Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/wItpFzp58lB6ATjYQhsdbTwF018.roa
File:                     wItpFzp58lB6ATjYQhsdbTwF018.roa (raw, json)
Hash identifier:          wo1qTpYI3PgXo32hPjYxjT/3jkU7vlVmSAXxCUh9ECg=
Subject key identifier:   C0:8B:69:17:3A:79:F2:50:7A:01:38:D8:42:1B:1D:6D:3C:05:D3:5F
Certificate issuer:       /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial:       018CC2DB255991CE996F981C4428C1FCBBF0
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/wItpFzp58lB6ATjYQhsdbTwF018.roa
Signing time:             Mon 01 Jan 2024 02:29:51 +0000
ROA not before:           Mon 01 Jan 2024 02:29:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205118
IP address blocks:        185.229.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 16:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:25:59:91:ce:99:6f:98:1c:44:28:c1:fc:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
        Validity
            Not Before: Jan  1 02:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c08b69173a79f2507a0138d8421b1d6d3c05d35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:37:38:72:68:67:c3:19:3e:ee:1e:3d:1a:
                    89:c7:ec:11:b9:ba:18:25:29:f2:dc:53:ce:e2:19:
                    d4:5e:4e:68:64:82:69:3a:c7:55:0a:c7:b8:0d:60:
                    fd:8a:66:a7:06:94:f4:84:2f:23:0e:dd:01:0b:f2:
                    f6:62:46:85:4b:6e:0c:6a:21:33:e1:41:c0:f4:b5:
                    bb:35:6d:cd:04:42:27:e4:ab:2e:02:66:b8:48:e6:
                    3d:d7:6c:73:54:ea:33:28:51:c8:2f:53:bf:65:db:
                    da:c1:9c:f5:a3:15:fe:58:a1:55:9c:84:d3:02:c3:
                    62:d1:fb:c2:16:d5:ba:b3:73:74:3a:56:68:62:31:
                    39:a5:85:94:fe:30:3a:0c:bd:d6:7c:f4:67:65:38:
                    ec:8f:d2:fa:8a:3a:10:d3:35:96:a8:1a:c7:77:10:
                    7e:b9:64:e7:b4:c5:f4:8a:0d:a2:4d:72:e5:1e:08:
                    da:d6:05:86:bf:d4:d7:40:1b:b0:06:5c:c6:3e:30:
                    45:0c:b8:96:a1:e4:14:56:05:ae:0d:79:39:da:3b:
                    fb:a1:9c:af:79:24:2b:bc:5c:94:ad:69:a6:b5:35:
                    16:72:23:ff:94:5b:cf:b1:a2:7f:82:6c:da:e3:1f:
                    0a:08:f7:c0:5f:f1:35:53:c6:a4:b1:0d:5e:83:3e:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8B:69:17:3A:79:F2:50:7A:01:38:D8:42:1B:1D:6D:3C:05:D3:5F
            X509v3 Authority Key Identifier:
                keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/wItpFzp58lB6ATjYQhsdbTwF018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:23:43:36:70:41:b1:43:b3:df:cf:28:de:03:f3:2f:c7:
         08:15:2b:d2:88:0d:d6:54:0c:ec:ae:7a:41:6d:ca:f3:a4:9a:
         35:7b:e6:55:8d:15:00:06:6b:10:b3:08:5c:38:19:e6:fb:c8:
         3b:62:42:6a:93:cb:5b:48:ea:74:af:cf:81:95:ad:6d:7b:dd:
         62:01:22:33:df:c3:42:62:8b:6d:40:01:ea:3a:98:8c:64:f3:
         f2:a4:93:53:29:91:e9:77:38:17:22:73:52:5b:8e:6c:7e:8a:
         95:49:8b:ba:b8:be:09:f9:84:71:87:bf:64:5a:6b:6a:23:a6:
         2a:11:e1:1d:47:5c:85:dd:4b:c8:17:16:ac:3e:12:b6:b5:cd:
         25:1b:9c:bb:ed:2a:1f:b5:54:ea:68:f1:0c:f0:b2:a3:64:56:
         21:cc:47:93:30:87:9f:af:01:95:2c:32:8f:be:87:8f:11:04:
         db:c8:79:4b:03:93:24:c2:40:2c:d5:02:ed:8e:c2:ae:f6:ad:
         a4:f5:57:f2:34:54:75:8e:d8:0f:aa:f3:1b:e4:68:6d:65:11:
         5a:60:4f:27:eb:b9:74:86:1e:bc:b8:e9:ac:87:28:07:dd:84:
         08:b0:f8:e7:8f:71:31:22:9b:78:3f:03:27:d7:2f:a1:07:d5:
         3d:1c:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 00:38:38 2024 by rpki-client on console-ams.rpki-client.org