Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/8fhC5tkIAIg1YlAM_0mY3z4c6rc.roa
File:                     8fhC5tkIAIg1YlAM_0mY3z4c6rc.roa (raw, json)
Hash identifier:          zx1cDU/JXMXQA/a9UjAV2CsrXChrZOJD/EGV8bweIIo=
Subject key identifier:   F1:F8:42:E6:D9:08:00:88:35:62:50:0C:FF:49:98:DF:3E:1C:EA:B7
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       018CC492504A5ACC566202D2E7C3FCD63CF7
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/8fhC5tkIAIg1YlAM_0mY3z4c6rc.roa
Signing time:             Mon 01 Jan 2024 10:29:32 +0000
ROA not before:           Mon 01 Jan 2024 10:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61071
IP address blocks:        95.158.144.0/24 maxlen: 24
                          185.18.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:50:4a:5a:cc:56:62:02:d2:e7:c3:fc:d6:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 10:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1f842e6d90800883562500cff4998df3e1ceab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:3b:54:82:1c:2c:41:67:f4:17:07:e4:25:
                    de:b1:34:00:dd:8f:05:ca:6f:b3:02:e0:ee:a7:5e:
                    b9:3e:d0:32:8e:e8:c6:b7:07:32:61:7a:f8:b0:05:
                    d7:0c:89:dc:fe:f1:c6:fd:79:f7:23:52:a9:69:f1:
                    42:2e:34:82:57:1b:33:d6:24:2a:a3:66:98:b7:7c:
                    78:66:72:6e:c1:76:68:ab:2e:54:31:77:be:b7:73:
                    37:73:23:51:6e:93:18:9d:a6:8d:0e:77:44:6f:f0:
                    4c:de:db:6e:3b:9d:8e:30:eb:00:9b:f3:56:b1:b8:
                    b6:b0:1d:2c:bc:50:9d:c6:16:6d:be:0d:66:c7:08:
                    05:20:f6:fd:f9:39:30:44:58:a8:fb:64:48:e4:b6:
                    10:85:08:aa:65:42:12:02:9d:58:19:77:b3:3d:5f:
                    9c:d9:ff:b5:3c:db:63:2a:65:3c:7d:a3:f7:ad:0c:
                    61:fd:1c:54:56:39:ac:a2:1d:c7:8f:c4:18:4f:26:
                    c5:13:d3:73:bb:e7:4c:36:7c:e8:d7:ed:45:51:25:
                    09:e1:8b:ce:ee:85:7f:55:5b:3b:97:f9:97:2e:90:
                    d9:52:7b:f1:c3:35:62:1e:93:fa:ef:29:6b:92:07:
                    eb:1b:dd:fd:f4:9e:07:a0:e1:9f:96:40:e1:1b:45:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:42:E6:D9:08:00:88:35:62:50:0C:FF:49:98:DF:3E:1C:EA:B7
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/8fhC5tkIAIg1YlAM_0mY3z4c6rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.144.0/24
                  185.18.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:49:42:7c:e5:9c:ef:66:99:c5:da:6b:e5:85:24:b8:0c:5d:
         60:f0:3a:a6:28:8d:d1:01:1b:d1:bc:da:e9:df:bf:e1:01:35:
         f6:87:c8:07:bb:12:c6:96:1f:8d:de:8a:8d:d3:32:0c:86:23:
         9d:e1:62:b2:e0:26:49:17:90:4c:18:91:7d:8a:ae:32:c7:6a:
         2a:eb:97:20:56:a8:8e:d4:c8:3a:3d:8a:7a:99:64:ed:65:8f:
         8b:d0:96:92:99:11:d6:62:0b:98:95:5a:ae:45:25:37:b0:67:
         c1:6c:52:2c:37:68:1e:36:9a:0f:d8:37:e6:fa:f7:82:58:b6:
         62:72:f2:da:ee:82:29:b4:f2:02:c1:c8:50:37:8c:aa:e5:88:
         7e:e8:2f:a9:ef:6f:47:da:e7:80:96:42:02:af:cc:c4:6f:8c:
         2f:24:ba:76:69:94:d5:f3:d6:e3:93:26:b1:f9:2b:e6:b6:d5:
         48:eb:de:c8:40:be:59:07:fe:68:59:de:7e:2d:62:c0:44:da:
         63:b3:91:ad:a8:0b:38:4d:66:03:eb:ba:e7:8a:5f:eb:44:64:
         9e:4a:24:d4:7f:dd:f4:ca:5a:51:6b:c7:2b:17:09:ab:cf:c7:
         7b:ed:9d:9c:3f:8f:5a:2b:6e:a3:8f:10:2e:8c:6a:b9:62:1b:
         74:fd:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:12:56 2024 by rpki-client on console-ams.rpki-client.org