Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa
File:                     RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa (raw, json)
Hash identifier:          YyDRQhJjAb3AQvNonhnYyCxlRigpAHw0Qn8yqi4tnE8=
Subject key identifier:   46:96:59:FD:8D:D3:0B:EB:79:10:D5:99:CB:01:8E:50:C3:21:BA:0F
Certificate issuer:       /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial:       018D8904E69BAA5325A5BCB84CAD9E437185
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa
Signing time:             Thu 08 Feb 2024 14:00:16 +0000
ROA not before:           Thu 08 Feb 2024 14:00:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49556
IP address blocks:        80.244.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Jun 2024 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:89:04:e6:9b:aa:53:25:a5:bc:b8:4c:ad:9e:43:71:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
        Validity
            Not Before: Feb  8 14:00:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=469659fd8dd30beb7910d599cb018e50c321ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:15:96:fb:0c:f0:dc:66:a7:d1:1d:5e:67:
                    f5:84:02:81:3c:dc:ff:94:b1:42:2f:e3:7b:e2:ea:
                    ac:2c:24:a1:c8:02:81:13:1e:26:15:0f:47:5e:a0:
                    26:3e:ad:f4:6b:45:3b:e9:aa:3e:fa:7b:90:07:31:
                    8c:c5:18:f3:22:5a:89:ff:61:f7:e4:ad:88:be:55:
                    65:14:78:e6:83:40:ff:d6:88:39:10:e6:99:0b:ec:
                    9a:8c:39:da:77:d0:07:2d:74:31:b3:3f:f3:ed:90:
                    9d:e8:af:d4:d0:4f:21:b7:be:8c:c1:a7:df:e4:f7:
                    20:00:07:7d:8d:71:b0:9f:19:d8:dc:c1:73:d0:7d:
                    bc:7d:f4:08:26:93:9a:a2:da:69:c0:d3:31:e6:a5:
                    58:34:9c:cf:b3:cc:dc:8b:4a:30:45:7b:21:02:b4:
                    0b:d7:cb:ad:b7:4a:0c:76:48:a6:53:18:be:90:a1:
                    96:7a:5a:ed:c4:c5:61:02:77:9b:b7:ef:00:00:fb:
                    cc:7b:66:29:cb:0e:41:d6:0e:ad:a3:e9:a8:62:d2:
                    77:55:c2:88:3c:e2:fc:6a:d2:3f:9d:de:5e:ac:da:
                    44:3b:82:dc:8a:b5:c0:d4:22:a7:e0:20:89:17:fb:
                    6b:24:a3:64:52:2f:b5:c1:fc:37:8d:3c:db:13:13:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:96:59:FD:8D:D3:0B:EB:79:10:D5:99:CB:01:8E:50:C3:21:BA:0F
            X509v3 Authority Key Identifier:
                keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:dd:48:e3:b0:7f:d1:38:d8:e0:58:52:07:f5:50:8c:87:
         86:1d:b0:45:78:07:5e:ac:58:2a:75:88:27:b2:dc:d2:23:d3:
         ee:18:05:99:fd:fa:43:83:98:4b:66:81:f2:d8:69:cb:36:ae:
         a4:33:78:74:80:2e:ac:d0:9b:3b:0e:e4:98:b5:1c:89:76:3b:
         2e:ce:df:b9:bd:b1:d3:f5:f7:1d:51:25:65:45:a4:5b:9c:7c:
         be:4e:31:0f:ce:41:51:d8:11:87:21:73:35:bc:76:12:c5:f4:
         46:59:0b:fa:93:82:00:cf:05:68:d2:0d:04:cb:e7:7f:43:56:
         a3:a4:25:1e:3d:a4:cd:ae:b7:8f:ea:98:66:dc:e5:03:36:67:
         46:28:c3:38:00:93:9e:43:b0:98:3f:07:3a:5e:13:39:9a:ed:
         40:94:09:dc:82:93:0d:7a:6f:fb:ed:97:fd:d4:7b:f9:c3:3d:
         c6:61:e2:32:82:c3:0f:61:b5:89:b1:5c:23:7a:ed:d6:29:af:
         04:9c:82:26:c3:a1:e4:c2:01:63:c2:62:81:8f:fe:9f:9c:49:
         ae:a5:70:d2:9a:b5:3e:05:66:38:86:46:bf:49:92:8f:2f:0d:
         e5:0a:c5:ba:ae:df:54:bb:f1:2b:3a:81:77:33:6d:b9:96:d3:
         db:a6:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:31:08 2024 by rpki-client on console-ams.rpki-client.org