Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/20IfWGwQpd5_k8HTXeI-xP8Atik.roa
File:                     20IfWGwQpd5_k8HTXeI-xP8Atik.roa (raw, json)
Hash identifier:          2Yp0rDiTINMjvptWQxdmgr6KZJm6Md0fT6fy19+lGQ8=
Subject key identifier:   DB:42:1F:58:6C:10:A5:DE:7F:93:C1:D3:5D:E2:3E:C4:FF:00:B6:29
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F9A210027454387414CFBE249FDB1FCA1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/20IfWGwQpd5_k8HTXeI-xP8Atik.roa
Signing time:             Tue 21 May 2024 07:50:04 +0000
ROA not before:           Tue 21 May 2024 07:50:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209043
IP address blocks:        89.213.115.0/24 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:21:00:27:45:43:87:41:4c:fb:e2:49:fd:b1:fc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May 21 07:50:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=db421f586c10a5de7f93c1d35de23ec4ff00b629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:89:7d:e5:a3:56:de:0f:3e:29:4f:f7:1b:
                    07:35:40:4b:18:50:02:b5:c0:20:76:73:b8:5d:2f:
                    41:c2:ef:40:5f:d5:d4:83:a2:79:2c:95:55:92:87:
                    29:a0:b8:6e:29:81:d3:59:e3:e5:56:d4:4b:82:1e:
                    ca:fe:1c:5c:e9:43:34:f4:94:81:a8:d8:e5:4b:06:
                    73:05:08:fd:61:0d:f2:88:44:08:a4:4a:67:f0:56:
                    f3:35:59:b7:63:59:c4:9d:f1:b7:17:01:b3:8b:4a:
                    37:83:93:08:81:86:da:1c:08:dc:0e:2c:52:bd:d7:
                    c7:b0:e3:d4:71:92:7f:c2:de:2e:3e:7a:88:a6:54:
                    bc:f3:6f:fe:ce:30:12:0b:64:62:34:b5:2c:85:eb:
                    f1:17:85:e4:2b:c9:83:be:0f:68:97:43:45:d9:1a:
                    0a:28:36:3a:ec:3a:ed:35:da:01:91:c1:3e:73:fa:
                    eb:94:38:ab:72:80:90:c4:9e:8d:83:8c:be:2c:43:
                    66:e9:d3:e9:f5:8b:2d:30:3c:3a:9f:5d:54:c8:f3:
                    39:6a:c6:1a:a0:17:06:ee:ef:f1:b9:4c:19:3d:6d:
                    c7:0d:e8:ab:20:1e:a4:4f:2a:f2:a5:a7:5b:6f:75:
                    50:97:76:cb:15:0b:cd:81:f0:04:db:20:22:ee:cd:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:42:1F:58:6C:10:A5:DE:7F:93:C1:D3:5D:E2:3E:C4:FF:00:B6:29
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/20IfWGwQpd5_k8HTXeI-xP8Atik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.115.0/24
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:61:57:6b:98:eb:f2:59:ce:f5:94:c4:b2:1e:2d:9f:47:
         b2:20:8a:1b:f7:b8:cf:38:eb:e6:ba:4c:f4:0f:97:e0:d2:ac:
         50:8b:e9:3e:2b:2d:f9:ed:eb:24:46:79:61:04:00:b0:e6:82:
         78:0e:d9:48:2a:41:96:6e:1c:8f:4c:6e:5a:fc:f3:4d:3f:28:
         a6:a0:87:bf:a7:bf:3c:9b:f2:8b:49:a0:d9:86:55:3e:b5:bd:
         d5:50:da:d4:2e:9a:40:8b:8e:90:b7:f0:06:61:70:77:68:16:
         5f:ff:ff:d3:ec:d1:6d:b4:ae:70:5c:89:c4:aa:1d:a7:ec:2f:
         22:c8:15:9e:fa:ea:84:14:a7:84:ae:1f:99:6e:18:c9:95:93:
         4c:9a:14:5d:a0:eb:ed:90:ee:00:15:13:dd:68:a7:f2:cc:b2:
         60:ba:7f:07:5a:c4:f4:b6:5a:66:99:f1:e2:7f:21:2a:69:11:
         95:2f:11:92:8b:38:35:9b:37:58:18:fa:50:0a:a7:48:03:28:
         15:3c:d3:6d:2a:3c:4d:75:f8:bd:c4:99:4d:7e:92:15:1c:0d:
         f5:1d:b6:75:fa:61:6e:b8:b1:de:7b:28:bb:7e:82:76:d1:42:
         68:b1:5a:7e:ef:19:8e:63:02:19:6a:47:fe:00:35:7c:f1:10:
         a9:1d:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:02:34 2024 by rpki-client on console-fra.rpki-client.org