Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mo_K1OagCFe9ua8y4Wf1M8Ov7Ic.roa
File:                     mo_K1OagCFe9ua8y4Wf1M8Ov7Ic.roa (raw, json)
Hash identifier:          4iWDa2MWK/ViOarKlv8bsgqgzQsNS/NaevDDMEWQNoU=
Subject key identifier:   9A:8F:CA:D4:E6:A0:08:57:BD:B9:AF:32:E1:67:F5:33:C3:AF:EC:87
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019008CD5CBBCE34D8A4DB6D99794BCA297A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mo_K1OagCFe9ua8y4Wf1M8Ov7Ic.roa
Signing time:             Tue 11 Jun 2024 19:36:34 +0000
ROA not before:           Tue 11 Jun 2024 19:36:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35682
IP address blocks:        45.130.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:08:cd:5c:bb:ce:34:d8:a4:db:6d:99:79:4b:ca:29:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jun 11 19:36:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9a8fcad4e6a00857bdb9af32e167f533c3afec87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:3b:a8:7c:46:a5:44:a1:61:65:41:d8:6d:
                    11:2f:af:b6:46:b3:82:52:23:11:f4:38:ab:e5:82:
                    5c:e8:90:c2:f6:b6:7e:43:88:d7:4c:25:47:33:cc:
                    88:57:ea:aa:3e:bc:22:1e:28:40:6b:52:f6:00:09:
                    9e:7b:ac:c4:4a:b1:53:40:96:d7:a3:d6:a6:e4:ae:
                    d5:57:ac:7e:5c:c4:ec:dc:b4:80:b3:56:bc:ec:f8:
                    f1:3c:bf:ee:be:18:58:13:4e:d2:0b:27:d2:b9:c0:
                    f5:92:c6:9f:67:32:ea:b8:69:9b:63:4d:81:79:82:
                    ae:a7:ab:0e:0c:1f:da:03:c2:54:63:c1:a1:95:12:
                    95:7c:51:96:a5:95:73:42:f2:6d:27:75:5a:fc:85:
                    98:ae:06:d7:05:0e:bf:7b:a9:5b:10:19:4a:99:ed:
                    9a:18:68:72:39:dd:45:92:0b:c8:5d:6d:ad:e9:39:
                    c7:59:f7:51:8d:71:b1:c0:f4:36:13:6e:f2:91:b7:
                    f9:4b:26:d3:e9:79:c1:52:4b:59:b6:f0:44:c4:22:
                    71:0c:a0:b9:b0:0b:3d:4d:ee:ca:b1:09:f6:64:25:
                    88:40:89:cf:0c:ea:47:ed:14:98:34:4e:19:7d:f2:
                    a5:6a:57:ae:ff:ee:4b:1f:4b:8d:c1:da:56:18:21:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8F:CA:D4:E6:A0:08:57:BD:B9:AF:32:E1:67:F5:33:C3:AF:EC:87
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mo_K1OagCFe9ua8y4Wf1M8Ov7Ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:4b:88:1d:a1:d0:ff:81:65:96:0c:3d:b2:cd:a1:26:9c:
         b9:d8:a6:77:fd:bf:2b:3d:94:a9:76:43:95:75:d0:d5:00:5e:
         b3:00:eb:e4:62:4c:2f:7a:4e:ad:fb:85:bb:39:dd:da:b5:18:
         7e:b4:0a:eb:08:54:38:64:07:f9:87:26:df:b2:91:bc:29:49:
         a6:02:75:bb:8f:ee:68:14:37:88:bd:ad:37:9f:ff:99:99:7a:
         c8:4b:3e:e6:a0:32:34:c1:3c:e5:2c:ac:8e:a8:e4:14:da:ff:
         ea:0a:e3:4f:a7:8f:7e:7c:c2:e2:59:40:98:87:1f:6c:3b:bf:
         20:30:4e:87:cd:2b:f7:ff:c9:91:9d:86:eb:f1:0c:93:93:48:
         7d:be:38:9d:9f:3f:a1:1e:d5:17:11:94:61:21:ac:db:4a:12:
         58:49:47:7f:f5:a3:59:fe:5a:c3:45:b3:06:29:5a:c6:ac:63:
         da:31:0d:a0:d4:bb:a8:b7:e2:58:e4:e0:83:3e:2f:f7:4f:95:
         9f:87:99:ce:c6:ab:3c:1c:c4:b6:c0:70:ec:11:49:8a:6d:24:
         4a:57:88:91:b0:a2:37:54:e5:d2:0c:16:e1:fc:50:55:f8:e1:
         f3:00:7d:ff:dc:77:9c:79:39:92:c9:89:02:c4:b9:2f:fd:98:
         50:dd:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:03 2024 by rpki-client on console-fra.rpki-client.org