Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/UyUBnyibFe_Vs5gV4yYGoAGp_6k.roa
File:                     UyUBnyibFe_Vs5gV4yYGoAGp_6k.roa (raw, json)
Hash identifier:          FpCGN1QIWvHmXIOEQKHWU4qi8Wyi8QSUo83QDYmvpxY=
Subject key identifier:   53:25:01:9F:28:9B:15:EF:D5:B3:98:15:E3:26:06:A0:01:A9:FF:A9
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       0192D7EFB195580774A4D32449B6A57029B8
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/UyUBnyibFe_Vs5gV4yYGoAGp_6k.roa
Signing time:             Tue 29 Oct 2024 11:01:02 +0000
ROA not before:           Tue 29 Oct 2024 11:01:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29256
IP address blocks:        46.57.128.0/20 maxlen: 20
                          46.57.128.0/21 maxlen: 21
                          46.57.136.0/21 maxlen: 21
                          46.57.144.0/20 maxlen: 20
                          46.57.144.0/21 maxlen: 21
                          46.57.152.0/21 maxlen: 21
                          46.57.160.0/20 maxlen: 20
                          46.57.160.0/21 maxlen: 21
                          46.57.168.0/21 maxlen: 21
                          46.57.176.0/20 maxlen: 20
                          46.57.176.0/21 maxlen: 21
                          46.57.184.0/21 maxlen: 21
                          46.57.192.0/20 maxlen: 20
                          46.57.192.0/21 maxlen: 21
                          46.57.200.0/21 maxlen: 21
                          46.57.208.0/20 maxlen: 20
                          46.57.208.0/21 maxlen: 21
                          46.57.216.0/21 maxlen: 21
                          46.57.224.0/20 maxlen: 20
                          46.57.224.0/21 maxlen: 21
                          46.57.232.0/21 maxlen: 21
                          46.57.240.0/20 maxlen: 20
                          46.57.240.0/21 maxlen: 21
                          46.57.248.0/21 maxlen: 21
                          46.213.0.0/20 maxlen: 20
                          46.213.0.0/21 maxlen: 21
                          46.213.8.0/21 maxlen: 21
                          46.213.16.0/20 maxlen: 20
                          46.213.16.0/21 maxlen: 21
                          46.213.24.0/21 maxlen: 21
                          46.213.32.0/20 maxlen: 20
                          46.213.32.0/21 maxlen: 21
                          46.213.40.0/21 maxlen: 21
                          46.213.48.0/20 maxlen: 20
                          46.213.48.0/21 maxlen: 21
                          46.213.56.0/21 maxlen: 21
                          46.213.64.0/20 maxlen: 20
                          46.213.64.0/21 maxlen: 21
                          46.213.72.0/21 maxlen: 21
                          46.213.80.0/20 maxlen: 20
                          46.213.80.0/21 maxlen: 21
                          46.213.88.0/21 maxlen: 21
                          46.213.96.0/20 maxlen: 20
                          46.213.96.0/21 maxlen: 21
                          46.213.104.0/21 maxlen: 21
                          46.213.112.0/20 maxlen: 20
                          46.213.112.0/21 maxlen: 21
                          46.213.120.0/21 maxlen: 21
                          46.213.128.0/21 maxlen: 21
                          46.213.136.0/21 maxlen: 21
                          46.213.144.0/20 maxlen: 20
                          46.213.144.0/21 maxlen: 21
                          46.213.152.0/21 maxlen: 21
                          46.213.160.0/20 maxlen: 20
                          46.213.160.0/21 maxlen: 21
                          46.213.168.0/21 maxlen: 21
                          46.213.176.0/20 maxlen: 20
                          46.213.176.0/21 maxlen: 21
                          46.213.184.0/21 maxlen: 21
                          46.213.192.0/20 maxlen: 20
                          46.213.192.0/21 maxlen: 21
                          46.213.200.0/21 maxlen: 21
                          46.213.208.0/20 maxlen: 20
                          46.213.208.0/21 maxlen: 21
                          46.213.216.0/21 maxlen: 21
                          46.213.224.0/20 maxlen: 20
                          46.213.224.0/21 maxlen: 21
                          46.213.232.0/21 maxlen: 21
                          46.213.240.0/20 maxlen: 20
                          46.213.240.0/21 maxlen: 21
                          46.213.248.0/21 maxlen: 21
                          94.252.128.0/22 maxlen: 22
                          94.252.132.0/22 maxlen: 22
                          94.252.136.0/21 maxlen: 21
                          94.252.144.0/20 maxlen: 20
                          94.252.144.0/21 maxlen: 21
                          94.252.152.0/21 maxlen: 21
                          94.252.160.0/20 maxlen: 20
                          94.252.176.0/22 maxlen: 22
                          94.252.180.0/24 maxlen: 24
                          94.252.181.0/24 maxlen: 24
                          94.252.182.0/24 maxlen: 24
                          94.252.183.0/24 maxlen: 24
                          94.252.184.0/24 maxlen: 24
                          94.252.185.0/24 maxlen: 24
                          94.252.186.0/24 maxlen: 24
                          94.252.187.0/24 maxlen: 24
                          94.252.188.0/24 maxlen: 24
                          94.252.189.0/24 maxlen: 24
                          94.252.190.0/24 maxlen: 24
                          94.252.191.0/24 maxlen: 24
                          94.252.192.0/20 maxlen: 20
                          94.252.192.0/21 maxlen: 21
                          94.252.200.0/21 maxlen: 21
                          94.252.208.0/20 maxlen: 20
                          94.252.208.0/21 maxlen: 21
                          94.252.216.0/21 maxlen: 21
                          94.252.224.0/20 maxlen: 20
                          94.252.240.0/21 maxlen: 21
                          94.252.248.0/22 maxlen: 22
                          94.252.252.0/22 maxlen: 22
                          178.52.0.0/20 maxlen: 20
                          178.52.0.0/21 maxlen: 21
                          178.52.8.0/21 maxlen: 21
                          178.52.16.0/20 maxlen: 20
                          178.52.16.0/21 maxlen: 21
                          178.52.24.0/21 maxlen: 21
                          178.52.32.0/20 maxlen: 20
                          178.52.32.0/21 maxlen: 21
                          178.52.40.0/21 maxlen: 21
                          178.52.48.0/20 maxlen: 20
                          178.52.48.0/21 maxlen: 21
                          178.52.56.0/21 maxlen: 21
                          178.52.64.0/20 maxlen: 20
                          178.52.64.0/21 maxlen: 21
                          178.52.72.0/21 maxlen: 21
                          178.52.80.0/20 maxlen: 20
                          178.52.80.0/21 maxlen: 21
                          178.52.88.0/21 maxlen: 21
                          178.52.96.0/20 maxlen: 20
                          178.52.96.0/21 maxlen: 21
                          178.52.104.0/21 maxlen: 21
                          178.52.112.0/20 maxlen: 20
                          178.52.112.0/21 maxlen: 21
                          178.52.120.0/21 maxlen: 21
                          178.52.128.0/20 maxlen: 20
                          178.52.128.0/21 maxlen: 21
                          178.52.136.0/21 maxlen: 21
                          178.52.144.0/20 maxlen: 20
                          178.52.144.0/21 maxlen: 21
                          178.52.152.0/21 maxlen: 21
                          178.52.160.0/20 maxlen: 20
                          178.52.160.0/21 maxlen: 21
                          178.52.168.0/21 maxlen: 21
                          178.52.176.0/20 maxlen: 20
                          178.52.176.0/21 maxlen: 21
                          178.52.184.0/21 maxlen: 21
                          178.52.192.0/20 maxlen: 20
                          178.52.192.0/21 maxlen: 21
                          178.52.200.0/21 maxlen: 21
                          178.52.208.0/20 maxlen: 20
                          178.52.208.0/21 maxlen: 21
                          178.52.216.0/21 maxlen: 21
                          178.52.224.0/20 maxlen: 20
                          178.52.224.0/21 maxlen: 21
                          178.52.232.0/21 maxlen: 21
                          178.52.240.0/20 maxlen: 20
                          178.52.240.0/21 maxlen: 21
                          178.52.248.0/21 maxlen: 21
                          185.136.144.0/22 maxlen: 22
                          188.139.128.0/20 maxlen: 20
                          188.139.128.0/21 maxlen: 21
                          188.139.136.0/21 maxlen: 21
                          188.139.144.0/20 maxlen: 20
                          188.139.144.0/21 maxlen: 21
                          188.139.152.0/21 maxlen: 21
                          188.139.160.0/20 maxlen: 20
                          188.139.160.0/21 maxlen: 21
                          188.139.168.0/21 maxlen: 21
                          188.139.176.0/20 maxlen: 20
                          188.139.176.0/21 maxlen: 21
                          188.139.184.0/21 maxlen: 21
                          188.139.192.0/20 maxlen: 20
                          188.139.192.0/21 maxlen: 21
                          188.139.200.0/21 maxlen: 21
                          188.139.208.0/20 maxlen: 20
                          188.139.208.0/21 maxlen: 21
                          188.139.216.0/21 maxlen: 21
                          188.139.224.0/20 maxlen: 20
                          188.139.224.0/21 maxlen: 21
                          188.139.232.0/21 maxlen: 21
                          188.139.240.0/20 maxlen: 20
                          188.139.240.0/21 maxlen: 21
                          188.139.248.0/21 maxlen: 21
                          2a00:b800::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d7:ef:b1:95:58:07:74:a4:d3:24:49:b6:a5:70:29:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Oct 29 11:01:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5325019f289b15efd5b39815e32606a001a9ffa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:ac:ab:a0:b3:eb:3e:ec:b4:0c:62:4d:dc:
                    2c:3c:ab:a2:a8:02:be:63:41:06:f5:91:20:29:b3:
                    32:d6:df:69:05:55:b3:5a:e2:dc:0f:5d:b9:cc:61:
                    b3:4a:8d:39:88:01:32:2c:db:96:bf:ec:1e:bc:79:
                    ec:0d:1c:cc:7d:7a:38:c7:6b:9b:6c:f8:04:91:1e:
                    38:69:54:2a:76:8e:4a:d8:b6:a0:7b:ef:76:ce:78:
                    38:42:ee:bb:a3:c9:0a:26:92:27:fd:c7:99:21:f2:
                    c6:05:05:ca:67:3e:bd:56:76:0d:63:79:1f:13:e2:
                    bd:d4:a6:0b:06:b2:7f:ef:52:b8:de:4f:98:f6:29:
                    be:52:b9:bb:d8:b4:e4:81:cc:ba:b9:37:79:81:c2:
                    33:64:92:82:bc:40:92:bf:43:1f:7e:2d:61:be:e1:
                    39:f2:78:68:be:0e:bd:ec:a1:34:94:f5:01:cd:ee:
                    17:6a:30:23:dd:a9:c9:62:53:2f:5f:15:d2:32:6f:
                    b0:f3:64:09:69:0e:ee:93:b5:5d:5c:cc:ee:1d:48:
                    87:75:08:1f:c4:c4:72:e0:d8:fa:c9:a7:60:66:fc:
                    6a:e2:d5:a2:95:fb:48:1f:16:fd:5d:b9:b6:89:91:
                    cc:fa:13:53:69:4f:51:0f:88:6f:ba:ef:ce:16:ab:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:01:9F:28:9B:15:EF:D5:B3:98:15:E3:26:06:A0:01:A9:FF:A9
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/UyUBnyibFe_Vs5gV4yYGoAGp_6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.57.128.0/17
                  46.213.0.0/16
                  94.252.128.0/17
                  178.52.0.0/16
                  185.136.144.0/22
                  188.139.128.0/17
                IPv6:
                  2a00:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:7b:b4:87:8a:11:a8:80:5e:05:d1:14:65:de:d2:73:3c:
         ce:13:4d:48:f6:aa:ae:a2:14:7a:c9:19:3c:10:a5:7d:87:a9:
         4f:c9:41:0a:cd:3b:05:36:cd:60:51:4d:d8:38:1e:de:ee:08:
         ea:74:d7:5d:c6:45:1c:28:35:6d:75:73:1f:5c:30:8b:7d:c7:
         a8:a8:8a:06:4f:cb:a8:bf:9c:40:6e:03:54:b7:ef:88:49:cb:
         f3:6f:ad:ee:ea:4b:c9:09:c8:bc:7b:b8:ac:13:73:d0:ef:98:
         7d:56:37:80:0f:9e:7b:ed:07:96:b9:d9:9f:c6:47:a8:7d:f3:
         a1:78:73:5f:47:58:13:f5:8d:49:c7:19:25:3e:a4:b7:fa:67:
         13:18:c5:67:6d:db:65:ee:46:0b:58:bc:38:ae:e5:7f:31:98:
         0a:85:b8:b7:07:17:cb:54:c3:9e:e1:7e:0a:05:46:1f:7c:fd:
         10:d6:8a:1e:15:aa:f7:c5:26:e2:0c:3a:5d:a0:28:9e:e3:cb:
         02:28:16:9a:78:50:70:d9:e1:56:5d:67:77:31:3c:65:39:49:
         ec:2a:c9:d0:9c:8e:5e:21:27:f6:6c:79:44:a9:4a:3b:42:24:
         17:b5:77:66:80:21:95:3b:9d:74:e0:1c:d1:52:74:97:0f:cd:
         0b:24:5c:a9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZLX77GVWAd0pNMkSbalcCm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjQxMDI5MTEwMTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI1MDE5ZjI4OWIxNWVmZDViMzk4MTVlMzI2MDZhMDAxYTlmZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkysq6Cz6z7stAxiTdwsPKuiqAK+
Y0EG9ZEgKbMy1t9pBVWzWuLcD125zGGzSo05iAEyLNuWv+wevHnsDRzMfXo4x2ub
bPgEkR44aVQqdo5K2Lage+92zng4Qu67o8kKJpIn/ceZIfLGBQXKZz69VnYNY3kf
E+K91KYLBrJ/71K43k+Y9im+Urm72LTkgcy6uTd5gcIzZJKCvECSv0Mffi1hvuE5
8nhovg697KE0lPUBze4XajAj3anJYlMvXxXSMm+w82QJaQ7uk7VdXMzuHUiHdQgf
xMRy4Nj6yadgZvxq4tWilftIHxb9Xbm2iZHM+hNTaU9RD4hvuu/OFqsQDwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFFMlAZ8omxXv1bOYFeMmBqABqf+pMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvVXlVQm55aWJGZV9WczVnVjR5WUdvQUdwXzZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQHLjmAAwMA
LtUDBAde/IADAwCyNAMEArmIkAMEB7yLgDANBAIAAjAHAwUAKgC4ADANBgkqhkiG
9w0BAQsFAAOCAQEAQP97tIeKEaiAXgXRFGXe0nM8zhNNSPaqrqIUeskZPBClfYep
T8lBCs07BTbNYFFN2Dge3u4I6nTXXcZFHCg1bXVzH1wwi33HqKiKBk/LqL+cQG4D
VLfviEnL82+t7upLyQnIvHu4rBNz0O+YfVY3gA+ee+0HlrnZn8ZHqH3zoXhzX0dY
E/WNSccZJT6kt/pnExjFZ23bZe5GC1i8OK7lfzGYCoW4twcXy1TDnuF+CgVGH3z9
ENaKHhWq98Um4gw6XaAonuPLAigWmnhQcNnhVl1ndzE8ZTlJ7CrJ0JyOXiEn9mx5
RKlKO0IkF7V3ZoAhlTuddOAc0VJ0lw/NCyRcqQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:15 2024 by rpki-client on console-fra.rpki-client.org