Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa
File:                     RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa (raw, json)
Hash identifier:          I1lG/wsgJHXIcv+9byLqARn0vAd7bcyO21gP0xVb230=
Subject key identifier:   45:93:FE:FB:91:B6:74:4B:87:11:9E:91:B0:E9:DB:49:DF:5C:05:39
Certificate issuer:       /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial:       018CC9BC8DE360FF9D982D5FF72E10124A40
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa
Signing time:             Tue 02 Jan 2024 10:33:46 +0000
ROA not before:           Tue 02 Jan 2024 10:33:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34687
IP address blocks:        89.248.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:8d:e3:60:ff:9d:98:2d:5f:f7:2e:10:12:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
        Validity
            Not Before: Jan  2 10:33:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4593fefb91b6744b87119e91b0e9db49df5c0539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:68:c5:b1:32:36:64:67:1d:3c:78:47:92:
                    15:f6:14:19:62:bf:43:f0:2f:2f:e8:e1:08:5a:1e:
                    86:bc:6c:d6:fc:b6:14:56:23:e4:15:bf:e6:61:23:
                    d9:c9:7a:4f:44:98:ce:5a:a2:b4:67:bb:16:ec:62:
                    ab:e5:42:22:2c:1c:ce:86:5e:02:cc:79:3d:9d:cf:
                    3d:2e:9f:cf:39:47:b5:3e:cb:c7:ff:b6:80:6d:3b:
                    57:60:f4:2e:b6:35:e8:3d:05:fb:60:b1:0a:d7:27:
                    5a:ec:15:a9:82:d5:8f:46:06:42:2b:fa:99:fb:d5:
                    dd:42:72:b2:b1:29:3b:d0:63:a0:53:03:54:15:17:
                    c2:5e:f2:63:62:11:42:56:c0:c8:9a:70:e7:33:a2:
                    15:70:a9:d9:14:c7:49:27:65:0b:c6:eb:27:10:30:
                    3f:10:6c:30:d5:74:31:ef:8d:ce:86:b8:b2:4b:01:
                    1f:a2:f4:5b:93:36:1e:49:80:97:21:07:2a:4c:55:
                    60:60:01:8b:91:4e:4d:01:f6:20:f9:61:77:dc:f6:
                    ed:af:ec:85:1e:c5:26:bd:24:5c:d8:5a:13:37:95:
                    06:50:e0:ab:d8:92:0f:11:5c:37:d4:c1:aa:74:86:
                    16:88:ab:b4:1b:9b:a3:93:7f:ba:bf:39:0e:54:28:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:93:FE:FB:91:B6:74:4B:87:11:9E:91:B0:E9:DB:49:DF:5C:05:39
            X509v3 Authority Key Identifier:
                keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.248.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:af:64:1c:a6:75:b7:b9:9e:cd:23:c7:dd:51:03:60:a6:19:
         84:34:bf:93:42:c2:5c:6f:de:45:fb:61:2e:d8:58:88:99:e1:
         92:56:46:d0:8f:46:de:15:55:31:90:f8:d2:fb:c4:5f:3c:67:
         81:fc:e4:f4:f3:b2:1b:13:b0:88:09:a2:d4:0f:18:67:13:c9:
         05:a8:c4:07:8b:15:a7:23:8e:c8:7d:73:93:78:f8:08:3d:d0:
         94:eb:0f:38:8e:ef:c5:f7:8a:61:fd:a1:dd:c2:bc:fb:bb:4f:
         0c:f5:47:d9:ae:3f:b9:dc:ae:de:92:60:30:e7:3f:f2:a3:60:
         a4:77:ae:63:d9:73:c1:4b:65:58:b1:b8:7a:e3:a0:d7:cc:03:
         c3:20:f5:d6:c6:bd:1a:70:9f:c5:62:84:2d:07:ca:aa:c8:60:
         fa:da:5d:dc:a5:5f:9e:04:dc:41:c7:eb:7f:24:34:8b:37:21:
         40:ac:e8:58:12:2e:4a:e8:21:9e:24:bb:93:7a:6f:74:d5:5b:
         97:2b:f1:a7:03:7e:ee:70:03:fc:8f:2d:83:bf:af:02:f1:15:
         48:48:b8:87:82:a2:68:d2:70:30:b3:72:36:0f:d1:c0:73:5f:
         5a:a1:97:39:1e:d9:df:18:94:b3:65:a8:87:92:cc:d7:10:e2:
         65:a1:c1:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvI3jYP+dmC1f9y4QEkpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj
N2M2ZDUwHhcNMjQwMTAyMTAzMzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkzZmVmYjkxYjY3NDRiODcxMTllOTFiMGU5ZGI0OWRmNWMwNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFZoxbEyNmRnHTx4R5IV9hQZYr9D
8C8v6OEIWh6GvGzW/LYUViPkFb/mYSPZyXpPRJjOWqK0Z7sW7GKr5UIiLBzOhl4C
zHk9nc89Lp/POUe1PsvH/7aAbTtXYPQutjXoPQX7YLEK1yda7BWpgtWPRgZCK/qZ
+9XdQnKysSk70GOgUwNUFRfCXvJjYhFCVsDImnDnM6IVcKnZFMdJJ2ULxusnEDA/
EGww1XQx743OhriySwEfovRbkzYeSYCXIQcqTFVgYAGLkU5NAfYg+WF33Pbtr+yF
HsUmvSRc2FoTN5UGUOCr2JIPEVw31MGqdIYWiKu0G5ujk3+6vzkOVCj89QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWT/vuRtnRLhxGekbDp20nfXAU5MB8GA1UdIwQY
MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt
Njk5OWE5OWRjZjFlLzEvUlpQLS01RzJkRXVIRVo2UnNPbmJTZDljQlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl
LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWfiwMA0G
CSqGSIb3DQEBCwUAA4IBAQBFr2QcpnW3uZ7NI8fdUQNgphmENL+TQsJcb95F+2Eu
2FiImeGSVkbQj0beFVUxkPjS+8RfPGeB/OT087IbE7CICaLUDxhnE8kFqMQHixWn
I47IfXOTePgIPdCU6w84ju/F94ph/aHdwrz7u08M9UfZrj+53K7ekmAw5z/yo2Ck
d65j2XPBS2VYsbh646DXzAPDIPXWxr0acJ/FYoQtB8qqyGD62l3cpV+eBNxBx+t/
JDSLNyFArOhYEi5K6CGeJLuTem901VuXK/GnA37ucAP8jy2Dv68C8RVISLiHgqJo
0nAws3I2D9HAc19aoZc5HtnfGJSzZaiHkszXEOJlocGd
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:12 2024 by rpki-client on console-ams.rpki-client.org