Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/bt48UuSSOX_ne3Xatg3xSi8c5O4.roa
File:                     bt48UuSSOX_ne3Xatg3xSi8c5O4.roa (raw, json)
Hash identifier:          SMJ1h8DebPB9ZaGj9J/3OGQr/zYsSG8aQagdJKGi1fw=
Subject key identifier:   6E:DE:3C:52:E4:92:39:7F:E7:7B:75:DA:B6:0D:F1:4A:2F:1C:E4:EE
Certificate issuer:       /CN=263c3507760c5b82951a307cef932b0a4d36b363
Certificate serial:       018CC3B6DBCF414ADB218BCA40B1882E47D2
Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/bt48UuSSOX_ne3Xatg3xSi8c5O4.roa
Signing time:             Mon 01 Jan 2024 06:29:50 +0000
ROA not before:           Mon 01 Jan 2024 06:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35041
IP address blocks:        77.232.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:db:cf:41:4a:db:21:8b:ca:40:b1:88:2e:47:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363
        Validity
            Not Before: Jan  1 06:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6ede3c52e492397fe77b75dab60df14a2f1ce4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:03:6b:23:2e:06:58:c1:ec:f8:1a:96:0f:
                    52:3c:0b:45:0f:05:2d:4d:c5:80:42:fb:0b:d7:cd:
                    ad:29:ab:27:ce:27:da:d3:e6:75:92:c2:dc:2d:40:
                    99:b0:8c:a6:f9:18:fa:9e:2a:5e:ab:25:a5:be:d6:
                    6a:83:0b:d3:75:dd:00:0c:e0:a9:0e:d9:b2:84:9c:
                    8b:eb:44:3a:e3:1f:01:5d:05:8c:a3:bb:75:7f:f4:
                    2b:98:e1:02:df:15:9a:9a:a1:c8:b5:9f:4b:4f:ef:
                    bf:0a:0d:7a:81:27:17:a5:de:13:7c:d3:27:f0:fe:
                    23:27:74:37:ff:87:8a:1a:c8:98:a2:2f:03:a7:3b:
                    f6:f3:20:55:52:7c:12:cc:1a:b4:e6:bc:9b:ec:80:
                    b3:4c:31:29:ad:ac:11:da:23:17:d7:53:1d:7c:f1:
                    69:4d:02:7d:e7:f2:37:37:c8:36:2e:a3:87:a3:80:
                    b8:92:43:52:1c:64:a8:0f:70:92:c4:ee:9d:1f:39:
                    70:51:b7:b2:2d:56:4f:83:79:6f:ad:a2:35:9b:09:
                    8f:72:57:be:89:5c:5b:1e:99:e0:08:fe:4d:04:5c:
                    f0:39:9b:5c:eb:42:60:ed:4b:41:37:91:d5:6d:6f:
                    6c:30:57:4a:97:a6:80:e5:51:73:54:8f:30:f2:d8:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DE:3C:52:E4:92:39:7F:E7:7B:75:DA:B6:0D:F1:4A:2F:1C:E4:EE
            X509v3 Authority Key Identifier:
                keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/bt48UuSSOX_ne3Xatg3xSi8c5O4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.232.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:2f:c6:93:7d:b8:16:ee:7c:95:a5:5f:84:41:7d:81:9f:
         9e:19:84:c3:b2:05:fe:aa:76:68:39:36:99:95:d1:f0:a3:0a:
         9e:37:a9:b7:ac:36:f1:2f:0a:b5:38:87:0c:3a:25:71:11:b2:
         5f:58:c8:6f:9b:fe:fe:69:db:5b:bd:d6:93:84:20:e0:26:50:
         b5:a0:31:20:4c:e0:9f:21:24:61:a1:45:12:99:63:54:58:b6:
         da:8b:e7:ca:f6:d9:3e:be:bd:40:ee:1c:7c:d6:9d:fb:05:07:
         b1:02:52:ef:89:79:a7:b9:d3:7a:1e:b7:2b:22:47:76:21:17:
         3e:5c:27:d1:62:22:49:71:cf:09:5c:79:5c:74:6c:be:f7:20:
         16:20:4e:01:07:56:9c:21:fd:64:e6:aa:6f:6a:d5:1b:23:fc:
         ef:48:49:df:92:77:3d:bf:cf:7d:f4:b3:2f:6b:e3:19:5b:d4:
         f2:fc:ac:0a:de:4f:1d:6c:bc:2a:dd:e1:eb:7b:fd:b4:77:94:
         ee:82:40:3a:1a:5e:57:d0:24:d0:9c:76:b9:c2:22:99:dc:af:
         ae:14:65:c6:4a:0b:57:43:78:09:b7:10:80:0e:4d:1f:c7:e4:
         e6:b1:73:77:7a:ab:cf:cd:c6:8e:56:c8:5d:de:a9:e1:54:7e:
         61:98:8e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:40:11 2024 by rpki-client on console-ams.rpki-client.org