Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/NL56a-6PtPVgGAtVFT0HPZTEwWk.roa
File:                     NL56a-6PtPVgGAtVFT0HPZTEwWk.roa (raw, json)
Hash identifier:          /YUFSHjgbsrlcVgoF83kyjiETSpiLsqw5p7M6tKdgWY=
Subject key identifier:   34:BE:7A:6B:EE:8F:B4:F5:60:18:0B:55:15:3D:07:3D:94:C4:C1:69
Certificate issuer:       /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial:       018CC2DAD600BF95AC7310472334F90F670E
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/NL56a-6PtPVgGAtVFT0HPZTEwWk.roa
Signing time:             Mon 01 Jan 2024 02:29:30 +0000
ROA not before:           Mon 01 Jan 2024 02:29:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197735
IP address blocks:        91.226.27.0/24 maxlen: 24
                          91.226.26.0/24 maxlen: 24
                          91.226.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:d6:00:bf:95:ac:73:10:47:23:34:f9:0f:67:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
        Validity
            Not Before: Jan  1 02:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34be7a6bee8fb4f560180b55153d073d94c4c169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:2a:7c:85:b8:e6:5e:1a:7e:81:36:f3:bc:
                    a8:cf:f9:20:2c:46:0a:1a:f1:13:7c:a4:07:ff:fa:
                    56:2e:b7:15:99:13:5a:01:7e:89:d8:5d:29:e8:8d:
                    e1:f0:cb:e2:85:a7:a9:34:61:98:40:34:e4:9b:3b:
                    79:9b:92:1e:42:5c:bc:85:4e:28:8f:bc:e4:f3:c7:
                    e8:cf:7e:7c:96:23:13:00:43:84:4e:71:c7:2b:4a:
                    89:65:ef:80:e9:e7:ee:82:11:d2:c5:4d:ce:4b:4d:
                    b2:5f:e0:e8:c4:04:0c:9b:d6:ea:3d:19:f2:9f:5c:
                    67:27:e3:da:78:f1:7f:98:e3:d9:3b:4a:a9:80:7a:
                    64:c3:b2:08:65:93:12:45:01:87:ca:f3:fa:8d:f6:
                    77:09:d8:27:25:34:6c:a3:61:50:1a:b2:b5:56:88:
                    da:80:b9:89:a7:5e:2f:fe:b4:a1:31:d5:7e:79:14:
                    58:a7:bc:c6:4c:73:08:70:ad:e3:2f:b6:a2:15:1b:
                    e8:90:c5:4c:c5:b1:ec:31:9c:2a:5e:94:0d:a7:ed:
                    d9:1b:b2:04:24:60:44:62:78:f3:4a:a9:16:3e:f7:
                    e2:5e:91:08:dc:80:14:c1:2b:0c:49:f4:5b:d7:28:
                    ca:f9:d0:d4:a6:8b:47:2b:43:35:52:ae:4d:0a:34:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BE:7A:6B:EE:8F:B4:F5:60:18:0B:55:15:3D:07:3D:94:C4:C1:69
            X509v3 Authority Key Identifier:
                keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/NL56a-6PtPVgGAtVFT0HPZTEwWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:59:4a:5a:97:1c:57:82:55:4b:63:5a:56:f3:b5:54:91:7f:
         c6:0d:75:25:49:44:69:55:95:d0:2c:24:a3:23:a5:c6:a3:9e:
         50:6e:76:c0:ae:9e:ed:06:a5:2e:2c:d7:59:a6:40:32:0b:dd:
         eb:46:9a:37:db:6c:5f:24:fa:ec:cd:0a:71:a7:30:f4:63:66:
         c8:e8:97:58:0e:ef:d8:6e:22:45:7f:36:cc:79:66:ea:85:de:
         1c:5d:9c:f4:d8:ae:7e:ca:ae:94:c8:af:59:c2:db:24:b4:a1:
         b8:c2:05:bd:65:fb:22:d1:54:6a:b3:00:7c:9a:a4:9a:03:f5:
         55:32:7a:f9:f3:8d:40:e2:68:95:2f:39:f6:c3:6c:1b:23:20:
         0a:32:ee:c6:d5:6c:61:6b:5f:b4:54:34:37:a3:fc:e8:f6:d1:
         9e:31:9a:4e:d3:41:af:0a:aa:d9:fd:32:63:46:fa:85:5e:4a:
         0f:8a:99:ef:56:e2:50:40:ec:95:44:da:aa:59:45:6b:b2:b3:
         e6:c5:9f:78:d3:94:69:9c:10:2f:81:ba:8d:57:58:29:cd:af:
         58:b2:7f:a9:25:4f:21:39:55:76:e6:71:e0:a5:38:ba:74:9b:
         bc:76:f1:04:c9:39:9e:b0:29:11:52:5d:e6:36:ec:cd:08:b5:
         c6:a7:5a:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2tYAv5WscxBHIzT5D2cOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0
NzkyY2UwHhcNMjQwMTAxMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGJlN2E2YmVlOGZiNGY1NjAxODBiNTUxNTNkMDczZDk0YzRjMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3UqfIW45l4afoE287yoz/kgLEYK
GvETfKQH//pWLrcVmRNaAX6J2F0p6I3h8MvihaepNGGYQDTkmzt5m5IeQly8hU4o
j7zk88foz358liMTAEOETnHHK0qJZe+A6efughHSxU3OS02yX+DoxAQMm9bqPRny
n1xnJ+PaePF/mOPZO0qpgHpkw7IIZZMSRQGHyvP6jfZ3CdgnJTRso2FQGrK1Voja
gLmJp14v/rShMdV+eRRYp7zGTHMIcK3jL7aiFRvokMVMxbHsMZwqXpQNp+3ZG7IE
JGBEYnjzSqkWPvfiXpEI3IAUwSsMSfRb1yjK+dDUpotHK0M1Uq5NCjSNfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDS+emvuj7T1YBgLVRU9Bz2UxMFpMB8GA1UdIwQY
MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt
MDJiMzM1ODJjNzQ3LzEvTkw1NmEtNlB0UFZnR0F0VkZUMEhQWlRFd1drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3
LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+IaMA0G
CSqGSIb3DQEBCwUAA4IBAQCUWUpalxxXglVLY1pW87VUkX/GDXUlSURpVZXQLCSj
I6XGo55QbnbArp7tBqUuLNdZpkAyC93rRpo322xfJPrszQpxpzD0Y2bI6JdYDu/Y
biJFfzbMeWbqhd4cXZz02K5+yq6UyK9ZwtsktKG4wgW9Zfsi0VRqswB8mqSaA/VV
Mnr5841A4miVLzn2w2wbIyAKMu7G1Wxha1+0VDQ3o/zo9tGeMZpO00GvCqrZ/TJj
RvqFXkoPipnvVuJQQOyVRNqqWUVrsrPmxZ9405RpnBAvgbqNV1gpza9Ysn+pJU8h
OVV25nHgpTi6dJu8dvEEyTmesCkRUl3mNuzNCLXGp1qW
-----END CERTIFICATE-----
Generated at Sat Jun 15 13:15:52 2024 by rpki-client on console-fra.rpki-client.org