Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/6cr935C4-s2oXADfpBKkZxO0JCs.roa
File:                     6cr935C4-s2oXADfpBKkZxO0JCs.roa (raw, json)
Hash identifier:          0UfCwrXGdagy6R8gEQHnEWp8loO7ZUV2cK3ueMpYj1o=
Subject key identifier:   E9:CA:FD:DF:90:B8:FA:CD:A8:5C:00:DF:A4:12:A4:67:13:B4:24:2B
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       018CC7272C0AF3BDD8BBAAACB06640B03FE9
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/6cr935C4-s2oXADfpBKkZxO0JCs.roa
Signing time:             Mon 01 Jan 2024 22:31:22 +0000
ROA not before:           Mon 01 Jan 2024 22:31:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48391
IP address blocks:        93.126.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:2c:0a:f3:bd:d8:bb:aa:ac:b0:66:40:b0:3f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 22:31:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9cafddf90b8facda85c00dfa412a46713b4242b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:a8:61:c2:74:e6:48:45:cd:94:3f:19:50:
                    d7:6c:60:95:cd:39:0e:31:24:dd:08:38:c1:af:d6:
                    0f:56:df:52:f2:b9:fd:8f:65:23:f0:97:4f:36:e8:
                    15:55:03:f0:2b:d9:29:73:92:5d:33:1a:e1:d7:59:
                    68:a1:af:ab:36:41:f9:45:41:ea:93:2b:cd:e5:a2:
                    47:fb:9b:14:ec:4f:20:bd:35:54:56:0f:50:6b:3c:
                    2d:8c:4e:95:84:d0:64:24:58:ed:13:a1:72:cf:f6:
                    2c:ca:b5:28:ad:e0:1d:84:f3:9e:b4:c6:d9:05:82:
                    f9:02:80:3a:d5:2e:44:24:97:40:3f:7b:f0:d3:a3:
                    cc:28:83:eb:9e:a1:9f:0b:73:a4:d6:be:f7:c7:d8:
                    5c:6a:4b:18:12:85:37:1f:ad:a5:ac:fa:51:ff:4b:
                    23:9c:a5:76:3b:22:97:ea:8e:13:d6:53:0a:66:2a:
                    04:60:25:d7:1c:a7:bb:92:94:e1:ad:88:0d:2e:5d:
                    20:2f:06:2b:ef:45:c9:a6:7b:6d:87:af:0b:b9:ca:
                    f4:84:85:3b:85:27:9c:07:25:cd:4c:ad:fb:78:90:
                    48:9a:e9:16:9f:3a:93:83:7d:7e:36:19:bd:68:7a:
                    d2:5a:6f:a7:73:fc:84:98:55:f4:3b:34:b6:0e:90:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:FD:DF:90:B8:FA:CD:A8:5C:00:DF:A4:12:A4:67:13:B4:24:2B
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/6cr935C4-s2oXADfpBKkZxO0JCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:32:5e:97:13:d2:f3:08:e1:77:90:6b:ca:d0:dc:d4:73:22:
         06:a2:0c:ff:ab:a5:0c:ef:92:d5:dd:47:b2:5c:b0:f8:67:8c:
         7d:76:21:de:be:0a:6e:c8:84:bb:24:96:e8:a2:69:0c:13:f7:
         e2:17:82:2f:bb:69:1b:02:fa:1e:ab:f2:76:e8:cc:b8:05:f8:
         70:ba:aa:c3:a2:26:ab:2f:d4:e6:8c:70:b0:03:91:dc:7d:68:
         64:d4:5f:e0:0f:b9:27:b1:dc:97:01:60:1e:58:17:8e:b9:a1:
         94:03:21:cb:33:1f:29:e0:79:62:16:d3:1d:d5:81:60:c5:7a:
         2c:bf:f7:bd:fe:bf:c2:78:10:48:51:98:8f:97:69:7a:24:ff:
         4e:19:0f:be:53:68:af:ea:72:4a:54:e7:bd:16:6c:ae:a0:9e:
         e2:3d:b1:f4:f7:ad:0c:ee:8d:28:d0:03:15:dd:0d:71:36:4b:
         ab:6f:1f:49:2b:7a:61:8c:2b:55:c4:82:2f:82:8e:62:be:53:
         75:bc:d7:20:47:45:27:07:62:f2:7b:13:53:f4:84:f3:5b:5e:
         55:7e:90:fd:3c:e3:a5:5b:e7:ba:79:56:a1:d7:58:67:f7:05:
         38:5d:cd:32:e6:e5:bf:bd:b1:c5:e6:85:6c:d4:7c:8f:9b:81:
         60:43:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:13:22 2024 by rpki-client on console-ams.rpki-client.org