Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa
File:                     TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa (raw, json)
Hash identifier:          lV0rpOjzXD91TeojuhNDcm3uIQLz+e/v7/x10pJU480=
Subject key identifier:   4C:9E:43:5A:72:E2:43:07:8C:FF:28:FE:6D:13:4A:A0:4C:FF:05:E3
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       018CC6499AA2BD669AF7D874F00D1DC2793A
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa
Signing time:             Mon 01 Jan 2024 18:29:21 +0000
ROA not before:           Mon 01 Jan 2024 18:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208900
IP address blocks:        95.160.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:9a:a2:bd:66:9a:f7:d8:74:f0:0d:1d:c2:79:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan  1 18:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4c9e435a72e243078cff28fe6d134aa04cff05e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:47:ba:55:1d:3c:41:fd:0f:8f:6d:dd:93:
                    d7:89:f0:52:a7:f8:f3:db:d9:ca:37:26:d9:48:7d:
                    5a:d7:24:dc:8f:1f:40:06:87:16:36:be:e4:69:64:
                    aa:26:0a:ef:2b:f1:32:49:be:e5:05:87:c0:33:4c:
                    c1:f3:74:a1:a5:e4:71:65:ac:b0:0b:a2:24:f4:b5:
                    72:60:02:c2:4c:9b:eb:07:2d:b9:f0:00:4d:71:4a:
                    2b:b5:08:e1:75:d1:6d:f3:f1:fc:32:e2:7e:dd:43:
                    d7:16:8f:3a:75:e7:10:82:fb:e8:dc:dd:33:dd:8f:
                    9a:e5:c4:cb:a8:f9:ff:f8:47:60:ee:a4:4b:cb:1b:
                    4e:86:d8:51:35:fd:cc:cb:f3:5b:8a:12:f5:ff:9d:
                    79:72:f5:ab:9a:b5:6d:e3:c0:d1:5c:c6:19:78:c0:
                    24:d7:9b:8e:cb:3c:9a:4b:ef:8e:e5:ac:fc:53:ed:
                    db:7b:69:83:7e:71:64:b0:ce:b7:ae:33:d7:96:4b:
                    05:c1:37:1e:78:b8:b8:96:c0:89:0b:06:90:6a:2f:
                    f4:ff:e3:b2:f9:f6:b8:fb:25:73:dc:0c:7b:06:d5:
                    bf:6a:27:38:cf:3b:ce:b0:36:13:ee:64:fd:f3:52:
                    36:9f:47:88:6b:09:81:fb:95:b7:36:b8:fc:e4:8f:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:43:5A:72:E2:43:07:8C:FF:28:FE:6D:13:4A:A0:4C:FF:05:E3
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.160.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:83:32:1e:95:e8:3f:bb:96:4c:79:54:d4:a5:4c:28:76:
         ce:8e:a2:dc:dc:b0:82:47:e2:49:a5:65:d9:36:38:79:ae:ee:
         2b:f7:c0:9e:59:54:cb:f1:4f:ab:25:27:75:93:7d:2a:4c:c3:
         a3:d8:25:97:70:82:df:52:af:3d:a0:c2:fa:18:3c:62:aa:48:
         bb:de:b9:80:43:80:a8:ef:be:41:5b:24:59:73:55:86:34:51:
         39:8d:07:a7:96:83:9d:6c:55:83:f1:53:28:d5:99:44:fc:51:
         a8:b8:20:e4:06:64:d2:4d:25:c0:3d:77:b3:f0:47:46:64:64:
         ac:e8:a3:ce:e6:c8:89:34:8d:2a:1f:91:3d:8d:0e:50:d9:43:
         70:c1:5f:1a:56:6d:77:00:e9:64:d4:e5:35:f0:86:33:20:c4:
         fb:5c:d2:90:13:85:69:74:8d:12:64:9f:3f:2f:31:d2:0a:69:
         88:e4:26:99:28:2c:a3:32:97:c4:99:3d:3f:20:21:64:ad:39:
         60:27:0a:4e:09:4e:7a:5e:c7:20:4f:82:62:08:27:67:50:f1:
         4f:e7:06:f0:ad:7d:7f:9e:28:34:05:e7:88:80:01:db:2d:d3:
         f6:99:e4:51:c7:ae:ac:a1:a3:02:ed:e8:bc:5a:31:dd:a0:95:
         74:48:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:03 2024 by rpki-client on console-fra.rpki-client.org