Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/mMbX9a7F3PDeET-jlq7mupmHLtc.roa
File:                     mMbX9a7F3PDeET-jlq7mupmHLtc.roa (raw, json)
Hash identifier:          K+cR4Ra7OKtyo/Zq8GfOGdmX7r2FSSdJN2yfoI1zb5s=
Subject key identifier:   98:C6:D7:F5:AE:C5:DC:F0:DE:11:3F:A3:96:AE:E6:BA:99:87:2E:D7
Certificate issuer:       /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial:       018EA876A4E83C710A55E3E1C77353C215DD
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/mMbX9a7F3PDeET-jlq7mupmHLtc.roa
Signing time:             Thu 04 Apr 2024 09:35:31 +0000
ROA not before:           Thu 04 Apr 2024 09:35:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215184
IP address blocks:        2a13:82c3::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a8:76:a4:e8:3c:71:0a:55:e3:e1:c7:73:53:c2:15:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
        Validity
            Not Before: Apr  4 09:35:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=98c6d7f5aec5dcf0de113fa396aee6ba99872ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:45:2a:29:3e:02:ab:d1:dd:a5:03:e3:41:
                    67:2c:16:1f:a5:29:06:ac:a0:b3:d6:61:77:0a:79:
                    9b:5c:0e:5c:74:81:77:b4:bc:4e:25:c2:89:f3:c9:
                    c0:59:a8:34:04:d8:09:0b:b3:fd:5a:13:7d:d4:b9:
                    d8:ad:08:ef:9b:85:b0:eb:81:1e:40:b7:4d:5a:85:
                    f3:3c:a8:24:06:a6:99:28:4e:90:78:23:61:55:99:
                    68:1d:bd:d8:8d:50:91:69:ef:16:63:48:29:55:80:
                    3b:b6:2d:ec:ac:11:b2:d5:fd:e6:0a:08:35:b3:54:
                    7c:44:f3:8f:c3:7e:96:0d:31:6b:7e:23:c2:58:6f:
                    2e:00:f3:0f:b0:95:48:e0:41:8a:89:f8:f3:6b:4e:
                    eb:b8:12:20:ca:88:97:57:e8:bd:bb:24:85:6c:66:
                    e1:87:be:2f:01:ae:97:b1:dd:56:43:d8:07:b7:a9:
                    d0:a7:ec:24:b4:7c:ac:da:0b:ab:40:14:b8:ce:3a:
                    af:09:64:a5:5a:22:4f:eb:6a:9c:f9:24:6d:b3:95:
                    2e:44:d9:6b:19:ad:dd:b1:a9:96:50:de:f3:cd:ea:
                    e8:a8:88:14:59:5c:a8:cc:4b:2e:59:98:0f:15:af:
                    a1:c6:6e:73:a2:61:47:cb:98:31:3d:6b:b9:ed:5b:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C6:D7:F5:AE:C5:DC:F0:DE:11:3F:A3:96:AE:E6:BA:99:87:2E:D7
            X509v3 Authority Key Identifier:
                keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/mMbX9a7F3PDeET-jlq7mupmHLtc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:82c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:eb:4d:95:e9:b9:eb:72:fd:6a:9d:ed:98:2a:01:e4:7d:a7:
         85:83:52:e8:b5:99:79:92:42:24:d7:bc:a0:84:61:6f:16:94:
         5f:08:59:b1:e3:52:ec:21:de:97:1e:6d:9d:8b:a9:f6:97:a4:
         e4:f5:b9:95:36:6e:84:66:46:26:d3:d4:51:da:e9:1b:2a:27:
         25:f6:95:ac:92:05:bf:57:2e:52:75:ca:fa:01:72:b9:ef:8f:
         77:d0:03:2e:e3:94:49:48:92:70:66:81:2c:58:7e:2a:6e:ef:
         0f:f9:88:3a:6a:18:52:69:4b:c6:87:e0:9a:a0:e5:9e:19:25:
         2f:28:5d:e1:3a:04:3c:18:1f:6a:22:81:05:4c:99:48:7c:60:
         e4:a4:f7:7e:da:74:76:dd:fa:8e:34:17:ea:68:d7:86:16:87:
         06:d0:14:0f:de:7a:48:45:d8:a5:16:29:38:c5:85:b3:3d:bf:
         10:86:e3:f7:71:5a:9a:11:6b:e2:79:14:4b:29:18:d8:23:ff:
         da:98:ce:f2:e8:a4:a9:65:67:b0:37:60:36:5f:65:c6:de:c7:
         fc:9e:59:c9:85:5b:84:0c:e8:3f:ba:bb:29:00:63:f5:40:b9:
         35:92:ac:f4:69:79:97:4d:26:f9:98:4c:36:c4:bd:5e:75:c2:
         54:65:76:88
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY6odqToPHEKVePhx3NTwhXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkYzc2ZWI2ZjgxNGVkNjAxNTY4ZmRkMmM4MTEwZWRl
ZjhjMTcwHhcNMjQwNDA0MDkzNTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGM2ZDdmNWFlYzVkY2YwZGUxMTNmYTM5NmFlZTZiYTk5ODcyZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXdFKik+AqvR3aUD40FnLBYfpSkG
rKCz1mF3CnmbXA5cdIF3tLxOJcKJ88nAWag0BNgJC7P9WhN91LnYrQjvm4Ww64Ee
QLdNWoXzPKgkBqaZKE6QeCNhVZloHb3YjVCRae8WY0gpVYA7ti3srBGy1f3mCgg1
s1R8RPOPw36WDTFrfiPCWG8uAPMPsJVI4EGKifjza07ruBIgyoiXV+i9uySFbGbh
h74vAa6Xsd1WQ9gHt6nQp+wktHys2gurQBS4zjqvCWSlWiJP62qc+SRts5UuRNlr
Ga3dsamWUN7zzeroqIgUWVyozEsuWZgPFa+hxm5zomFHy5gxPWu57Vve9QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJjG1/Wuxdzw3hE/o5au5rqZhy7XMB8GA1UdIwQY
MBaAFM/13Hbrb4FO1gFWj90sgRDt74wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjct
MDFkOWU5ZDMxOTQzLzEvbU1iWDlhN0YzUERlRVQtamxxN211cG1ITHRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjctMDFkOWU5ZDMxOTQz
LzEvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOCwzAN
BgkqhkiG9w0BAQsFAAOCAQEAwutNlem563L9ap3tmCoB5H2nhYNS6LWZeZJCJNe8
oIRhbxaUXwhZseNS7CHelx5tnYup9pek5PW5lTZuhGZGJtPUUdrpGyonJfaVrJIF
v1cuUnXK+gFyue+Pd9ADLuOUSUiScGaBLFh+Km7vD/mIOmoYUmlLxofgmqDlnhkl
Lyhd4ToEPBgfaiKBBUyZSHxg5KT3ftp0dt36jjQX6mjXhhaHBtAUD956SEXYpRYp
OMWFsz2/EIbj93FamhFr4nkUSykY2CP/2pjO8uikqWVnsDdgNl9lxt7H/J5ZyYVb
hAzoP7q7KQBj9UC5NZKs9Gl5l00m+ZhMNsS9XnXCVGV2iA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:49:10 2024 by rpki-client on console-fra.rpki-client.org