfg.roa (raw, json)
Hash identifier:          /yTBAeo0jaFzebaPKppGmHP6XiTMuKrquIL5AK+NVlo=
Subject key identifier:   2A:4C:D9:60:2C:5E:5A:3E:08:9B:65:BB:2E:F6:2C:13:B3:D0:BD:F8
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       019349572CEAB127C14B3251759ED8F61999
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/KkzZYCxeWj4Im2W7LvYsE7PQvfg.roa
Signing time:             Wed 20 Nov 2024 11:31:10 +0000
ROA not before:           Wed 20 Nov 2024 11:31:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58224
IP address blocks:        37.202.128.0/22 maxlen: 22
                          37.202.132.0/22 maxlen: 22
                          37.202.136.0/22 maxlen: 22
                          37.202.140.0/22 maxlen: 22
                          37.202.144.0/22 maxlen: 22
                          37.202.148.0/22 maxlen: 22
                          37.202.152.0/22 maxlen: 22
                          37.202.156.0/22 maxlen: 22
                          37.202.160.0/22 maxlen: 22
                          37.202.164.0/22 maxlen: 22
                          37.202.188.0/22 maxlen: 22
                          37.202.232.0/22 maxlen: 22
                          37.202.236.0/22 maxlen: 22
                          37.202.240.0/22 maxlen: 22
                          37.202.244.0/22 maxlen: 22
                          37.202.248.0/22 maxlen: 22
                          37.202.252.0/22 maxlen: 22
                          94.182.10.0/24 maxlen: 24
                          94.182.204.0/24 maxlen: 24
                          94.182.205.0/24 maxlen: 24
                          94.182.206.0/24 maxlen: 24
                          94.182.207.0/24 maxlen: 24
                          151.243.128.0/18 maxlen: 18
                          151.243.128.0/21 maxlen: 21
                          151.243.136.0/22 maxlen: 22
                          151.243.140.0/22 maxlen: 22
                          151.243.144.0/22 maxlen: 22
                          151.243.148.0/22 maxlen: 22
                          151.243.152.0/21 maxlen: 21
                          151.243.160.0/20 maxlen: 20
                          151.243.176.0/22 maxlen: 22
                          151.243.180.0/22 maxlen: 22
                          151.243.192.0/23 maxlen: 23
                          151.243.194.0/23 maxlen: 23
                          151.243.200.0/23 maxlen: 23
                          151.243.202.0/23 maxlen: 23
                          151.243.214.0/23 maxlen: 23
                          151.243.220.0/23 maxlen: 23
                          151.243.222.0/23 maxlen: 23
                          151.243.224.0/22 maxlen: 22
                          151.243.228.0/22 maxlen: 22
                          151.243.232.0/22 maxlen: 22
                          151.243.236.0/22 maxlen: 22
                          151.243.240.0/23 maxlen: 23
                          151.243.242.0/23 maxlen: 23
                          151.243.244.0/23 maxlen: 23
                          151.243.246.0/24 maxlen: 24
                          151.243.248.0/23 maxlen: 23
                          151.243.250.0/23 maxlen: 23
                          151.244.16.0/22 maxlen: 22
                          151.244.20.0/22 maxlen: 22
                          151.244.24.0/22 maxlen: 22
                          151.244.28.0/22 maxlen: 22
                          151.244.36.0/22 maxlen: 22
                          151.244.228.0/22 maxlen: 22
                          151.244.232.0/21 maxlen: 21
                          151.244.240.0/22 maxlen: 22
                          151.244.244.0/23 maxlen: 23
                          151.244.246.0/23 maxlen: 23
                          151.244.248.0/23 maxlen: 23
                          151.244.252.0/24 maxlen: 24
                          151.244.253.0/24 maxlen: 24
                          151.244.254.0/23 maxlen: 23
                          151.245.0.0/22 maxlen: 22
                          151.245.4.0/22 maxlen: 22
                          151.245.8.0/22 maxlen: 22
                          151.245.12.0/22 maxlen: 22
                          151.245.16.0/22 maxlen: 22
                          151.245.20.0/22 maxlen: 22
                          151.245.24.0/22 maxlen: 22
                          151.245.28.0/22 maxlen: 22
                          151.245.32.0/22 maxlen: 22
                          151.245.36.0/22 maxlen: 22
                          151.245.40.0/22 maxlen: 22
                          151.245.44.0/22 maxlen: 22
                          151.245.48.0/22 maxlen: 22
                          151.245.52.0/22 maxlen: 22
                          151.245.56.0/22 maxlen: 22
                          151.245.60.0/22 maxlen: 22
                          151.245.64.0/22 maxlen: 22
                          151.245.68.0/22 maxlen: 22
                          151.245.72.0/22 maxlen: 22
                          151.245.76.0/22 maxlen: 22
                          151.245.80.0/22 maxlen: 22
                          151.245.84.0/22 maxlen: 22
                          151.245.88.0/22 maxlen: 22
                          151.245.92.0/22 maxlen: 22
                          151.245.96.0/22 maxlen: 22
                          151.245.100.0/22 maxlen: 22
                          151.245.104.0/22 maxlen: 22
                          151.245.108.0/22 maxlen: 22
                          151.245.112.0/22 maxlen: 22
                          151.245.116.0/22 maxlen: 22
                          151.245.120.0/22 maxlen: 22
                          151.245.124.0/22 maxlen: 22
                          151.245.128.0/22 maxlen: 22
                          151.245.132.0/22 maxlen: 22
                          151.245.136.0/22 maxlen: 22
                          151.245.140.0/22 maxlen: 22
                          151.245.144.0/22 maxlen: 22
                          151.245.148.0/22 maxlen: 22
                          151.245.152.0/22 maxlen: 22
                          151.245.156.0/22 maxlen: 22
                          151.245.160.0/22 maxlen: 22
                          151.245.164.0/22 maxlen: 22
                          151.245.168.0/22 maxlen: 22
                          151.245.172.0/22 maxlen: 22
                          151.245.176.0/22 maxlen: 22
                          151.245.180.0/22 maxlen: 22
                          151.245.184.0/22 maxlen: 22
                          151.245.188.0/22 maxlen: 22
                          151.245.192.0/22 maxlen: 22
                          151.245.196.0/22 maxlen: 22
                          151.245.200.0/22 maxlen: 22
                          151.245.204.0/22 maxlen: 22
                          151.245.208.0/21 maxlen: 21
                          151.245.216.0/21 maxlen: 21
                          151.245.220.0/22 maxlen: 22
                          151.245.224.0/22 maxlen: 22
                          151.245.228.0/22 maxlen: 22
                          151.245.232.0/22 maxlen: 22
                          151.245.236.0/22 maxlen: 22
                          151.245.240.0/22 maxlen: 22
                          151.245.244.0/22 maxlen: 22
                          151.245.248.0/22 maxlen: 22
                          151.245.252.0/22 maxlen: 22
                          151.246.0.0/22 maxlen: 22
                          151.246.4.0/22 maxlen: 22
                          151.246.8.0/22 maxlen: 22
                          151.246.12.0/22 maxlen: 22
                          151.246.16.0/22 maxlen: 22
                          151.246.20.0/22 maxlen: 22
                          151.246.24.0/22 maxlen: 22
                          151.246.28.0/22 maxlen: 22
                          151.246.32.0/22 maxlen: 22
                          151.246.36.0/22 maxlen: 22
                          151.246.40.0/22 maxlen: 22
                          151.246.44.0/22 maxlen: 22
                          151.246.48.0/22 maxlen: 22
                          151.246.52.0/22 maxlen: 22
                          151.246.56.0/22 maxlen: 22
                          151.246.60.0/22 maxlen: 22
                          151.246.176.0/21 maxlen: 21
                          151.246.184.0/21 maxlen: 21
                          151.246.224.0/20 maxlen: 20
                          151.247.2.0/24 maxlen: 24
                          151.247.12.0/24 maxlen: 24
                          151.247.14.0/24 maxlen: 24
                          151.247.18.0/24 maxlen: 24
                          151.247.20.0/23 maxlen: 23
                          151.247.22.0/24 maxlen: 24
                          151.247.23.0/24 maxlen: 24
                          151.247.24.0/22 maxlen: 22
                          151.247.28.0/22 maxlen: 22
                          151.247.32.0/22 maxlen: 22
                          151.247.36.0/22 maxlen: 22
                          151.247.40.0/22 maxlen: 22
                          151.247.44.0/22 maxlen: 22
                          151.247.48.0/22 maxlen: 22
                          151.247.52.0/22 maxlen: 22
                          151.247.56.0/22 maxlen: 22
                          151.247.60.0/22 maxlen: 22
                          151.247.64.0/23 maxlen: 23
                          151.247.66.0/23 maxlen: 23
                          151.247.68.0/23 maxlen: 23
                          151.247.70.0/23 maxlen: 23
                          151.247.72.0/22 maxlen: 22
                          151.247.76.0/23 maxlen: 23
                          151.247.78.0/23 maxlen: 23
                          151.247.80.0/23 maxlen: 23
                          151.247.82.0/23 maxlen: 23
                          151.247.84.0/23 maxlen: 23
                          151.247.86.0/23 maxlen: 23
                          151.247.88.0/22 maxlen: 22
                          151.247.92.0/22 maxlen: 22
                          151.247.96.0/22 maxlen: 22
                          151.247.100.0/22 maxlen: 22
                          151.247.104.0/22 maxlen: 22
                          151.247.108.0/22 maxlen: 22
                          151.247.112.0/22 maxlen: 22
                          151.247.116.0/22 maxlen: 22
                          151.247.120.0/22 maxlen: 22
                          151.247.124.0/22 maxlen: 22
                          151.247.128.0/22 maxlen: 22
                          151.247.132.0/22 maxlen: 22
                          151.247.136.0/22 maxlen: 22
                          151.247.140.0/22 maxlen: 22
                          151.247.144.0/22 maxlen: 22
                          151.247.148.0/22 maxlen: 22
                          151.247.148.0/23 maxlen: 23
                          151.247.150.0/23 maxlen: 23
                          151.247.152.0/22 maxlen: 22
                          151.247.156.0/22 maxlen: 22
                          151.247.160.0/22 maxlen: 22
                          151.247.164.0/22 maxlen: 22
                          151.247.168.0/22 maxlen: 22
                          151.247.172.0/22 maxlen: 22
                          151.247.176.0/22 maxlen: 22
                          151.247.180.0/22 maxlen: 22
                          151.247.184.0/22 maxlen: 22
                          151.247.192.0/22 maxlen: 22
                          151.247.196.0/22 maxlen: 22
                          151.247.200.0/22 maxlen: 22
                          151.247.204.0/22 maxlen: 22
                          151.247.204.0/23 maxlen: 23
                          151.247.206.0/24 maxlen: 24
                          151.247.207.0/24 maxlen: 24
                          151.247.208.0/22 maxlen: 22
                          151.247.212.0/23 maxlen: 23
                          151.247.232.0/22 maxlen: 22
                          151.247.239.0/24 maxlen: 24
                          151.247.243.0/24 maxlen: 24
                          151.247.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:49:57:2c:ea:b1:27:c1:4b:32:51:75:9e:d8:f6:19:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Nov 20 11:31:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2a4cd9602c5e5a3e089b65bb2ef62c13b3d0bdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:68:b8:fa:a8:33:96:2d:15:1c:66:ff:a1:
                    8c:9b:45:47:4c:76:a0:20:72:64:03:86:f3:46:ea:
                    ba:bb:08:88:7b:b0:da:e3:56:d5:17:b8:68:c0:1f:
                    35:64:9b:56:8f:db:a4:d8:7d:73:87:72:3d:a3:f6:
                    f1:4a:64:0d:6f:bb:79:2a:71:64:a5:5c:39:51:28:
                    21:18:f1:27:fb:fd:f4:51:c8:75:f9:bc:65:2d:e7:
                    94:44:76:f5:c6:86:46:ea:c9:e1:a4:9d:2e:cc:33:
                    75:bd:5d:bc:31:c6:12:1a:c7:2c:73:51:b9:9b:5a:
                    56:5f:51:c4:f2:ed:fe:67:6e:39:75:b2:3f:67:1b:
                    91:3e:b3:c0:dc:43:76:b0:27:44:28:43:7e:d4:a4:
                    9b:02:14:7c:7f:57:40:5e:ea:99:0b:40:5e:b5:b7:
                    e1:0a:85:e6:97:6a:87:df:b8:de:cd:a3:6d:ad:65:
                    29:ac:f7:f6:41:c8:cd:1b:e4:0b:15:80:e9:9b:7f:
                    8e:2a:03:6c:e8:c4:2a:22:2a:54:1a:dc:d9:72:71:
                    89:22:9a:37:31:1d:93:81:bb:e5:c9:73:97:6c:8d:
                    52:0e:52:8f:b3:d8:8b:74:58:af:f7:53:bb:d7:17:
                    ad:4d:2a:fd:ac:38:74:51:28:c0:0d:a8:67:f6:4a:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:D9:60:2C:5E:5A:3E:08:9B:65:BB:2E:F6:2C:13:B3:D0:BD:F8
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/KkzZYCxeWj4Im2W7LvYsE7PQvfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.128.0-37.202.167.255
                  37.202.188.0/22
                  37.202.232.0-37.202.255.255
                  94.182.10.0/24
                  94.182.204.0/22
                  151.243.128.0-151.243.195.255
                  151.243.200.0/22
                  151.243.214.0/23
                  151.243.220.0-151.243.246.255
                  151.243.248.0/22
                  151.244.16.0/20
                  151.244.36.0/22
                  151.244.228.0-151.244.249.255
                  151.244.252.0-151.246.63.255
                  151.246.176.0/20
                  151.246.224.0/20
                  151.247.2.0/24
                  151.247.12.0/24
                  151.247.14.0/24
                  151.247.18.0/24
                  151.247.20.0-151.247.187.255
                  151.247.192.0-151.247.213.255
                  151.247.232.0/22
                  151.247.239.0/24
                  151.247.243.0/24
                  151.247.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:95:3e:39:29:4f:86:8c:78:70:f0:18:b5:fe:32:0c:16:
         2f:ab:fa:7c:21:f5:02:e8:ea:f4:51:c4:21:ee:b7:68:47:72:
         62:7a:a7:80:7c:db:69:cf:9c:fc:86:f7:03:5f:46:96:40:e2:
         1a:72:c6:66:73:00:0e:f0:ad:8c:ca:fb:c7:9c:dc:08:fd:c4:
         3f:18:a2:81:fb:01:a0:29:81:32:33:bc:d0:a0:fd:ce:01:15:
         79:1b:f6:35:b3:a0:bb:3c:7e:d4:13:01:d7:be:5c:2c:c3:af:
         99:03:7a:e5:ab:16:3c:e9:30:cf:c6:57:99:eb:34:bf:98:e4:
         a2:5d:64:71:0c:b5:a2:13:41:7d:44:f3:0e:03:6d:ea:0d:0a:
         db:00:e5:59:79:6c:3e:72:84:64:4e:df:2e:8e:3d:aa:9b:15:
         1e:b2:a0:76:4c:cf:86:c1:51:ae:c1:3f:1e:2c:c0:e6:33:89:
         da:47:55:6e:6b:db:59:17:d9:28:a5:04:8a:1e:6c:14:51:8e:
         be:b2:66:4a:07:99:5d:97:ca:ff:8d:14:17:e9:09:95:66:f6:
         3a:28:9c:71:bb:9c:58:72:0b:a2:25:41:59:93:e7:ee:12:a2:
         1f:d4:2f:1c:a6:46:55:3a:1e:c8:2a:c1:66:70:e9:b8:6d:15:
         55:c1:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:49 2024 by rpki-client on console-fra.rpki-client.org