Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_YT8pZJLv87SHC5tkFB70HPxmrE.roa
File:                     _YT8pZJLv87SHC5tkFB70HPxmrE.roa (raw, json)
Hash identifier:          +Gzcyn2Pt4yaZ3ceiK7rN+wdtvZg5MDAceFkxl9bufw=
Subject key identifier:   FD:84:FC:A5:92:4B:BF:CE:D2:1C:2E:6D:90:50:7B:D0:73:F1:9A:B1
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       018CC348A9F5780930A1BEB0350B86B6A091
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_YT8pZJLv87SHC5tkFB70HPxmrE.roa
Signing time:             Mon 01 Jan 2024 04:29:28 +0000
ROA not before:           Mon 01 Jan 2024 04:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48811
IP address blocks:        193.255.70.0/23 maxlen: 23
                          193.255.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:a9:f5:78:09:30:a1:be:b0:35:0b:86:b6:a0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Jan  1 04:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fd84fca5924bbfced21c2e6d90507bd073f19ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:4c:5e:d7:1c:13:fa:1f:46:21:9c:6a:41:
                    52:cf:45:3d:90:c0:74:59:4b:24:8b:16:07:72:c2:
                    7e:37:70:cf:d7:e0:4b:df:a5:30:5f:1a:53:df:5f:
                    5a:62:2a:80:3e:da:a9:7a:4d:6a:bf:d9:88:83:f4:
                    65:37:66:93:ac:3c:8b:07:f8:8e:b3:6c:b2:61:8f:
                    20:6b:1a:98:51:97:19:84:59:31:46:ff:3e:b2:cb:
                    a0:05:80:21:cd:87:f5:a7:a7:9d:e2:bc:fa:51:d2:
                    8c:cc:fb:43:ec:51:4b:d9:e4:f3:43:90:48:d3:8a:
                    48:b0:34:54:2e:c8:cc:28:9a:11:21:a8:aa:21:8b:
                    d5:45:52:2d:b3:ee:1d:68:fd:d1:0b:90:61:5f:a3:
                    2f:df:a7:50:49:04:f3:04:f7:d2:b0:59:a8:05:b7:
                    4e:ba:1a:da:d6:c0:e4:25:af:77:89:55:7d:3b:d1:
                    1c:04:d3:da:28:74:86:3a:05:ac:b2:cc:d8:7f:d2:
                    d7:5b:5b:35:8a:ff:47:57:a9:bc:71:69:cd:2d:6b:
                    7b:83:9b:90:04:eb:af:0e:11:47:10:35:2d:8f:14:
                    49:a2:d3:48:00:ad:3d:ff:2d:47:be:02:16:61:63:
                    01:73:85:d7:17:25:bb:b3:be:cc:05:26:a0:aa:75:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:84:FC:A5:92:4B:BF:CE:D2:1C:2E:6D:90:50:7B:D0:73:F1:9A:B1
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_YT8pZJLv87SHC5tkFB70HPxmrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.255.70.0-193.255.72.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:29:84:17:99:9a:f2:3a:07:d9:8e:4c:81:d9:ea:e1:2b:
         e6:1c:91:61:8e:59:38:cf:74:e3:8b:c9:34:63:1d:c3:c9:d5:
         5a:36:d3:ff:cd:7b:24:69:e4:a8:b4:06:46:2c:1f:f0:be:98:
         49:aa:bc:fa:30:82:75:33:8c:29:db:c3:f3:a7:83:69:2d:05:
         a8:69:0a:93:5b:63:b7:25:cb:09:fd:45:2c:c5:56:0c:d4:9c:
         a0:4e:b7:d0:3a:29:7c:58:d2:5e:4a:c6:c0:01:80:99:ab:31:
         fd:14:fe:f6:d6:e1:a4:70:fd:9f:7c:e5:dc:53:50:3b:75:44:
         54:03:af:60:93:87:80:0e:65:60:68:f9:74:83:54:1c:43:5b:
         71:68:56:70:3d:4b:01:9a:86:69:d1:c8:20:e9:ed:21:50:fa:
         dc:af:90:51:34:1a:47:df:25:42:f4:55:57:9d:2c:08:13:91:
         ec:c5:48:32:b8:5e:f8:7c:87:42:a5:2d:2d:d7:5e:45:b9:25:
         c6:3a:97:bb:fd:07:05:02:ac:7d:e1:d9:4a:4e:89:fd:83:b9:
         24:b0:52:11:0d:0a:e6:c5:54:7e:ac:25:13:8c:76:da:8d:f0:
         68:56:57:d3:4c:21:bd:59:df:a8:b9:68:fb:53:21:d9:ab:93:
         ab:18:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:29 2024 by rpki-client on console-fra.rpki-client.org