Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eKFyuc5NMm2WXNnbQvix9cLavbo.roa
File:                     eKFyuc5NMm2WXNnbQvix9cLavbo.roa (raw, json)
Hash identifier:          BLpNcCflwONm+E5YTKfNKS/ldF3QZ3Yt4R7SMegUnMk=
Subject key identifier:   78:A1:72:B9:CE:4D:32:6D:96:5C:D9:DB:42:F8:B1:F5:C2:DA:BD:BA
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0197406742B2F3AD1FE771B43B129055F25F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eKFyuc5NMm2WXNnbQvix9cLavbo.roa
Signing time:             Thu 05 Jun 2025 14:03:18 +0000
ROA not before:           Thu 05 Jun 2025 14:03:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212669
IP address blocks:        151.240.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 04:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:40:67:42:b2:f3:ad:1f:e7:71:b4:3b:12:90:55:f2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jun  5 14:03:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78a172b9ce4d326d965cd9db42f8b1f5c2dabdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:44:09:4b:bd:c5:f8:2e:e8:e3:7d:a1:82:
                    b1:a1:8f:91:53:1e:c6:d1:bf:cf:0b:2d:58:31:d4:
                    e4:7d:68:20:1e:fa:c4:ef:f0:0e:06:87:13:b8:19:
                    09:8b:ba:c2:bf:f0:26:c7:4e:f3:8f:b9:9f:ca:ce:
                    9d:1f:75:1f:ff:26:fe:7c:b9:39:d7:2b:7c:f3:f2:
                    9c:8d:03:5f:71:29:40:fe:37:05:57:90:94:59:2a:
                    24:e8:c7:4b:af:b1:1e:af:06:0c:80:4a:2b:81:06:
                    fd:54:da:87:45:fd:68:54:43:dd:bc:75:51:00:73:
                    60:9d:a6:55:8e:f6:d8:c9:9d:ec:29:3b:3a:85:87:
                    c8:2d:bf:8a:c6:42:63:8a:54:b4:34:e4:b7:25:ad:
                    a8:70:42:b5:de:fc:ab:a9:99:c7:51:2d:32:9c:2c:
                    90:85:cc:b1:59:48:88:d9:b4:3b:45:f7:7e:0b:96:
                    bc:9d:21:c8:2b:e8:af:d6:4f:4b:93:f7:79:57:33:
                    6c:28:65:4c:f6:10:12:b2:3f:76:c5:9d:2f:c5:53:
                    7b:04:db:4c:b9:da:12:7f:c7:8c:21:03:92:34:e8:
                    2c:ce:0c:13:b7:b3:77:ff:65:6e:dc:60:b2:99:ce:
                    56:3a:f6:dc:17:93:e6:07:7c:f8:d4:a2:da:9b:fc:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:72:B9:CE:4D:32:6D:96:5C:D9:DB:42:F8:B1:F5:C2:DA:BD:BA
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eKFyuc5NMm2WXNnbQvix9cLavbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.240.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:17:47:de:3a:90:0c:85:82:26:f6:97:c5:43:a5:99:24:
         e1:a9:64:c2:da:0a:6a:c4:fa:e8:fd:d7:96:4f:bb:f4:95:df:
         65:25:44:f1:ba:c5:66:bc:f9:d5:bd:cc:19:3f:60:13:09:a0:
         71:c4:4b:7b:6f:93:6b:f4:ab:37:d6:14:7a:f1:f8:19:3a:b9:
         43:e5:24:65:c2:1c:fb:66:d5:a9:f2:85:46:6b:46:3a:03:25:
         ec:9f:f7:36:9c:d8:83:a9:ca:1e:42:28:1e:20:74:29:e6:b1:
         60:8d:8f:37:88:b3:dc:51:80:88:3e:2b:e2:4f:21:c4:3e:b6:
         1f:9d:93:0f:1d:68:b7:f6:07:8d:73:6a:b9:91:cd:de:66:82:
         69:43:4f:81:56:bf:e0:11:ef:33:ed:20:8f:b1:1b:52:01:ec:
         cf:3c:37:9f:46:d4:60:25:c1:3f:c6:00:af:f3:03:27:ec:ca:
         25:57:22:31:2d:4c:9b:ed:c6:4d:a0:71:15:a0:8a:de:f1:dd:
         7f:eb:c5:e8:a7:fb:ab:d5:e3:b4:b4:fd:39:8a:35:58:ec:1c:
         91:e5:9d:5c:b7:dc:a1:bd:e7:a5:6b:38:a9:11:59:0e:77:f9:
         d2:1e:74:a4:af:b1:fa:0c:93:c7:50:fe:32:c3:a2:21:a4:ee:
         87:3b:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:21 2025 by rpki-client