Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa
File:                     ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (raw, json)
Hash identifier:          uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=
Subject key identifier:   C9:D7:34:99:8C:11:D4:3C:EC:F8:6D:1E:CC:10:F7:66:33:AF:A2:17
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       019423D7B69BEAB90A2DE6B347151BE9A970
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa
Signing time:             Wed 01 Jan 2025 21:48:46 +0000
ROA not before:           Wed 01 Jan 2025 21:48:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201584
IP address blocks:        91.108.188.0/24 maxlen: 24
                          185.199.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jan 2025 02:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:b6:9b:ea:b9:0a:2d:e6:b3:47:15:1b:e9:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Jan  1 21:48:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9d734998c11d43cecf86d1ecc10f76633afa217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:df:10:18:0b:1b:88:3c:63:35:a9:86:d2:
                    cb:be:d1:39:85:0a:37:dd:1e:57:0e:e8:1b:9a:40:
                    e5:d2:50:47:08:d5:e7:bd:f1:fa:89:2f:a6:7f:6c:
                    d6:6f:63:36:ac:31:de:9f:75:64:42:e1:37:0d:9c:
                    e0:f0:84:1c:f9:93:de:41:79:6e:65:1b:4b:6d:b4:
                    22:3d:b0:25:a7:19:5c:15:bd:13:30:b1:bd:c5:ad:
                    b7:ac:70:c3:ec:e5:b9:ed:8d:a1:93:31:45:4b:fd:
                    79:8f:2c:8b:ef:4b:ef:f0:58:9c:ac:c8:36:ea:a2:
                    78:ce:ff:72:f9:2e:c9:70:c2:94:17:23:e6:43:39:
                    a6:d6:c4:93:76:ff:f5:16:e2:6c:8a:ae:47:e9:9e:
                    09:3e:52:db:1f:08:86:30:aa:0e:65:2a:32:69:62:
                    83:78:6c:d5:5e:e8:1a:54:53:3a:1d:19:c2:61:6b:
                    58:87:22:f8:04:9c:36:a3:6f:b3:e3:d2:22:ad:11:
                    92:30:72:96:73:77:b4:f4:cc:82:8c:8a:ee:e2:72:
                    69:cd:54:04:3d:ef:41:e1:ad:cf:b1:3b:91:5e:51:
                    23:13:28:e2:cc:7d:59:0b:53:30:ce:5b:98:ee:35:
                    57:50:3d:04:1c:f6:87:39:ad:f1:b2:5d:0f:95:f8:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D7:34:99:8C:11:D4:3C:EC:F8:6D:1E:CC:10:F7:66:33:AF:A2:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.188.0/24
                  185.199.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:fc:0e:bf:a5:27:1e:10:48:ed:ae:15:3a:f5:7e:0c:61:
         94:65:4a:3a:5b:f0:56:9c:77:c0:fb:b6:c0:a3:69:83:3b:0a:
         d6:a5:b2:41:79:39:22:02:a3:bd:1e:bf:b3:3d:f4:8e:87:a3:
         b1:e9:23:00:ce:e8:b0:7b:0d:10:0a:f9:24:24:c0:d3:8c:b2:
         ef:62:e3:9b:c8:8a:af:d7:67:16:1a:b1:ee:e1:97:ce:c5:7a:
         a8:76:81:79:9e:d9:50:7d:96:69:11:0a:90:f7:a6:3e:83:9a:
         ee:b0:aa:1a:cf:7b:26:12:3f:de:14:c3:02:28:98:bf:c8:4e:
         6a:55:d6:dd:55:19:0a:df:7d:7d:85:a8:d1:85:3a:19:37:10:
         01:9b:61:03:a4:97:66:2c:e6:fa:b0:40:b1:1d:ca:35:10:db:
         cf:85:ae:f0:33:b1:a7:3b:1c:f3:54:67:9d:51:ae:e9:f9:56:
         ee:2a:a3:10:4a:7e:d5:e3:ed:69:31:aa:8d:7f:99:8c:16:7f:
         54:73:7a:07:f5:57:2b:b4:f3:91:9c:34:d7:13:d9:fd:0f:1c:
         b9:3b:a4:12:71:cd:d3:c3:34:fc:ac:3a:f0:fc:a4:b4:92:99:
         27:ba:cf:4f:8b:99:b3:82:6d:01:1b:7b:c5:9e:1c:eb:35:f8:
         70:72:c2:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj17ab6rkKLeazRxUb6alwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw
NDJiYmYwHhcNMjUwMTAxMjE0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWQ3MzQ5OThjMTFkNDNjZWNmODZkMWVjYzEwZjc2NjMzYWZhMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj57fEBgLG4g8YzWphtLLvtE5hQo3
3R5XDugbmkDl0lBHCNXnvfH6iS+mf2zWb2M2rDHen3VkQuE3DZzg8IQc+ZPeQXlu
ZRtLbbQiPbAlpxlcFb0TMLG9xa23rHDD7OW57Y2hkzFFS/15jyyL70vv8FicrMg2
6qJ4zv9y+S7JcMKUFyPmQzmm1sSTdv/1FuJsiq5H6Z4JPlLbHwiGMKoOZSoyaWKD
eGzVXugaVFM6HRnCYWtYhyL4BJw2o2+z49IirRGSMHKWc3e09MyCjIru4nJpzVQE
Pe9B4a3PsTuRXlEjEyjizH1ZC1MwzluY7jVXUD0EHPaHOa3xsl0PlfiXwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMnXNJmMEdQ87PhtHswQ92Yzr6IXMB8GA1UdIwQY
MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt
MzRmY2M0MTg3MTQ0LzEveWRjMG1Zd1IxRHpzLUcwZXpCRDNaak92b2hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0
LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2y8AwQA
ucfRMA0GCSqGSIb3DQEBCwUAA4IBAQBE8/wOv6UnHhBI7a4VOvV+DGGUZUo6W/BW
nHfA+7bAo2mDOwrWpbJBeTkiAqO9Hr+zPfSOh6Ox6SMAzuiwew0QCvkkJMDTjLLv
YuObyIqv12cWGrHu4ZfOxXqodoF5ntlQfZZpEQqQ96Y+g5rusKoaz3smEj/eFMMC
KJi/yE5qVdbdVRkK3319hajRhToZNxABm2EDpJdmLOb6sECxHco1ENvPha7wM7Gn
OxzzVGedUa7p+VbuKqMQSn7V4+1pMaqNf5mMFn9Uc3oH9VcrtPORnDTXE9n9Dxy5
O6QScc3TwzT8rDrw/KS0kpknus9Pi5mzgm0BG3vFnhzrNfhwcsJg
-----END CERTIFICATE-----
Generated at Sat Jan 18 10:53:33 2025 by rpki-client on console-fra.rpki-client.org