Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/6spe-Z-WPppBJBlHaydnAS4q4dU.roa
File:                     6spe-Z-WPppBJBlHaydnAS4q4dU.roa (raw, json)
Hash identifier:          UurQ39M2tDzHsfJG0CmGF/02ARXkukk90uaNjwJYtUc=
Subject key identifier:   EA:CA:5E:F9:9F:96:3E:9A:41:24:19:47:6B:27:67:01:2E:2A:E1:D5
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018DE64A59502AEB508529AD8B6CCE20429D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/6spe-Z-WPppBJBlHaydnAS4q4dU.roa
Signing time:             Mon 26 Feb 2024 16:40:48 +0000
ROA not before:           Mon 26 Feb 2024 16:40:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20860
IP address blocks:        185.179.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e6:4a:59:50:2a:eb:50:85:29:ad:8b:6c:ce:20:42:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Feb 26 16:40:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eaca5ef99f963e9a412419476b2767012e2ae1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:ec:2a:1e:be:0a:6b:cb:ac:a4:11:bb:d2:
                    70:36:9b:f5:66:f1:3d:73:d2:f5:6c:45:62:f4:84:
                    d0:5c:2a:4f:2b:61:00:8d:be:9c:2a:86:3e:74:10:
                    86:f6:95:1a:46:2e:c6:c2:48:7e:31:80:03:b1:12:
                    3c:17:2e:cb:e0:bb:58:cc:9d:b1:26:c9:84:8f:a6:
                    7e:32:a7:89:0e:09:d2:95:12:ae:3e:20:2e:21:d0:
                    18:7e:5c:95:33:bb:93:1b:6e:ee:98:de:e6:c3:02:
                    d5:83:2e:f3:09:c4:1a:e6:ea:42:fa:25:c4:f2:76:
                    bb:ad:80:80:81:61:3f:ee:b3:ec:b6:0d:ad:93:f5:
                    2c:d5:f6:a8:9f:45:7f:88:c6:fd:6b:3d:61:78:08:
                    6c:b3:e6:59:e8:13:0b:7a:f3:0f:96:59:f9:bf:01:
                    56:b4:b0:b1:10:52:79:e1:6c:f4:fa:c8:60:72:58:
                    55:c6:d2:ac:12:e4:d9:53:c2:f1:8b:15:91:2c:5e:
                    ad:8a:58:d9:f0:a5:88:b4:bd:b3:37:8e:43:14:87:
                    b7:2b:3f:3d:a3:c5:53:ad:be:bc:65:22:2b:77:e6:
                    2d:8e:44:6e:95:f2:b8:e6:3c:39:17:4e:7a:f6:6c:
                    6f:13:0c:3b:a0:49:16:19:3e:3c:61:ba:55:b0:ae:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:5E:F9:9F:96:3E:9A:41:24:19:47:6B:27:67:01:2E:2A:E1:D5
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/6spe-Z-WPppBJBlHaydnAS4q4dU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:be:88:fd:f9:09:85:17:6c:cd:23:6f:23:61:45:73:c4:4a:
         15:36:5f:f5:5c:3e:d1:c9:b0:8d:75:0d:ed:98:c1:c6:47:37:
         f6:6b:33:cb:6d:9a:78:a6:9f:d7:b0:08:29:fb:b1:93:ff:af:
         d3:30:46:1d:93:0c:98:3c:bd:89:fc:b9:58:08:19:aa:66:f1:
         7c:35:19:3b:f6:68:a9:9c:05:5d:dc:e9:1f:97:44:2a:f8:59:
         26:8f:c4:30:d0:4d:8e:de:ae:c0:33:e6:1a:b3:61:e3:2e:1c:
         13:86:6b:e3:32:f1:3f:db:38:eb:e6:85:96:77:b5:00:73:e6:
         72:14:8d:6d:4a:6c:5c:07:10:14:11:48:7f:bb:a1:55:57:bb:
         1f:2a:05:cc:f8:45:eb:4b:74:6c:02:df:f8:81:95:a2:58:f6:
         f3:dc:06:13:0e:14:56:7b:3c:64:9d:9f:92:e0:d5:60:02:5e:
         58:c8:3a:3c:de:46:9b:33:19:25:73:a2:49:b0:20:45:b1:a6:
         a2:85:08:ed:26:47:40:64:97:36:81:79:f7:36:12:22:77:25:
         d9:38:d0:b4:8c:72:32:46:b3:29:b6:a4:e6:69:6a:7f:f7:9e:
         fb:97:92:52:95:99:e8:bc:26:70:93:9b:43:17:67:47:f1:e4:
         df:4e:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:41 2024 by rpki-client on console-ams.rpki-client.org