Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/zcn5H5b4mt5vCsLVE4tEEgOdkDw.roa
File:                     zcn5H5b4mt5vCsLVE4tEEgOdkDw.roa (raw, json)
Hash identifier:          Z8R7cGmKx8YBM+S6O6qi7RKKCiSr+umSZ9rN/Zs78SM=
Subject key identifier:   CD:C9:F9:1F:96:F8:9A:DE:6F:0A:C2:D5:13:8B:44:12:03:9D:90:3C
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       018F1FE75AA59EDA961C0E13B2EE8808DB34
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/zcn5H5b4mt5vCsLVE4tEEgOdkDw.roa
Signing time:             Sat 27 Apr 2024 14:13:26 +0000
ROA not before:           Sat 27 Apr 2024 14:13:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208456
IP address blocks:        45.95.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:e7:5a:a5:9e:da:96:1c:0e:13:b2:ee:88:08:db:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Apr 27 14:13:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cdc9f91f96f89ade6f0ac2d5138b4412039d903c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:1d:20:2b:f3:d3:e3:88:68:c7:28:84:70:
                    eb:54:74:e8:60:86:31:b2:dc:a3:e9:7a:c9:66:e3:
                    21:57:65:cc:f9:f7:e2:7e:7c:05:22:e8:37:c6:9a:
                    57:a2:86:e7:1c:26:b2:95:65:a2:c9:dd:ae:fa:bd:
                    25:30:09:ed:09:16:3c:fd:5b:0d:35:f8:0c:e8:b7:
                    2a:f1:40:c6:b2:b5:2e:bb:f4:95:6d:c4:35:af:d7:
                    53:7e:84:8d:8a:f6:28:d4:ac:60:83:cf:be:40:38:
                    de:3a:4f:cc:ed:41:84:8e:49:18:ee:f4:37:32:fe:
                    f1:82:d0:63:d6:3d:44:61:05:06:a1:f2:61:9e:6c:
                    23:10:f0:46:8c:02:ae:05:6d:64:92:d1:39:ab:1b:
                    25:f5:cc:36:90:24:5f:5b:5c:2e:c7:3c:59:2d:7f:
                    ac:84:ae:28:a2:20:00:f6:f6:e4:19:c0:b7:8d:97:
                    e2:e5:68:f3:88:95:5b:d8:54:56:3d:bb:ae:bd:a3:
                    48:7c:29:e9:56:ee:29:a7:8e:17:85:ed:4d:ea:4d:
                    44:ef:44:0d:68:16:53:66:9a:e8:e3:9c:c5:d4:71:
                    07:9f:8b:e8:4b:ea:f8:b9:c6:f8:85:ed:60:40:6b:
                    ac:0c:37:7c:d8:86:95:fc:b3:49:3a:31:55:19:a9:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:F9:1F:96:F8:9A:DE:6F:0A:C2:D5:13:8B:44:12:03:9D:90:3C
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/zcn5H5b4mt5vCsLVE4tEEgOdkDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:3e:73:cf:cb:69:87:71:71:52:c1:9f:06:43:49:cb:ff:f2:
         e1:05:ea:0f:3b:72:bd:9a:d8:c0:39:fa:2f:35:b5:21:7f:4f:
         f0:a8:e1:6a:41:6c:ab:7c:c5:e3:a2:e5:e7:10:75:ed:98:18:
         f7:d3:ba:c0:ff:f4:e9:1d:e2:38:27:4a:b6:37:d0:d9:a5:30:
         e5:1d:c4:d9:30:23:9c:60:68:e7:32:d6:e3:a2:7f:b7:d9:e1:
         a6:7c:b1:ea:52:06:69:13:e8:ae:ee:09:1d:94:a5:1c:3e:bd:
         bf:c6:53:55:2d:01:6c:01:85:17:1b:10:ef:fc:cd:0e:31:90:
         30:57:b6:90:cf:a5:90:70:1a:cb:53:c7:8c:08:67:78:fc:c0:
         02:02:d0:05:0d:1f:3d:63:07:ed:2c:3e:63:83:12:78:9b:05:
         d7:3f:32:56:dc:38:25:43:dc:46:47:b7:ed:c1:ef:d0:8b:38:
         40:35:6b:be:d4:d3:19:3a:39:61:53:23:0e:8d:94:91:87:75:
         9d:75:b5:26:6e:1a:a6:3c:64:d7:c9:b9:f9:17:73:d7:d6:cf:
         7d:45:31:33:56:09:fd:b3:a2:d2:32:6a:0f:b8:28:29:f0:43:
         19:a7:98:23:7c:1f:e3:da:b8:bd:cf:0a:92:71:5b:55:9c:25:
         6a:b2:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:07:02 2024 by rpki-client on console-fra.rpki-client.org