Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/SL_anyuoRm54cJamedonMS5qjqc.roa
File:                     SL_anyuoRm54cJamedonMS5qjqc.roa (raw, json)
Hash identifier:          VVFYOOSG/IQXdnBDwaaLO+wH1AQ8k+cYOuLuL/oSjlo=
Subject key identifier:   48:BF:DA:9F:2B:A8:46:6E:78:70:96:A6:79:DA:27:31:2E:6A:8E:A7
Certificate issuer:       /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial:       018CC80138D8CBEDCE1CFF59F13F89A2613D
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/SL_anyuoRm54cJamedonMS5qjqc.roa
Signing time:             Tue 02 Jan 2024 02:29:32 +0000
ROA not before:           Tue 02 Jan 2024 02:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57646
IP address blocks:        193.142.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:38:d8:cb:ed:ce:1c:ff:59:f1:3f:89:a2:61:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
        Validity
            Not Before: Jan  2 02:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48bfda9f2ba8466e787096a679da27312e6a8ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:fe:b4:a4:88:15:e7:d5:c9:21:67:dc:7a:
                    48:c9:de:d0:58:80:86:07:64:cb:ef:65:5d:e1:04:
                    5c:0f:24:97:87:bc:97:b3:01:44:75:93:d2:b8:80:
                    48:7d:1d:5f:bb:e9:77:1e:1b:ef:3a:f1:14:70:03:
                    a8:f4:f0:80:e3:1f:d6:07:8d:f0:2e:db:68:b3:1d:
                    46:1c:cc:78:71:3f:a7:75:c3:41:88:d8:2b:ce:e5:
                    84:14:ed:1f:41:59:42:45:ac:c3:5f:11:06:7c:8b:
                    38:3d:ff:d0:93:ee:98:3c:b2:0f:08:a9:40:77:e5:
                    fd:eb:eb:61:6a:62:83:bd:ee:e1:5e:ec:0f:7c:7a:
                    72:f5:3d:e4:ec:1e:4b:8f:67:0b:10:d3:c1:e6:23:
                    1d:07:0b:bc:b6:54:2e:a7:89:ec:e7:7d:46:ea:e6:
                    ad:00:4f:a9:f3:70:7b:df:f0:e6:cc:bf:44:a5:e7:
                    8c:55:74:70:89:e6:a0:e9:98:93:bc:a3:9f:93:96:
                    79:86:5f:f0:50:8d:b4:33:a6:cf:69:52:85:82:c3:
                    02:3b:04:56:82:8d:ae:0a:e4:c7:fd:5c:46:77:e6:
                    b0:45:4d:76:b4:0b:02:0c:c5:87:86:33:47:4a:94:
                    d9:18:83:8c:e4:2b:bb:4f:91:97:07:7f:14:cb:41:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:DA:9F:2B:A8:46:6E:78:70:96:A6:79:DA:27:31:2E:6A:8E:A7
            X509v3 Authority Key Identifier:
                keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/SL_anyuoRm54cJamedonMS5qjqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:07:45:9a:2c:b4:36:db:59:04:0a:98:16:ca:43:f8:21:0b:
         d8:08:d4:8e:d2:89:7c:dc:4d:22:c5:23:75:5e:bd:0d:23:d7:
         bd:cd:c9:ce:f3:1f:a4:c5:db:99:4f:6f:26:28:79:1e:f3:67:
         11:72:6d:f1:0f:db:34:8f:1c:b6:f6:83:e0:11:2a:88:a1:4b:
         9f:88:e4:77:30:3c:8c:21:fe:7f:ad:b4:b2:99:5f:3c:f7:00:
         40:9b:16:a3:cc:6e:c1:f6:9d:ee:41:87:fa:14:dd:f0:17:bf:
         b2:0d:0d:4e:40:b5:a0:ba:80:29:a4:9e:0a:7d:1b:68:e7:79:
         59:a4:0d:4c:6e:d0:18:5e:0c:94:6c:28:39:6e:f1:8c:ca:d9:
         92:e5:a7:6e:52:f5:24:8f:fe:20:6c:11:99:c8:4e:c8:04:3b:
         27:7b:21:83:c7:60:32:3b:86:88:c9:3c:77:6c:e4:d3:5e:f6:
         b7:81:33:2e:b5:2e:5a:06:3a:61:67:ad:ed:3a:ed:20:5d:47:
         e9:34:c8:8c:2a:a7:a7:47:00:49:20:56:e0:ec:84:b5:57:54:
         f6:10:c6:ee:3d:61:82:2e:80:c7:05:97:78:1b:89:24:77:8f:
         ed:76:e5:71:a0:11:44:00:ca:10:7a:a6:32:cd:68:ad:9f:20:
         2a:ff:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:30 2024 by rpki-client on console-ams.rpki-client.org