Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa
File:                     lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa (raw, json)
Hash identifier:          3MazFUVxFAYfVUcUDDWljMCjN10REorvhSBcT4sUWrE=
Subject key identifier:   94:02:75:D9:60:1B:AD:9E:8A:9F:23:55:C7:1E:9F:7A:DF:F5:35:DD
Certificate issuer:       /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial:       018EC2BBD7B3DF451677F5C8679831F4FEE2
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa
Signing time:             Tue 09 Apr 2024 12:01:14 +0000
ROA not before:           Tue 09 Apr 2024 12:01:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34754
IP address blocks:        87.254.160.0/19 maxlen: 24
                          87.254.160.0/23 maxlen: 24
                          87.254.162.0/23 maxlen: 24
                          87.254.162.0/24 maxlen: 24
                          87.254.163.0/24 maxlen: 24
                          87.254.164.0/23 maxlen: 24
                          87.254.164.0/24 maxlen: 24
                          87.254.165.0/24 maxlen: 24
                          87.254.166.0/23 maxlen: 24
                          87.254.168.0/24 maxlen: 24
                          87.254.169.0/24 maxlen: 24
                          87.254.170.0/23 maxlen: 24
                          87.254.172.0/23 maxlen: 24
                          87.254.172.0/24 maxlen: 24
                          87.254.173.0/24 maxlen: 24
                          88.87.0.0/19 maxlen: 24
                          88.87.0.0/24 maxlen: 24
                          88.87.1.0/24 maxlen: 24
                          88.87.2.0/24 maxlen: 24
                          88.87.3.0/24 maxlen: 24
                          88.87.4.0/24 maxlen: 24
                          88.87.5.0/24 maxlen: 24
                          88.87.6.0/23 maxlen: 24
                          88.87.8.0/23 maxlen: 24
                          88.87.8.0/24 maxlen: 24
                          88.87.10.0/23 maxlen: 24
                          88.87.10.0/24 maxlen: 24
                          88.87.12.0/23 maxlen: 24
                          88.87.14.0/24 maxlen: 24
                          88.87.15.0/24 maxlen: 24
                          88.87.16.0/23 maxlen: 24
                          88.87.18.0/23 maxlen: 24
                          88.87.20.0/23 maxlen: 24
                          88.87.22.0/23 maxlen: 24
                          88.87.22.0/24 maxlen: 24
                          88.87.23.0/24 maxlen: 24
                          88.87.24.0/22 maxlen: 24
                          88.87.28.0/23 maxlen: 24
                          88.87.30.0/24 maxlen: 24
                          88.87.31.0/24 maxlen: 24
                          109.199.128.0/19 maxlen: 24
                          193.228.172.0/23 maxlen: 24
                          193.228.182.0/23 maxlen: 24
                          212.50.64.0/19 maxlen: 24
                          212.50.64.0/22 maxlen: 24
                          212.50.68.0/22 maxlen: 24
                          212.50.70.0/24 maxlen: 24
                          212.50.72.0/22 maxlen: 24
                          212.50.76.0/22 maxlen: 24
                          212.50.76.0/24 maxlen: 24
                          212.50.77.0/24 maxlen: 24
                          212.50.78.0/24 maxlen: 24
                          212.50.79.0/24 maxlen: 24
                          212.50.80.0/23 maxlen: 24
                          212.50.82.0/23 maxlen: 24
                          212.50.84.0/23 maxlen: 24
                          212.50.86.0/23 maxlen: 24
                          212.50.88.0/23 maxlen: 24
                          212.50.90.0/23 maxlen: 24
                          212.50.91.0/24 maxlen: 24
                          212.50.92.0/24 maxlen: 24
                          212.50.93.0/24 maxlen: 24
                          212.50.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 Nov 2024 16:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c2:bb:d7:b3:df:45:16:77:f5:c8:67:98:31:f4:fe:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
        Validity
            Not Before: Apr  9 12:01:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=940275d9601bad9e8a9f2355c71e9f7adff535dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:e2:76:44:52:c3:bf:f5:47:8d:40:d9:b2:
                    53:97:5b:f9:e6:1f:3a:cc:e1:a4:36:0f:9d:92:16:
                    03:6f:05:d5:54:bd:ee:8c:27:6c:11:fb:70:48:47:
                    c1:05:a4:c8:0a:72:14:f6:a3:c7:48:3f:e4:66:95:
                    a0:b8:04:ef:6e:ef:84:f4:b1:31:16:ec:53:42:53:
                    b7:44:6f:8c:99:e1:2e:c3:c4:de:51:fb:40:e6:bb:
                    68:14:37:10:62:aa:cb:57:24:6f:1f:08:3d:fb:84:
                    1f:8c:9b:30:f2:e2:be:b0:c2:1e:62:45:cb:62:15:
                    7d:1b:7b:b6:2b:14:b4:5d:c3:cd:88:65:63:2c:f7:
                    49:4c:cc:04:87:c7:97:5c:4c:4c:12:5d:f4:b9:2c:
                    e0:92:87:78:ba:88:a7:fd:dd:90:a6:d4:ea:3c:be:
                    34:ad:59:fd:90:f7:75:05:5e:d6:d7:5d:cc:06:90:
                    34:ce:2f:a0:88:cd:b2:2f:7c:cf:56:38:b3:dc:d6:
                    db:a2:83:ed:c3:8f:9b:b2:24:bf:24:f9:49:50:a9:
                    46:81:82:42:5a:8f:52:dc:66:32:2d:a5:e0:03:45:
                    25:50:4c:c2:2f:16:c2:cf:d1:82:50:89:80:f5:d1:
                    38:d6:43:ff:01:23:09:98:ad:bc:e8:e1:da:5e:ba:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:75:D9:60:1B:AD:9E:8A:9F:23:55:C7:1E:9F:7A:DF:F5:35:DD
            X509v3 Authority Key Identifier:
                keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.160.0/19
                  88.87.0.0/19
                  109.199.128.0/19
                  193.228.172.0/23
                  193.228.182.0/23
                  212.50.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:df:c6:ef:be:02:1c:b2:2e:aa:b8:82:9f:6f:68:34:85:1c:
         2d:e0:4b:98:d5:8a:4a:9c:9d:0f:ec:33:a9:05:4a:48:46:7c:
         85:3f:4e:c3:3e:5c:85:ce:e6:a4:28:78:60:54:5c:6b:ce:45:
         fd:4c:70:7c:00:16:f9:ce:63:58:aa:38:52:57:b6:b0:b4:f8:
         87:00:29:12:e9:be:5f:a2:15:16:70:41:10:99:6f:7d:29:63:
         a3:e7:e1:00:b7:be:a1:4d:32:a2:96:81:d2:66:0b:46:91:35:
         cc:f2:2d:87:e0:4b:7d:c5:d4:e8:45:2b:0a:62:b6:e6:fb:d0:
         6b:82:20:9f:99:7d:32:9f:9f:1b:a1:84:bb:98:2c:f6:e6:30:
         6a:4d:00:e9:45:e4:d8:ac:e7:e9:f4:3c:17:97:04:d5:b0:f8:
         10:0d:98:2a:f2:82:18:af:fc:e2:f2:c9:f7:1e:0e:a0:f7:2e:
         48:1c:83:f9:72:4b:a1:05:02:db:68:89:d4:8e:0b:41:8a:19:
         f7:19:4b:e6:82:53:ee:5e:fc:e0:8f:c2:02:1e:be:65:fa:fc:
         1f:53:d2:e1:b0:de:c4:df:f8:6d:45:74:6f:33:2d:03:4b:dd:
         c8:05:44:cc:31:1b:c3:05:14:86:ae:a8:45:dd:c4:bf:8b:7a:
         01:61:1a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 00:16:34 2024 by rpki-client on console-ams.rpki-client.org