Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sbb2gq46AubH1oC8WOJfvB_zhrk.roa
File:                     sbb2gq46AubH1oC8WOJfvB_zhrk.roa (raw, json)
Hash identifier:          dAnOBf1EJPCk/xRynmWu8Gx3phAWywzfQkR9lv9sUgo=
Subject key identifier:   B1:B6:F6:82:AE:3A:02:E6:C7:D6:80:BC:58:E2:5F:BC:1F:F3:86:B9
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       018CC5012046403CF6EE29A5913CFE7B25B2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sbb2gq46AubH1oC8WOJfvB_zhrk.roa
Signing time:             Mon 01 Jan 2024 12:30:34 +0000
ROA not before:           Mon 01 Jan 2024 12:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199614
IP address blocks:        94.176.110.0/24 maxlen: 24
                          185.241.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Dec 2024 14:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:20:46:40:3c:f6:ee:29:a5:91:3c:fe:7b:25:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan  1 12:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1b6f682ae3a02e6c7d680bc58e25fbc1ff386b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:ec:67:61:5a:f1:3a:5f:24:65:da:c1:bf:
                    f6:03:94:23:0b:45:2b:2e:3f:2e:77:77:9d:b7:f6:
                    87:1d:12:9d:13:4b:01:b6:6c:b4:02:7e:26:1f:6d:
                    34:7e:71:7f:6d:47:20:22:83:3c:1b:b6:ee:5f:c2:
                    66:da:45:82:00:c9:ff:ea:d5:92:16:68:9f:83:62:
                    f2:b9:56:5e:4c:dc:91:76:98:4a:a7:88:fc:d0:98:
                    e8:80:73:f4:e1:00:90:2b:f3:03:c6:df:59:10:6a:
                    7d:6f:de:cb:12:44:2d:71:39:80:75:c7:c6:8e:1e:
                    06:56:aa:57:d8:6b:b5:e4:b3:36:e9:5a:8c:c9:50:
                    93:5c:a5:20:6b:3d:1d:87:c1:6a:23:7d:a6:9d:50:
                    15:bc:5c:d0:de:aa:ad:dd:0d:5a:df:ff:c5:05:a7:
                    30:09:99:89:51:70:ab:d7:1a:b1:61:aa:83:04:c6:
                    12:a8:16:e2:8b:be:70:f2:bc:1f:cc:05:4c:31:81:
                    d8:48:02:98:58:6e:5c:b9:ec:dd:ae:87:94:6d:af:
                    59:d5:78:ca:f0:e7:fe:9f:ef:fa:80:98:8a:65:0f:
                    49:f1:70:0a:1c:14:70:d0:11:6a:21:ee:68:96:53:
                    7c:2e:5e:6a:99:53:e2:82:86:69:68:8d:76:72:f4:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B6:F6:82:AE:3A:02:E6:C7:D6:80:BC:58:E2:5F:BC:1F:F3:86:B9
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sbb2gq46AubH1oC8WOJfvB_zhrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.110.0/24
                  185.241.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:f5:14:18:b5:a8:f9:3a:d4:7d:ed:73:4a:fb:3c:f8:86:
         f5:c9:5d:72:13:03:ee:cb:f6:95:0f:8d:9a:2f:ba:53:54:d9:
         5f:4c:0a:e7:94:05:98:81:63:6e:01:10:55:29:fa:f4:02:46:
         ca:72:57:4f:61:8a:5e:88:9c:64:ad:69:e0:bf:1f:2d:1b:44:
         1d:d0:30:7e:ee:60:0f:f6:99:49:83:04:f5:3d:02:59:38:e1:
         e4:83:27:07:ca:78:8a:99:cd:2e:01:d2:e2:69:16:94:ca:12:
         a9:c4:95:4f:28:89:f6:c1:7b:be:36:72:c6:39:ab:84:13:3e:
         28:26:1d:84:b0:a3:a5:eb:d2:14:f5:5b:1b:73:15:13:de:1e:
         ff:6d:a7:e7:44:e3:55:6c:64:7b:37:a9:ac:0e:f7:ee:58:92:
         ff:70:5a:e4:9e:59:d2:ac:3c:da:13:7a:c2:03:37:d5:02:94:
         da:2a:57:d7:a8:ae:6e:4d:0c:ec:39:c1:c2:e7:f7:35:2e:fb:
         6e:a7:e4:f8:a2:5d:6b:db:8e:ce:b7:df:92:b6:44:14:eb:a2:
         59:80:08:f4:d8:3e:66:6c:9d:a4:b6:43:ab:08:07:7f:57:2a:
         36:19:3d:9f:75:f4:8c:09:2c:4a:28:a4:05:2b:88:b2:46:ae:
         0f:21:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 22:01:22 2024 by rpki-client on console-fra.rpki-client.org