Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sNlULiOb4A4kbuIjCbf6SC2XO-k.roa
File:                     sNlULiOb4A4kbuIjCbf6SC2XO-k.roa (raw, json)
Hash identifier:          H9ZPcVCAwcTxjh7qyb8k/S3+i+I0cX2ivHQzUddHJW4=
Subject key identifier:   B0:D9:54:2E:23:9B:E0:0E:24:6E:E2:23:09:B7:FA:48:2D:97:3B:E9
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019060AA42577FEE931606D781EA73296E8A
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sNlULiOb4A4kbuIjCbf6SC2XO-k.roa
Signing time:             Fri 28 Jun 2024 21:04:49 +0000
ROA not before:           Fri 28 Jun 2024 21:04:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199614
IP address blocks:        217.180.52.0/24 maxlen: 24
                          217.180.53.0/24 maxlen: 24
                          217.180.54.0/24 maxlen: 24
                          217.180.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Dec 2024 13:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:aa:42:57:7f:ee:93:16:06:d7:81:ea:73:29:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jun 28 21:04:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b0d9542e239be00e246ee22309b7fa482d973be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:cd:69:70:33:2b:0b:52:8a:68:47:dd:69:
                    d2:a3:41:3b:e3:6f:06:fd:4c:07:fd:d0:7b:ef:1d:
                    0f:5c:1b:2d:53:f3:ea:97:cc:7e:bd:b3:cc:81:72:
                    ce:cf:2e:83:9b:c3:c3:8e:eb:01:f2:13:4f:e9:c3:
                    7e:bc:6a:29:dd:7a:7c:c4:45:46:47:28:c8:25:5a:
                    cc:a8:4a:e7:e8:62:db:84:e8:20:d8:86:98:b4:43:
                    49:41:76:40:fc:b9:dc:7d:7a:e5:94:d6:77:27:7f:
                    2d:fd:4f:07:88:95:30:94:f0:cb:a6:19:86:ac:a4:
                    0d:95:98:68:da:ae:8b:9d:19:9e:46:42:07:d6:56:
                    4c:db:27:c3:39:8f:84:8b:88:dd:11:6a:f9:f1:e6:
                    f6:2f:96:7b:df:ac:e5:8a:ff:dd:56:2c:ce:df:ad:
                    be:f9:b1:99:ea:59:ce:66:72:9d:6b:b2:38:29:e7:
                    ea:0f:1c:33:08:6a:38:a2:23:06:50:2e:82:65:a6:
                    6b:d1:b7:69:07:9b:8b:67:d0:c2:86:75:1e:0d:0d:
                    b2:41:e1:8b:70:79:d5:eb:c7:be:65:e6:93:e2:f1:
                    ab:d9:af:b6:ce:5f:62:75:e1:3c:db:66:c9:9c:ad:
                    9e:6b:22:6d:7e:47:3f:fa:06:40:db:8b:57:36:e8:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:54:2E:23:9B:E0:0E:24:6E:E2:23:09:B7:FA:48:2D:97:3B:E9
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sNlULiOb4A4kbuIjCbf6SC2XO-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.180.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:53:de:53:7b:bd:ce:eb:26:2f:3c:c9:b7:c5:65:30:5a:
         1f:18:a0:c6:3d:60:c1:66:c1:ed:93:b1:af:32:37:4c:c5:44:
         80:25:3a:58:a3:0c:5a:81:c8:f3:c7:0d:1a:bd:c3:b5:0f:01:
         22:5e:23:39:f4:d1:37:41:e6:43:80:99:a0:d3:2a:77:e7:6f:
         bf:50:20:65:98:75:73:c5:16:84:1f:d6:7b:69:01:e6:2a:33:
         1c:3e:63:16:e5:70:07:86:e4:1f:35:85:a1:cf:6d:fb:57:8b:
         9f:60:83:d0:ba:e6:74:c4:21:5d:95:62:21:ce:c5:af:58:f6:
         eb:ae:ab:66:b5:43:4d:59:f4:20:84:2d:a1:8e:91:7c:2f:b6:
         f1:bc:7f:73:73:c8:1b:e0:8e:c4:99:41:28:c5:07:41:7c:65:
         a5:d3:14:18:6c:39:71:6f:cf:0f:94:d2:0e:f4:4f:a1:c0:78:
         c7:27:7c:b1:32:f1:34:a5:77:b8:cd:e4:8c:3a:81:a5:1e:63:
         a7:21:05:68:d2:f1:1d:8b:23:f5:c7:a5:5f:5b:ba:b4:4a:c4:
         38:2a:4e:39:62:eb:c8:b6:d2:66:99:cc:2c:b2:98:d5:fa:5b:
         66:20:d2:06:a0:c6:f0:6d:12:bb:fd:5d:97:4f:f4:9d:52:3d:
         9e:67:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 22:35:54 2024 by rpki-client on console-ams.rpki-client.org