Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/sCvusdcpE4Nn5mK8ee5Jqc0Ki5o.roa
File:                     sCvusdcpE4Nn5mK8ee5Jqc0Ki5o.roa (raw, json)
Hash identifier:          XqTyK80dlLiPEdJMw0jJ0DvNCwSDd0vaLqsmxtxgZo4=
Subject key identifier:   B0:2B:EE:B1:D7:29:13:83:67:E6:62:BC:79:EE:49:A9:CD:0A:8B:9A
Certificate issuer:       /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial:       018CC6B9136CBC1A5B6A382F5316B03257E5
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/sCvusdcpE4Nn5mK8ee5Jqc0Ki5o.roa
Signing time:             Mon 01 Jan 2024 20:31:07 +0000
ROA not before:           Mon 01 Jan 2024 20:31:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     32934
IP address blocks:        185.89.218.0/24 maxlen: 24
                          185.89.218.0/23 maxlen: 24
                          185.89.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jul 2024 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:13:6c:bc:1a:5b:6a:38:2f:53:16:b0:32:57:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
        Validity
            Not Before: Jan  1 20:31:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b02beeb1d729138367e662bc79ee49a9cd0a8b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8a:fe:4d:62:75:5c:56:b0:d8:31:c6:74:49:
                    06:cc:d9:35:29:70:d8:c6:27:f7:8c:e3:7d:91:1a:
                    b5:af:a5:06:31:c7:35:62:8a:73:85:e4:38:85:9a:
                    5a:80:3c:5d:54:65:54:e0:d1:5b:68:7f:d8:02:a4:
                    d0:7d:28:12:ce:b7:c5:87:d6:fc:a6:dc:cd:d3:19:
                    b5:ab:59:49:d1:44:ac:9c:bd:fb:0d:d5:ac:c3:b7:
                    6d:dd:8e:7c:16:97:0e:4f:5c:16:f4:79:ab:c3:59:
                    a2:48:ca:f6:4c:19:3f:96:b1:0e:02:9a:47:e8:6e:
                    01:97:fd:a1:22:73:d8:f0:e1:1b:20:03:cf:9b:a3:
                    81:d2:a1:2f:56:f2:bc:67:d4:b5:3d:b2:9a:27:cc:
                    91:93:54:5b:66:1a:fc:09:8b:46:13:55:48:23:37:
                    1d:63:79:db:ec:80:14:de:9e:74:88:52:54:36:5b:
                    90:fc:6b:87:de:dd:05:72:42:ea:50:f9:19:3c:3d:
                    87:16:3c:28:40:87:62:9f:0f:2a:87:5f:72:d6:1c:
                    18:2c:07:4e:de:fe:3b:47:e1:48:28:1e:15:a3:a0:
                    bd:79:a5:65:37:00:cd:7e:a1:de:60:46:44:09:42:
                    f8:3c:a9:ab:4d:23:f7:c4:e9:4b:3f:f3:ae:62:2e:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:EE:B1:D7:29:13:83:67:E6:62:BC:79:EE:49:A9:CD:0A:8B:9A
            X509v3 Authority Key Identifier:
                keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/sCvusdcpE4Nn5mK8ee5Jqc0Ki5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:c9:0a:21:fe:a2:4e:05:e0:e5:b1:57:a4:77:a9:de:26:
         d4:13:c6:d8:3e:35:eb:d8:dc:04:c2:51:0a:1e:17:a7:60:5d:
         98:12:9f:fd:5b:3c:22:29:c6:90:81:1c:b4:a0:ca:0c:86:f2:
         62:92:57:4b:47:f5:b5:85:f5:8f:39:f7:68:0c:53:8b:63:6d:
         26:ec:27:60:b9:cd:4c:2d:05:53:8e:9a:26:d8:5b:a0:c1:7f:
         1e:9d:77:d2:21:57:ae:10:aa:0d:fc:39:93:65:a0:6d:7c:39:
         42:ca:3a:46:98:97:01:6f:ae:29:08:8d:1c:38:3d:b4:0e:76:
         27:64:b6:84:4d:49:86:39:7d:b7:e0:80:02:0a:91:11:90:f0:
         c1:e7:ac:ae:69:fd:13:81:ff:2b:1d:71:8d:53:21:a5:07:6d:
         67:8f:15:db:9d:4f:f1:22:56:aa:2c:72:a7:b4:47:ba:0f:5d:
         71:f3:24:a5:35:63:72:9e:53:91:cc:cf:f4:83:0c:3b:18:8f:
         09:fa:90:bd:cd:c6:c7:68:31:93:6a:48:e1:ae:b4:a0:96:13:
         96:aa:4e:c0:ba:00:aa:cc:7d:6e:e3:f9:cb:80:34:ee:df:68:
         06:fd:29:a0:5c:65:c0:0f:78:9f:ca:0a:04:7a:9c:cc:2b:58:
         41:11:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:04:45 2024 by rpki-client on console-ams.rpki-client.org