Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/vexXV1wR4zNqnAbXry46LPBda94.roa
File:                     vexXV1wR4zNqnAbXry46LPBda94.roa (raw, json)
Hash identifier:          YCwFzA9CcKB54ur/gGz+48sFo09E0XDtHHazUYBQeeE=
Subject key identifier:   BD:EC:57:57:5C:11:E3:33:6A:9C:06:D7:AF:2E:3A:2C:F0:5D:6B:DE
Certificate issuer:       /CN=619b9872dcc492fc9707f9ec7c16112f45b8535f
Certificate serial:       018CC802A6AB086A557A1EBD0D56FA76F106
Authority key identifier: 61:9B:98:72:DC:C4:92:FC:97:07:F9:EC:7C:16:11:2F:45:B8:53:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/vexXV1wR4zNqnAbXry46LPBda94.roa
Signing time:             Tue 02 Jan 2024 02:31:06 +0000
ROA not before:           Tue 02 Jan 2024 02:31:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199508
IP address blocks:        62.220.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:02:a6:ab:08:6a:55:7a:1e:bd:0d:56:fa:76:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619b9872dcc492fc9707f9ec7c16112f45b8535f
        Validity
            Not Before: Jan  2 02:31:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bdec57575c11e3336a9c06d7af2e3a2cf05d6bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:7f:89:ad:6a:04:00:36:58:58:fc:33:08:
                    7f:72:00:e4:a0:2e:3a:b7:7a:01:c1:50:67:05:fb:
                    a5:7f:cd:f6:f9:25:0b:60:d3:25:2b:bf:a5:5d:21:
                    31:73:7b:3e:88:c6:ca:f9:da:2d:b5:c7:a1:cf:27:
                    39:0b:6b:ea:09:1e:24:86:ca:91:52:51:1a:20:ca:
                    17:cf:1e:f1:54:ef:fc:0d:1f:57:41:7b:05:19:95:
                    60:a2:63:bd:45:6f:72:53:81:31:28:f1:8a:40:d3:
                    47:c1:a8:9a:32:17:3a:e1:70:64:71:7b:12:91:de:
                    5c:d8:44:30:11:0e:69:10:03:e7:e0:76:9f:9e:e5:
                    cd:ae:74:c8:ab:99:80:38:bf:47:f0:6b:fa:cd:57:
                    d5:96:ab:e4:f8:42:93:0d:b6:97:c7:75:cf:38:e7:
                    93:47:1c:49:a9:25:30:ef:ed:ee:6e:2f:50:9b:39:
                    79:05:f2:cb:df:ba:e4:f4:ab:da:24:a4:3e:09:71:
                    53:2e:6a:5b:a8:22:98:12:fd:fb:ad:b5:91:b4:ff:
                    60:36:78:8f:a7:bc:a6:df:ea:88:4f:cf:fb:51:51:
                    2a:4b:21:6e:48:10:2c:01:b4:17:57:c9:d6:d7:80:
                    8c:e4:b4:b3:d1:19:01:17:db:b3:b7:7c:8f:da:16:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EC:57:57:5C:11:E3:33:6A:9C:06:D7:AF:2E:3A:2C:F0:5D:6B:DE
            X509v3 Authority Key Identifier:
                keyid:61:9B:98:72:DC:C4:92:FC:97:07:F9:EC:7C:16:11:2F:45:B8:53:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/vexXV1wR4zNqnAbXry46LPBda94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.220.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:08:e0:28:18:69:8d:09:b8:cf:d8:63:98:4b:e8:2b:6a:
         f7:2b:76:eb:72:46:2d:0b:0c:c1:75:3c:87:7c:8d:56:68:f5:
         d5:9e:ac:e2:8f:21:a0:e6:99:64:4a:87:9b:0d:27:87:31:1d:
         1c:30:f4:d5:c4:ed:0b:a2:1e:cc:68:fc:1a:a0:bb:b0:ff:45:
         a2:48:2d:a8:f1:e2:bd:9c:98:4e:be:27:7c:98:aa:05:7b:17:
         4d:39:98:a9:cd:5a:c0:93:80:25:fb:de:10:2a:e5:6a:1a:41:
         6e:64:9e:09:f2:35:55:e8:a7:bd:44:9a:f4:39:b8:74:92:52:
         fa:77:c9:1f:70:4c:e8:49:f6:7d:27:e7:33:60:b1:7f:8d:b5:
         2f:c5:ba:99:65:25:97:f8:4c:cd:3e:12:c2:c2:55:aa:c3:d6:
         eb:56:24:09:d7:d4:8a:a9:2e:22:83:86:26:b7:44:4a:27:c1:
         19:64:8f:f7:01:63:ca:64:4f:23:65:3a:7c:75:fc:5a:73:19:
         b4:e7:64:a0:9f:47:ae:99:1d:b3:d5:b2:98:38:1a:a3:98:0a:
         e1:21:c7:09:3b:df:5a:e3:9a:97:5b:31:15:82:a9:ce:6a:8a:
         1c:d1:e8:c6:c8:57:a5:47:15:44:fa:fa:cd:d6:a2:87:c9:29:
         6b:fb:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:19 2024 by rpki-client on console-ams.rpki-client.org