Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa
File:                     iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa (raw, json)
Hash identifier:          eufpJNQBQcxsOEBGs7uNcrQGntWeYAextvO2hXo4ykU=
Subject key identifier:   8A:AA:DF:5A:8F:D2:52:93:D7:B9:81:71:1C:68:59:58:FC:3A:50:6C
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       018CC2DB365B6C0A1B2DEBBDA7CA170C8ABE
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa
Signing time:             Mon 01 Jan 2024 02:29:55 +0000
ROA not before:           Mon 01 Jan 2024 02:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15962
IP address blocks:        95.105.128.0/18 maxlen: 18
                          95.105.128.0/17 maxlen: 17
                          185.50.212.0/22 maxlen: 22
                          178.143.128.0/17 maxlen: 17
                          213.151.246.0/24 maxlen: 24
                          213.151.248.0/24 maxlen: 24
                          85.237.224.0/19 maxlen: 19
                          109.230.0.0/18 maxlen: 18
                          213.151.192.0/18 maxlen: 18
                          92.52.0.0/18 maxlen: 18
                          78.141.64.0/18 maxlen: 18
                          178.143.0.0/17 maxlen: 17
                          178.143.0.0/16 maxlen: 16
                          5.178.48.0/20 maxlen: 20
                          95.105.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:36:5b:6c:0a:1b:2d:eb:bd:a7:ca:17:0c:8a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: Jan  1 02:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8aaadf5a8fd25293d7b981711c685958fc3a506c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:a5:f0:6e:95:80:db:62:88:62:43:a8:27:
                    8c:35:30:73:f1:d6:ee:d5:3a:70:8e:ce:0c:c9:a6:
                    d6:00:43:06:af:e3:db:b3:64:5f:cf:41:1e:cd:23:
                    9f:7c:02:1b:28:c5:3a:b5:d6:82:27:a6:6f:3f:d2:
                    3c:4a:b5:7e:ac:cb:7b:2c:52:29:7f:1f:be:73:9f:
                    e0:58:2b:1e:45:a3:1e:15:4a:f4:b4:b9:8a:46:81:
                    46:5c:b3:a3:38:cb:86:83:27:d2:b9:ae:6b:08:91:
                    11:a3:3c:31:ea:4d:a4:30:5b:8a:1f:65:46:d9:fd:
                    fe:5a:fe:fd:d0:6f:70:41:22:97:5f:d4:86:65:71:
                    71:e8:72:52:67:2b:11:a7:9f:dd:b5:c5:c5:6c:2a:
                    83:e7:ce:db:96:72:10:91:14:34:14:f2:c6:ba:cc:
                    ff:56:c7:26:67:b4:ee:d1:dc:07:0b:7e:c8:08:e8:
                    ec:4e:44:c8:d5:51:0a:09:b7:95:c7:70:b7:01:47:
                    73:88:1a:be:85:08:8a:2f:94:b4:f0:31:1e:99:4a:
                    4e:4c:96:a7:4e:36:99:bf:de:0f:82:91:af:1e:eb:
                    ee:9b:94:fc:1a:16:6e:55:74:ba:2f:23:23:50:10:
                    d5:39:f8:39:eb:39:c0:77:1e:e9:f4:95:00:43:7e:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AA:DF:5A:8F:D2:52:93:D7:B9:81:71:1C:68:59:58:FC:3A:50:6C
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.48.0/20
                  78.141.64.0/18
                  85.237.224.0/19
                  92.52.0.0/18
                  95.105.128.0/17
                  109.230.0.0/18
                  178.143.0.0/16
                  185.50.212.0/22
                  213.151.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         94:65:fb:9d:a9:f1:67:7f:16:86:56:8d:3e:eb:10:6b:13:ba:
         6a:00:2e:c9:63:e0:16:2c:8d:1b:09:e8:30:9c:63:15:cc:db:
         fb:92:da:ea:98:40:e8:cf:57:44:64:7c:a0:72:f5:af:97:1c:
         e7:78:1b:45:b7:21:9e:3b:3f:15:ac:8e:3c:b6:ee:f6:5e:93:
         4c:82:6a:fe:a6:5f:24:91:fb:3e:4b:3e:12:1f:ca:8e:fd:ce:
         ea:e9:ab:2d:3b:2b:3b:9b:57:f2:e4:89:86:04:e6:36:02:e8:
         43:9e:67:ae:28:ef:ef:b5:b6:cb:fb:9c:5c:58:17:8d:45:d8:
         75:0e:33:b5:63:da:03:10:cf:2c:40:17:33:e9:cc:76:8a:b0:
         00:d9:94:4e:44:92:6a:70:63:04:7d:2a:3d:bb:b3:bb:a4:7f:
         c3:6e:9c:e3:73:b9:82:ac:65:21:95:23:8a:78:b6:d2:98:ac:
         29:51:17:47:de:4c:66:ff:55:13:7e:38:9d:ee:8a:ae:9e:bb:
         88:bf:65:e8:58:e6:4f:fa:18:24:1b:99:52:bb:3d:9f:84:a4:
         64:a9:bf:57:5d:07:89:af:58:0d:f2:fc:6b:31:f1:6a:01:6d:
         96:34:69:b0:ad:18:d5:30:44:34:0e:bb:12:79:3b:00:94:48:
         42:7b:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:09:12 2024 by rpki-client on console-fra.rpki-client.org