Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/oDdMxqE17Hsm7G_OWYXEzIpv1do.roa
File:                     oDdMxqE17Hsm7G_OWYXEzIpv1do.roa (raw, json)
Hash identifier:          SZno/8hc7V6yQ/Vn8tFE0ItZx4ZT59YkL01ICPSdbdY=
Subject key identifier:   A0:37:4C:C6:A1:35:EC:7B:26:EC:6F:CE:59:85:C4:CC:8A:6F:D5:DA
Certificate issuer:       /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial:       018CCA296A33A80D4381477492FED412FFDB
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/oDdMxqE17Hsm7G_OWYXEzIpv1do.roa
Signing time:             Tue 02 Jan 2024 12:32:40 +0000
ROA not before:           Tue 02 Jan 2024 12:32:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202956
IP address blocks:        185.149.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:6a:33:a8:0d:43:81:47:74:92:fe:d4:12:ff:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
        Validity
            Not Before: Jan  2 12:32:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a0374cc6a135ec7b26ec6fce5985c4cc8a6fd5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:9e:b8:8b:2d:1f:23:5f:99:64:d3:2f:2e:
                    ee:0d:de:a9:fb:d6:6a:a8:33:9c:96:7f:14:df:81:
                    de:fe:f8:58:59:3e:1d:8b:a5:bb:a1:31:f9:18:c2:
                    63:e0:14:aa:f9:3f:a5:92:04:d3:96:ee:ea:d7:40:
                    d9:5c:bd:ab:88:e4:48:02:aa:a7:26:ec:f3:07:b3:
                    ca:22:53:26:40:b3:b2:5b:3a:12:c3:fc:d5:82:1d:
                    a6:05:18:4d:7a:04:21:ba:22:9f:ca:77:cb:8c:24:
                    ce:03:87:70:7a:f8:7b:e8:28:b8:2d:40:e2:a7:dc:
                    c7:a8:b2:2e:7c:ef:24:26:8c:5d:4f:63:19:0d:0c:
                    e1:da:c9:e3:96:43:fb:f1:15:8a:d3:65:d8:e8:b1:
                    ed:b7:93:19:40:fb:79:5d:9e:2d:79:c0:e8:1d:13:
                    cc:3f:80:43:0e:26:11:0e:f1:b4:f2:e0:7b:98:9c:
                    e4:c7:16:88:1f:5e:d2:3f:66:eb:9e:50:d8:bd:0c:
                    56:5a:4f:21:00:59:32:d7:64:16:56:67:08:31:73:
                    f4:a3:ff:f5:63:53:eb:e4:27:6a:ed:40:1c:89:d8:
                    43:48:68:4c:36:df:51:7a:c7:ad:5d:86:a6:9e:cc:
                    d8:86:18:f3:dc:6f:13:ec:9e:d9:b3:03:a2:44:c8:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:37:4C:C6:A1:35:EC:7B:26:EC:6F:CE:59:85:C4:CC:8A:6F:D5:DA
            X509v3 Authority Key Identifier:
                keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/oDdMxqE17Hsm7G_OWYXEzIpv1do.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:be:79:6f:11:27:30:bc:3f:6f:3f:07:8b:88:23:29:52:29:
         72:0a:9a:3a:f4:9d:2e:a6:a4:f4:e6:1e:87:c4:ba:de:f0:28:
         bc:62:53:6c:7b:4b:6b:c5:70:13:65:b3:83:74:5f:73:e2:ed:
         bf:39:34:be:08:40:91:dc:f9:aa:fa:9e:33:5a:71:fd:f1:e7:
         aa:f1:d2:5d:dd:04:4d:f8:b3:6a:b1:da:a9:ad:ef:27:e1:a3:
         ef:ad:9a:8d:35:c2:29:ef:0f:10:92:e0:07:5e:68:20:9e:fe:
         4e:fc:1c:b6:63:7f:d0:bf:81:6f:62:44:18:96:9c:16:b2:41:
         fb:e0:76:c2:b2:43:9e:02:66:20:7b:9e:ba:a9:43:98:a1:cc:
         af:46:86:0e:0f:cb:95:7e:a8:e5:e1:3a:45:b9:84:24:a5:81:
         3d:c2:d0:3e:d1:45:5b:e9:2e:e0:c4:f6:4d:f8:bf:f6:ea:3e:
         0b:db:a0:53:e8:89:8c:08:81:ab:e9:9f:14:ab:17:22:97:9f:
         74:e2:fe:cd:70:4b:08:36:db:8f:77:f0:44:15:70:bc:03:11:
         b7:be:d7:10:f9:ce:31:cb:13:07:7e:85:5e:40:2a:7b:4d:f7:
         1a:ef:9e:98:c8:92:71:21:34:f2:66:ce:d8:b6:fd:92:c3:82:
         b1:61:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:45:21 2024 by rpki-client on console-fra.rpki-client.org