Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa
File:                     b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa (raw, json)
Hash identifier:          Zg9yc2HTMK2oGNUAOZjjO8OYsdq70UTjZXgAaDIzow4=
Subject key identifier:   6F:9C:70:55:3C:7B:11:31:CF:21:34:66:87:EE:0B:19:0D:DD:C0:D6
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018CC26D587D8E721A87B93C21DCDF806003
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa
Signing time:             Mon 01 Jan 2024 00:29:55 +0000
ROA not before:           Mon 01 Jan 2024 00:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212913
IP address blocks:        80.76.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:58:7d:8e:72:1a:87:b9:3c:21:dc:df:80:60:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jan  1 00:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6f9c70553c7b1131cf21346687ee0b190dddc0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:e4:02:ee:2d:8f:b0:58:4f:9f:8f:41:77:
                    6f:1a:dc:87:89:9a:3a:4a:d9:15:04:6e:b8:6e:20:
                    ce:7a:ee:1a:f4:53:d3:2d:3b:63:6e:6d:29:1c:a8:
                    db:b6:40:71:59:e7:3c:da:65:a1:68:26:55:00:bc:
                    d1:88:c2:05:78:66:c4:97:a0:cc:2d:f2:2c:a5:85:
                    f4:f7:5a:22:39:61:0b:88:84:bd:3b:e1:32:2d:ed:
                    69:0b:db:07:fd:0d:bc:a4:57:e6:dc:bf:c4:25:cd:
                    cc:d4:55:c4:31:37:39:83:b9:ce:8b:22:9c:ab:17:
                    b6:f6:56:ed:b2:41:8d:94:8e:d3:3b:c7:9d:67:85:
                    ce:c2:17:9a:e4:fd:3d:4b:9b:65:3f:a2:f3:3a:bb:
                    94:8c:84:8d:cd:74:5d:03:19:34:7c:e5:de:0a:c8:
                    b7:b4:90:78:cc:a6:68:49:9d:97:4a:b7:e0:15:1b:
                    8b:d2:04:e9:59:a2:9d:55:56:77:a8:1d:63:65:a0:
                    47:b6:5f:2e:8a:56:3b:99:7e:83:d3:ac:3c:f9:6b:
                    82:f1:a4:af:42:78:0f:48:30:0d:fb:aa:04:67:4f:
                    cd:e1:c0:14:20:0b:29:0a:09:43:cd:77:34:05:a9:
                    33:ab:e2:e9:92:28:4f:f9:29:33:d8:91:bc:5d:16:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9C:70:55:3C:7B:11:31:CF:21:34:66:87:EE:0B:19:0D:DD:C0:D6
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:c3:0d:35:04:a7:d6:92:c5:2b:28:f1:fc:c4:73:cf:1f:
         0b:0b:ad:7f:9f:59:ee:53:df:7e:06:c9:c7:41:8a:b5:03:75:
         bb:44:82:58:45:28:70:64:01:b5:36:e8:be:62:f6:6b:fd:1b:
         b6:63:1b:99:ca:96:b7:93:92:17:c6:30:26:44:fe:32:54:cb:
         32:4d:1d:25:c6:b4:18:bc:fa:de:1d:ec:fe:d1:0a:ae:18:6b:
         3d:8c:38:31:26:da:03:46:b5:84:48:15:cf:e5:5f:1b:61:0d:
         e2:b7:05:f7:bc:0f:41:9d:75:16:a5:cd:d6:47:32:c9:d8:1b:
         db:92:2d:3c:de:3b:e4:a5:2e:86:00:da:70:66:22:82:da:d4:
         98:f0:12:7a:40:55:8b:8c:43:10:a1:76:2e:21:1b:5c:b5:2c:
         47:8e:6a:8a:ac:3c:bc:a8:96:7b:0a:27:fe:49:e4:3f:21:17:
         de:0d:4b:07:b0:0c:7f:33:04:c2:d1:14:bd:e9:b5:00:a0:7c:
         b1:15:88:f7:f3:35:4d:92:a6:b0:0a:06:cd:2f:1d:2a:af:cc:
         12:ba:b4:cf:a7:10:9a:0e:af:3d:f1:bd:c3:a2:53:6e:82:d2:
         6b:b3:77:3d:25:b2:7f:2e:60:95:f9:76:16:50:f4:c1:a7:49:
         6b:1a:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:52:19 2024 by rpki-client on console-fra.rpki-client.org