Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa
File:                     nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa (raw, json)
Hash identifier:          RgiGnVWsGyyBv+tdEC1rHK6Bnf5QcteJnLC2EEE++hQ=
Subject key identifier:   9E:C3:C6:96:54:80:D5:60:9C:D1:26:3A:37:B1:78:32:64:8C:0E:74
Certificate issuer:       /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial:       018CC870265D8B695B051152DEFF5BE63651
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa
Signing time:             Tue 02 Jan 2024 04:30:42 +0000
ROA not before:           Tue 02 Jan 2024 04:30:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5607
IP address blocks:        185.110.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:70:26:5d:8b:69:5b:05:11:52:de:ff:5b:e6:36:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
        Validity
            Not Before: Jan  2 04:30:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ec3c6965480d5609cd1263a37b17832648c0e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:a6:a2:78:3d:ba:18:eb:b6:e6:ff:69:31:
                    22:13:e8:e4:54:97:a7:7b:43:4d:c1:5b:32:6c:f6:
                    60:e3:61:bc:3f:bb:aa:1e:a5:b3:34:ea:06:28:8f:
                    cb:1b:c3:ed:ee:e5:03:79:07:34:b5:aa:81:6e:f5:
                    92:22:c2:9f:ee:c6:da:2d:d6:cd:6a:52:bb:64:05:
                    a5:fd:e6:a0:54:6b:c1:ee:37:96:09:a9:a1:a5:bf:
                    5a:ba:f9:44:e0:1b:a9:d3:b2:46:bf:71:7c:01:17:
                    bd:9f:8b:3f:9f:35:17:7b:16:d6:c8:6b:41:79:21:
                    0d:b1:e1:74:b6:43:e4:6f:0d:fa:07:56:75:9f:8b:
                    1b:75:ed:f3:56:be:21:d7:89:eb:27:2a:62:3d:c0:
                    f6:2d:f6:24:95:e6:8e:de:b4:5a:c9:28:35:c9:dc:
                    cb:0f:6b:b8:c7:87:57:2c:9f:b4:27:00:16:aa:17:
                    0d:69:96:b9:0c:2f:58:99:eb:8c:8e:4f:10:8e:65:
                    9a:17:be:c0:2e:e5:f6:0c:02:87:ac:9a:9c:b7:cb:
                    34:12:b3:60:1d:37:cd:e6:f5:44:b6:e1:c7:34:7b:
                    03:0a:00:2f:76:a2:0c:5e:9d:f0:29:4d:81:66:03:
                    85:cb:78:af:d5:b7:01:d5:8c:1a:e4:85:97:eb:de:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C3:C6:96:54:80:D5:60:9C:D1:26:3A:37:B1:78:32:64:8C:0E:74
            X509v3 Authority Key Identifier:
                keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:81:39:e7:2b:dc:05:26:55:c7:f9:79:ba:6b:b8:2f:d2:
         96:74:75:2e:0a:cb:f9:d5:2a:07:18:4c:02:74:5b:c9:13:8a:
         9f:04:f9:b6:4c:68:11:df:9c:a5:b3:21:83:b6:8f:5e:24:f4:
         c2:8e:9b:91:96:38:19:af:7f:0e:e9:86:27:7c:a5:23:d2:b9:
         ae:d2:b9:b3:27:5c:d9:89:fe:9b:3e:01:36:45:e5:cb:d5:f5:
         3e:1e:51:1a:27:3c:9e:9c:06:55:2a:7f:90:32:e7:f6:3a:1b:
         35:df:aa:40:a6:b3:d4:81:34:12:dc:04:a7:bf:ec:88:e2:d2:
         c0:14:47:cc:2d:d1:96:d3:61:b2:94:92:b8:58:80:34:87:19:
         8f:62:65:33:df:ba:74:26:8b:2c:ff:28:ad:a5:46:54:49:cc:
         d7:b2:4a:ce:94:97:c2:66:2d:bd:f5:42:65:2c:73:6b:78:6b:
         9a:81:ee:2a:cc:75:68:8a:47:df:a7:bf:55:c3:d2:2a:27:39:
         00:9c:bf:36:93:11:88:45:08:6d:b4:28:6b:17:c8:72:d5:d2:
         db:51:41:2a:a3:67:b3:86:27:42:0c:6d:ad:49:a5:fe:94:8f:
         85:2f:46:56:51:de:12:c4:c0:e6:52:05:b4:2f:c0:e4:30:db:
         a3:07:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:48 2024 by rpki-client on console-fra.rpki-client.org