Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/bw0SFyLfM7H2jlnBn0C1PYCI2lI.roa
File:                     bw0SFyLfM7H2jlnBn0C1PYCI2lI.roa (raw, json)
Hash identifier:          RZ0wly/O0T7QssYgp7Mv7Mg0MRm6WAO9OmEry23e4GU=
Subject key identifier:   6F:0D:12:17:22:DF:33:B1:F6:8E:59:C1:9F:40:B5:3D:80:88:DA:52
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018F73243DCE4884B34DF453759BACD88166
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/bw0SFyLfM7H2jlnBn0C1PYCI2lI.roa
Signing time:             Mon 13 May 2024 18:08:26 +0000
ROA not before:           Mon 13 May 2024 18:08:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44559
IP address blocks:        217.60.0.0/24 maxlen: 24
                          217.60.1.0/24 maxlen: 24
                          217.60.2.0/24 maxlen: 24
                          217.60.3.0/24 maxlen: 24
                          217.60.4.0/24 maxlen: 24
                          217.60.5.0/24 maxlen: 24
                          217.60.6.0/24 maxlen: 24
                          217.60.7.0/24 maxlen: 24
                          217.60.8.0/24 maxlen: 24
                          217.60.9.0/24 maxlen: 24
                          217.60.10.0/24 maxlen: 24
                          217.60.11.0/24 maxlen: 24
                          217.60.12.0/24 maxlen: 24
                          217.60.13.0/24 maxlen: 24
                          217.60.14.0/24 maxlen: 24
                          217.60.15.0/24 maxlen: 24
                          217.60.16.0/24 maxlen: 24
                          217.60.17.0/24 maxlen: 24
                          217.60.18.0/24 maxlen: 24
                          217.60.19.0/24 maxlen: 24
                          217.60.20.0/24 maxlen: 24
                          217.60.21.0/24 maxlen: 24
                          217.60.22.0/24 maxlen: 24
                          217.60.23.0/24 maxlen: 24
                          217.60.24.0/24 maxlen: 24
                          217.60.25.0/24 maxlen: 24
                          217.60.26.0/24 maxlen: 24
                          217.60.27.0/24 maxlen: 24
                          217.60.28.0/24 maxlen: 24
                          217.60.29.0/24 maxlen: 24
                          217.60.30.0/24 maxlen: 24
                          217.60.31.0/24 maxlen: 24
                          217.60.32.0/24 maxlen: 24
                          217.60.33.0/24 maxlen: 24
                          217.60.34.0/24 maxlen: 24
                          217.60.35.0/24 maxlen: 24
                          217.60.36.0/24 maxlen: 24
                          217.60.37.0/24 maxlen: 24
                          217.60.38.0/24 maxlen: 24
                          217.60.39.0/24 maxlen: 24
                          217.60.40.0/24 maxlen: 24
                          217.60.41.0/24 maxlen: 24
                          217.60.42.0/24 maxlen: 24
                          217.60.43.0/24 maxlen: 24
                          217.60.44.0/24 maxlen: 24
                          217.60.45.0/24 maxlen: 24
                          217.60.46.0/24 maxlen: 24
                          217.60.47.0/24 maxlen: 24
                          217.60.48.0/24 maxlen: 24
                          217.60.49.0/24 maxlen: 24
                          217.60.50.0/24 maxlen: 24
                          217.60.51.0/24 maxlen: 24
                          217.60.52.0/24 maxlen: 24
                          217.60.53.0/24 maxlen: 24
                          217.60.54.0/24 maxlen: 24
                          217.60.55.0/24 maxlen: 24
                          217.60.56.0/24 maxlen: 24
                          217.60.57.0/24 maxlen: 24
                          217.60.58.0/24 maxlen: 24
                          217.60.59.0/24 maxlen: 24
                          217.60.60.0/24 maxlen: 24
                          217.60.61.0/24 maxlen: 24
                          217.60.62.0/24 maxlen: 24
                          217.60.63.0/24 maxlen: 24
                          217.60.64.0/24 maxlen: 24
                          217.60.65.0/24 maxlen: 24
                          217.60.66.0/24 maxlen: 24
                          217.60.67.0/24 maxlen: 24
                          217.60.68.0/24 maxlen: 24
                          217.60.69.0/24 maxlen: 24
                          217.60.70.0/24 maxlen: 24
                          217.60.71.0/24 maxlen: 24
                          217.60.72.0/24 maxlen: 24
                          217.60.73.0/24 maxlen: 24
                          217.60.74.0/24 maxlen: 24
                          217.60.75.0/24 maxlen: 24
                          217.60.76.0/24 maxlen: 24
                          217.60.77.0/24 maxlen: 24
                          217.60.78.0/24 maxlen: 24
                          217.60.79.0/24 maxlen: 24
                          217.60.80.0/24 maxlen: 24
                          217.60.81.0/24 maxlen: 24
                          217.60.82.0/24 maxlen: 24
                          217.60.83.0/24 maxlen: 24
                          217.60.84.0/24 maxlen: 24
                          217.60.85.0/24 maxlen: 24
                          217.60.86.0/24 maxlen: 24
                          217.60.87.0/24 maxlen: 24
                          217.60.88.0/24 maxlen: 24
                          217.60.89.0/24 maxlen: 24
                          217.60.90.0/24 maxlen: 24
                          217.60.91.0/24 maxlen: 24
                          217.60.92.0/24 maxlen: 24
                          217.60.93.0/24 maxlen: 24
                          217.60.94.0/24 maxlen: 24
                          217.60.95.0/24 maxlen: 24
                          217.60.96.0/24 maxlen: 24
                          217.60.97.0/24 maxlen: 24
                          217.60.98.0/24 maxlen: 24
                          217.60.99.0/24 maxlen: 24
                          217.60.100.0/24 maxlen: 24
                          217.60.101.0/24 maxlen: 24
                          217.60.102.0/24 maxlen: 24
                          217.60.103.0/24 maxlen: 24
                          217.60.104.0/24 maxlen: 24
                          217.60.105.0/24 maxlen: 24
                          217.60.106.0/24 maxlen: 24
                          217.60.107.0/24 maxlen: 24
                          217.60.108.0/24 maxlen: 24
                          217.60.109.0/24 maxlen: 24
                          217.60.110.0/24 maxlen: 24
                          217.60.111.0/24 maxlen: 24
                          217.60.112.0/24 maxlen: 24
                          217.60.113.0/24 maxlen: 24
                          217.60.114.0/24 maxlen: 24
                          217.60.115.0/24 maxlen: 24
                          217.60.116.0/24 maxlen: 24
                          217.60.117.0/24 maxlen: 24
                          217.60.118.0/24 maxlen: 24
                          217.60.119.0/24 maxlen: 24
                          217.60.120.0/24 maxlen: 24
                          217.60.121.0/24 maxlen: 24
                          217.60.122.0/24 maxlen: 24
                          217.60.123.0/24 maxlen: 24
                          217.60.124.0/24 maxlen: 24
                          217.60.125.0/24 maxlen: 24
                          217.60.126.0/24 maxlen: 24
                          217.60.127.0/24 maxlen: 24
                          217.60.128.0/24 maxlen: 24
                          217.60.129.0/24 maxlen: 24
                          217.60.130.0/24 maxlen: 24
                          217.60.131.0/24 maxlen: 24
                          217.60.132.0/24 maxlen: 24
                          217.60.133.0/24 maxlen: 24
                          217.60.134.0/24 maxlen: 24
                          217.60.135.0/24 maxlen: 24
                          217.60.136.0/24 maxlen: 24
                          217.60.137.0/24 maxlen: 24
                          217.60.138.0/24 maxlen: 24
                          217.60.139.0/24 maxlen: 24
                          217.60.140.0/24 maxlen: 24
                          217.60.141.0/24 maxlen: 24
                          217.60.142.0/24 maxlen: 24
                          217.60.143.0/24 maxlen: 24
                          217.60.144.0/24 maxlen: 24
                          217.60.145.0/24 maxlen: 24
                          217.60.146.0/24 maxlen: 24
                          217.60.147.0/24 maxlen: 24
                          217.60.148.0/24 maxlen: 24
                          217.60.149.0/24 maxlen: 24
                          217.60.150.0/24 maxlen: 24
                          217.60.151.0/24 maxlen: 24
                          217.60.152.0/24 maxlen: 24
                          217.60.153.0/24 maxlen: 24
                          217.60.154.0/24 maxlen: 24
                          217.60.155.0/24 maxlen: 24
                          217.60.156.0/24 maxlen: 24
                          217.60.157.0/24 maxlen: 24
                          217.60.158.0/24 maxlen: 24
                          217.60.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:73:24:3d:ce:48:84:b3:4d:f4:53:75:9b:ac:d8:81:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: May 13 18:08:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6f0d121722df33b1f68e59c19f40b53d8088da52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:41:dc:00:c6:08:3f:ab:19:31:18:c6:64:
                    2e:ff:46:93:bb:4c:29:ed:41:fe:15:a9:ac:73:55:
                    01:d0:93:03:e6:f0:b5:4a:2c:17:33:e4:d5:d9:6e:
                    cd:d9:ae:4d:38:e4:57:75:88:59:a2:4c:8b:60:9c:
                    14:63:85:28:34:71:8a:62:38:27:2c:1e:05:42:55:
                    cb:31:17:0e:dc:15:b4:85:dc:95:37:b8:21:a6:92:
                    f2:fa:65:64:5c:75:e1:bb:8b:35:45:20:be:b7:db:
                    ad:0b:bd:e5:c7:6a:ed:47:80:e9:cc:61:a3:d4:38:
                    25:e7:80:37:e2:12:b5:0a:ec:f9:19:09:f2:d0:8b:
                    06:da:7a:e0:b6:11:30:14:9f:b6:86:ff:b5:90:30:
                    52:84:5e:01:65:a1:63:0c:10:23:1a:40:c1:c9:92:
                    02:bc:b5:35:aa:c4:46:cd:8c:49:40:8c:cf:84:a2:
                    26:67:74:f6:5c:97:67:b2:be:f0:89:36:e0:d6:43:
                    54:8d:78:ce:26:e2:88:bc:7c:d2:7c:34:07:a9:7d:
                    9e:58:1a:27:9b:30:4f:0a:0b:f4:c0:1d:36:b8:8a:
                    02:ac:7b:da:f3:be:46:af:94:3c:52:f2:00:f4:b4:
                    f5:c8:44:f5:30:d6:22:0e:c0:5a:3c:a2:db:92:b4:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:12:17:22:DF:33:B1:F6:8E:59:C1:9F:40:B5:3D:80:88:DA:52
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/bw0SFyLfM7H2jlnBn0C1PYCI2lI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.60.0.0-217.60.159.255

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:ab:f0:c4:06:0f:de:05:d2:be:af:76:9d:90:1e:ec:f0:
         c5:98:0e:34:97:09:13:38:84:0d:7c:ac:7f:d6:c4:d1:8b:1f:
         1f:dd:80:61:03:76:15:96:61:15:4d:88:12:10:5a:8d:12:78:
         9e:7f:77:09:3f:de:0e:22:20:ab:3e:e6:02:6e:b1:ec:d4:33:
         a0:f4:f8:0d:9c:58:cf:c5:02:60:12:6b:ad:11:f0:56:fe:5f:
         b2:f8:77:41:1c:9f:b2:37:d7:c2:1e:94:89:0e:5f:ed:07:b4:
         5b:95:1e:dd:03:31:6b:5b:cb:88:5f:26:20:9f:31:0f:8b:98:
         0a:3d:02:4d:aa:91:78:e9:fe:01:22:89:02:3d:61:1b:f9:5a:
         5c:ea:7e:8f:0e:00:86:af:c1:17:f1:ca:03:bb:e2:2d:b4:3d:
         e2:14:94:b2:2a:5f:75:d4:bc:01:6b:94:d9:e0:0b:28:ad:6d:
         f2:e1:2e:db:77:e1:26:86:90:b1:62:e5:e9:36:c8:56:f3:0a:
         95:05:8e:99:90:91:ac:e5:82:68:a6:f1:bd:e2:83:8b:20:8f:
         b6:19:2e:14:aa:d2:c0:33:70:04:07:7d:32:f4:0a:b3:de:96:
         c6:01:7d:b6:2e:91:dd:29:41:c6:97:b4:3a:fe:0c:7e:0a:f8:
         f3:9e:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:54:57 2024 by rpki-client on console-ams.rpki-client.org