Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsXLF19DGfi1db0r94y3vxncFm4.roa
File:                     wsXLF19DGfi1db0r94y3vxncFm4.roa (raw, json)
Hash identifier:          8WJvd1F6KvEA+ZRzE2Xrno3soz37rs0rPVRTDXiRHX0=
Subject key identifier:   C2:C5:CB:17:5F:43:19:F8:B5:75:BD:2B:F7:8C:B7:BF:19:DC:16:6E
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       018CC56DF8900DAE1BE9DA4EC52FEA442067
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsXLF19DGfi1db0r94y3vxncFm4.roa
Signing time:             Mon 01 Jan 2024 14:29:27 +0000
ROA not before:           Mon 01 Jan 2024 14:29:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205220
IP address blocks:        89.191.224.0/24 maxlen: 24
                          141.98.232.0/24 maxlen: 24
                          194.31.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Dec 2024 20:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6d:f8:90:0d:ae:1b:e9:da:4e:c5:2f:ea:44:20:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Jan  1 14:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2c5cb175f4319f8b575bd2bf78cb7bf19dc166e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:b1:fc:a9:98:4f:e2:12:3b:4d:f6:b4:99:
                    ed:25:f0:8d:69:47:d5:f3:2f:5d:c6:7c:dd:20:a7:
                    83:10:c2:90:44:eb:b7:d2:7c:3a:4a:73:16:8d:98:
                    4c:fa:9d:82:f0:10:16:03:16:6c:3f:70:bc:9b:ab:
                    bd:92:20:9b:74:b9:b9:40:71:4d:4b:88:46:3b:40:
                    44:61:94:d2:6c:bb:97:51:be:b5:03:d1:4b:02:7f:
                    56:4a:55:98:c7:b6:3b:ac:a8:16:bf:16:7e:f5:d6:
                    33:3e:e3:48:be:30:bb:8c:06:b5:84:50:bb:e9:65:
                    d3:76:3d:6a:9b:91:00:c8:bd:2a:8a:03:06:96:c8:
                    f5:3a:b9:31:80:16:0a:98:74:6e:37:7a:0f:bf:bd:
                    ea:35:8e:81:e1:7e:02:84:ce:9a:c1:46:ea:ef:fe:
                    1d:9f:ca:3f:19:f1:b6:13:2a:96:36:30:d3:17:ce:
                    52:1c:08:1a:00:ac:4c:95:f4:c2:e4:9f:7c:b9:59:
                    0d:80:16:0b:75:00:a3:31:78:c5:eb:a0:88:bf:2d:
                    ee:cf:0e:d7:b2:78:dc:e1:93:22:be:0c:a5:b8:04:
                    98:ea:01:b9:07:36:89:6b:2d:32:07:e4:a9:9b:d0:
                    88:fe:f8:d5:ef:10:b0:97:ef:32:5f:4c:a0:98:dd:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:CB:17:5F:43:19:F8:B5:75:BD:2B:F7:8C:B7:BF:19:DC:16:6E
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsXLF19DGfi1db0r94y3vxncFm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.191.224.0/24
                  141.98.232.0/24
                  194.31.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:06:be:42:1d:85:21:1b:40:8b:86:58:dc:9d:33:c8:14:5e:
         f2:99:9f:e7:1e:fd:fe:ed:f1:6f:b1:58:fc:a6:5d:84:e8:e7:
         e4:9d:f6:23:ed:e5:bd:a1:39:80:21:a0:ed:0f:f1:c4:fd:cb:
         a1:70:90:70:e8:b4:34:09:28:f6:b2:00:8d:b2:be:d5:55:31:
         f8:01:46:5e:a9:a0:4f:c8:5b:90:50:c9:b2:2f:fd:b5:dc:8b:
         eb:4d:70:ba:69:b0:50:41:bd:99:d7:95:a8:a8:d2:ad:5e:8a:
         ac:52:43:39:d7:06:e8:c9:3d:9d:14:0e:8e:c8:9e:f2:66:3f:
         b8:bd:b3:25:e6:52:d6:78:dc:1a:01:f4:f7:83:6c:e5:1b:b4:
         ce:e3:67:05:a6:50:88:b0:b1:ac:9b:46:d1:f1:45:1c:df:d1:
         77:ec:e2:b4:e6:7d:e8:5f:c8:18:0b:68:43:e4:31:ab:25:d6:
         8f:6e:37:31:e3:cc:57:62:d2:d2:4c:b7:6e:72:c3:0e:69:60:
         3d:87:79:d3:ff:f3:d2:99:1d:94:65:6a:81:68:bd:7e:a7:b0:
         5d:6f:82:72:b6:35:58:be:8a:b6:c0:d2:47:c1:c6:3b:c5:d3:
         15:65:1e:3b:25:c5:e3:ad:7b:0e:f0:e2:c2:6f:42:50:b1:e3:
         f8:72:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 05:40:38 2024 by rpki-client on console-ams.rpki-client.org