Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Qep62G2NnQp6tBNxtpBjhWTPyNM.roa
File:                     Qep62G2NnQp6tBNxtpBjhWTPyNM.roa (raw, json)
Hash identifier:          hJRIJvu0aj3cWi/omwBB6SKG0waJZVHDTgupVveEzj0=
Subject key identifier:   41:EA:7A:D8:6D:8D:9D:0A:7A:B4:13:71:B6:90:63:85:64:CF:C8:D3
Certificate issuer:       /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial:       018CC26D687EBCDC84B2638321DC81054558
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Qep62G2NnQp6tBNxtpBjhWTPyNM.roa
Signing time:             Mon 01 Jan 2024 00:29:59 +0000
ROA not before:           Mon 01 Jan 2024 00:29:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205808
IP address blocks:        95.43.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:68:7e:bc:dc:84:b2:63:83:21:dc:81:05:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
        Validity
            Not Before: Jan  1 00:29:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=41ea7ad86d8d9d0a7ab41371b690638564cfc8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:14:53:03:e5:77:79:ee:ee:7a:92:ed:84:
                    cb:80:04:56:af:67:36:25:87:c5:85:c9:1f:88:77:
                    81:0d:76:33:d9:78:a9:b7:14:57:86:85:aa:7c:22:
                    f6:95:c5:55:3a:40:28:77:08:14:7d:58:9d:b1:5c:
                    5e:7c:4a:9b:e6:d2:50:6a:4c:a7:4a:3c:db:d2:78:
                    3b:b6:7f:e6:16:30:ee:d0:dc:9b:da:bc:90:ee:c7:
                    aa:38:e0:da:5c:be:cb:ed:91:e9:62:5a:25:15:be:
                    c4:21:53:29:80:2a:80:d4:bd:42:34:c2:98:f0:fe:
                    9a:10:f4:4f:6a:4a:17:a6:fe:58:70:2c:7b:c6:02:
                    c8:94:7c:b7:c5:0f:a8:30:49:b5:73:24:d4:38:5a:
                    fb:92:71:20:f8:70:55:41:00:e8:bf:1e:1c:0c:5b:
                    8d:fb:9b:ab:83:e5:81:42:29:e7:76:ca:48:a2:6a:
                    4f:20:74:90:2d:a4:fb:79:da:da:ce:a7:eb:81:ab:
                    c4:84:77:1c:df:a7:85:8b:62:c0:40:08:07:b4:81:
                    55:5b:18:67:52:6b:87:d7:2b:ea:01:67:1e:ee:e3:
                    57:a7:10:0a:4e:f1:3c:24:e9:4a:c9:c0:31:30:eb:
                    08:4c:da:e8:35:7c:45:b7:da:b7:35:db:2c:ac:83:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EA:7A:D8:6D:8D:9D:0A:7A:B4:13:71:B6:90:63:85:64:CF:C8:D3
            X509v3 Authority Key Identifier:
                keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Qep62G2NnQp6tBNxtpBjhWTPyNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.43.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:e0:57:36:29:1c:89:39:81:90:be:65:24:c4:b6:55:b6:
         5a:5b:3a:06:b5:f5:59:2a:5b:86:42:ae:e3:55:cb:08:8e:7c:
         db:57:5b:54:3e:f1:5f:29:be:20:ce:92:be:08:b9:6a:5c:d1:
         73:e3:44:01:fb:fd:53:ec:da:03:92:b1:2a:8e:f3:f3:93:8d:
         8d:5e:cf:b4:6d:49:59:d0:5b:63:62:a2:3b:c1:7a:83:9c:2c:
         81:69:c4:dc:a4:03:6c:d6:fa:89:72:61:31:72:1b:77:d8:da:
         72:d3:e6:c5:f6:b8:3e:be:b0:ae:67:a2:8e:f8:55:22:fd:d9:
         09:5c:0e:c4:6a:f2:d8:9e:fc:d3:71:af:9f:d8:e0:df:56:44:
         b0:26:8c:7f:ec:15:bf:95:8c:ed:88:17:c3:d2:dd:ca:7e:09:
         6b:90:ac:f0:bb:25:a4:74:fa:01:0f:fc:cc:3c:cf:09:a9:de:
         21:25:14:f7:d0:87:2c:33:ae:ca:38:32:ce:70:80:21:e2:ad:
         29:fb:2e:77:30:23:88:2d:2b:f0:03:b5:21:51:49:84:33:94:
         ff:84:2f:c2:18:c9:ca:6a:44:21:e8:e5:56:cd:16:f3:20:27:
         e5:17:67:0c:8d:2a:a0:ca:73:f1:18:ea:af:07:27:b7:80:51:
         78:ed:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:08 2024 by rpki-client on console-fra.rpki-client.org