Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa
File:                     DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa (raw, json)
Hash identifier:          euXi3UViF66MqzyupePQsifTfFOqVL8uuwagK96jRAE=
Subject key identifier:   0D:14:15:CD:68:88:BE:68:86:12:EF:7C:2A:A6:BA:37:80:9A:21:BF
Certificate issuer:       /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial:       01933398F416C99C8C1966AB61FD10198A6A
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa
Signing time:             Sat 16 Nov 2024 06:11:22 +0000
ROA not before:           Sat 16 Nov 2024 06:11:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209596
IP address blocks:        109.162.240.0/21 maxlen: 21
                          213.207.224.0/21 maxlen: 21
                          213.207.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:33:98:f4:16:c9:9c:8c:19:66:ab:61:fd:10:19:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
        Validity
            Not Before: Nov 16 06:11:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0d1415cd6888be688612ef7c2aa6ba37809a21bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:ff:0c:b1:ec:65:3a:c6:99:2b:e0:ce:56:
                    36:54:2f:84:b2:d5:d6:cf:be:19:60:aa:38:7f:cc:
                    9e:67:fc:0c:1e:7e:e6:45:de:e6:59:1b:74:bc:7c:
                    70:58:7d:ed:45:c6:bd:99:18:19:dc:c5:e6:c2:b3:
                    89:db:d1:88:9d:94:ef:3b:a5:56:a6:39:06:64:f3:
                    ff:ef:28:38:ee:44:6d:53:3c:97:09:fc:ff:23:55:
                    41:9a:ff:7f:8b:2f:b2:c3:12:8b:48:92:6c:5c:f1:
                    54:90:ce:7e:e0:93:d5:8e:6d:9e:3e:34:1a:71:f4:
                    9a:92:da:20:57:9e:fc:e4:2b:d9:74:d2:c5:11:13:
                    41:a8:d2:87:a2:24:f7:c1:54:70:f1:37:b1:0a:32:
                    d6:c5:e7:42:d7:64:0d:7b:d2:f0:af:f7:7b:4e:d6:
                    4f:d9:3e:1c:00:ef:25:be:48:24:ea:53:fd:00:6a:
                    0f:8e:a5:d2:c4:0b:84:65:38:c5:3d:c6:ba:54:ca:
                    57:a5:ea:9a:49:2c:4c:f7:77:15:7d:ae:20:29:d7:
                    5a:8f:1b:78:a5:48:f8:0a:c9:fa:28:a5:28:07:9e:
                    f9:85:7c:21:32:c1:ca:97:62:4f:bf:12:fe:de:71:
                    20:62:63:f4:54:5a:4c:ba:90:93:32:99:e8:4b:af:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:15:CD:68:88:BE:68:86:12:EF:7C:2A:A6:BA:37:80:9A:21:BF
            X509v3 Authority Key Identifier:
                keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.162.240.0/21
                  213.207.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:d3:3a:8f:8c:57:15:24:d7:e2:3d:21:0f:be:63:ae:ab:
         c5:aa:45:6a:dc:34:d2:b7:79:9d:93:13:4e:ae:df:c0:b2:44:
         7c:bd:8a:63:dd:05:de:6b:d5:df:c4:29:4d:09:35:1e:01:2a:
         32:22:10:2d:70:6f:fa:b8:fb:29:23:93:02:7d:8f:d4:71:63:
         61:cc:05:03:4a:7e:47:c5:ae:8a:53:9a:29:21:d5:5e:98:18:
         ed:13:15:6c:f6:57:e7:e1:ff:5c:04:0a:d2:9f:bb:48:71:e3:
         4b:10:13:8e:55:a2:06:f7:bb:10:9e:68:4d:66:34:b6:08:78:
         d7:1b:54:91:78:0f:ea:54:a0:5d:1d:96:2d:cd:a3:13:6d:6a:
         d5:44:4e:0e:f9:a1:6c:ba:33:40:6d:35:6d:a3:83:a6:fb:b8:
         90:cb:68:7f:57:35:bd:06:11:00:0c:5f:5d:b8:eb:c3:86:74:
         ef:fc:57:59:9a:18:39:cd:ed:9f:8d:39:44:71:d0:8c:ae:0e:
         df:73:1b:cd:2b:d3:d3:4f:70:85:1d:86:12:97:dd:7e:4b:31:
         cd:30:3f:87:c9:4e:af:03:86:1d:c2:40:5b:3e:4f:29:50:93:
         80:93:50:d8:c7:29:3d:a9:de:27:05:58:4a:75:d6:84:40:41:
         06:67:ac:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMzmPQWyZyMGWarYf0QGYpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjQxMTE2MDYxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDE0MTVjZDY4ODhiZTY4ODYxMmVmN2MyYWE2YmEzNzgwOWEyMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32X/DLHsZTrGmSvgzlY2VC+EstXW
z74ZYKo4f8yeZ/wMHn7mRd7mWRt0vHxwWH3tRca9mRgZ3MXmwrOJ29GInZTvO6VW
pjkGZPP/7yg47kRtUzyXCfz/I1VBmv9/iy+ywxKLSJJsXPFUkM5+4JPVjm2ePjQa
cfSaktogV5785CvZdNLFERNBqNKHoiT3wVRw8TexCjLWxedC12QNe9Lwr/d7TtZP
2T4cAO8lvkgk6lP9AGoPjqXSxAuEZTjFPca6VMpXpeqaSSxM93cVfa4gKddajxt4
pUj4Csn6KKUoB575hXwhMsHKl2JPvxL+3nEgYmP0VFpMupCTMpnoS6+zpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA0UFc1oiL5ohhLvfCqmujeAmiG/MB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvRFJRVnpXaUl2bWlHRXU5OEtxYTZONENhSWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbaLwAwQE
1c/gMA0GCSqGSIb3DQEBCwUAA4IBAQCZD9M6j4xXFSTX4j0hD75jrqvFqkVq3DTS
t3mdkxNOrt/AskR8vYpj3QXea9XfxClNCTUeASoyIhAtcG/6uPspI5MCfY/UcWNh
zAUDSn5Hxa6KU5opIdVemBjtExVs9lfn4f9cBArSn7tIceNLEBOOVaIG97sQnmhN
ZjS2CHjXG1SReA/qVKBdHZYtzaMTbWrVRE4O+aFsujNAbTVto4Om+7iQy2h/VzW9
BhEADF9duOvDhnTv/FdZmhg5ze2fjTlEcdCMrg7fcxvNK9PTT3CFHYYSl91+SzHN
MD+HyU6vA4YdwkBbPk8pUJOAk1DYxyk9qd4nBVhKddaEQEEGZ6zk
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:28 2024 by rpki-client on console-ams.rpki-client.org