Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/0oB6rGpjA579_EwWTQdqTcoNnjE.roa
File:                     0oB6rGpjA579_EwWTQdqTcoNnjE.roa (raw, json)
Hash identifier:          4jPghMG+oCaI/pDHmTM4q/yMKFAkcHNz0LZ8MAQFXig=
Subject key identifier:   D2:80:7A:AC:6A:63:03:9E:FD:FC:4C:16:4D:07:6A:4D:CA:0D:9E:31
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       018CC5006C9993CC6592D217F5CAB051D7DE
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/0oB6rGpjA579_EwWTQdqTcoNnjE.roa
Signing time:             Mon 01 Jan 2024 12:29:48 +0000
ROA not before:           Mon 01 Jan 2024 12:29:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15830
IP address blocks:        193.34.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:6c:99:93:cc:65:92:d2:17:f5:ca:b0:51:d7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Jan  1 12:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d2807aac6a63039efdfc4c164d076a4dca0d9e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:65:54:08:66:14:21:79:18:1a:1f:50:92:
                    6d:a5:4e:7e:95:fe:76:29:d0:6a:3d:25:23:35:df:
                    4b:be:1f:18:96:a8:34:42:8f:0e:3f:23:51:df:d8:
                    9a:e3:74:f0:11:8a:ba:e9:eb:d5:e4:b9:0d:0d:9e:
                    3a:6a:c5:13:00:82:13:38:da:53:49:fc:ac:93:7a:
                    80:32:8f:03:53:7e:e7:a2:3f:83:a0:5e:47:c1:25:
                    e5:2a:1f:11:13:91:09:4c:6d:03:48:53:ce:cf:d8:
                    4e:e5:87:4f:02:d6:8f:7d:cb:35:eb:05:72:51:de:
                    91:1f:48:aa:b3:bc:86:93:67:f6:a6:77:2a:e7:e3:
                    a8:fb:72:ae:a2:84:be:8b:fd:01:72:54:ba:07:5a:
                    7b:3b:e3:95:a3:cc:c2:78:23:8c:7f:74:fe:7d:e4:
                    06:0b:3d:88:ab:ad:cc:00:11:e5:fb:78:3f:05:0f:
                    0e:3e:03:b0:b8:b9:a3:4f:1d:92:95:a8:37:06:9d:
                    5d:4b:53:48:6c:a5:f8:7e:72:1b:bb:eb:cc:9c:26:
                    d2:75:68:71:dc:88:69:1b:3e:56:8f:f1:a9:2f:6f:
                    3a:18:f7:c3:e8:8e:94:bd:8b:ab:28:78:4e:a3:07:
                    b0:aa:13:57:1c:21:71:71:33:ee:f2:5f:27:6e:8f:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:7A:AC:6A:63:03:9E:FD:FC:4C:16:4D:07:6A:4D:CA:0D:9E:31
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/0oB6rGpjA579_EwWTQdqTcoNnjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:2b:09:c7:0a:2a:94:19:be:30:5f:c5:ce:02:7e:99:b5:a2:
         db:cd:c9:ec:4c:64:4c:2e:f5:b1:ac:8c:04:ba:c5:02:4f:f0:
         fe:e3:c1:41:27:01:47:7e:61:ab:8d:5d:8d:01:79:ed:2e:4b:
         92:db:63:33:99:30:5f:98:32:3e:ec:59:d6:4f:bf:1c:81:52:
         3a:48:fe:5e:f9:d2:46:66:56:82:f2:69:8e:91:c5:cc:a1:16:
         f5:fe:3c:69:70:4c:18:09:df:76:f9:b4:d9:0b:68:1a:43:e4:
         72:22:e9:73:a9:7d:86:72:84:c7:67:a9:38:42:da:99:85:49:
         df:ae:c8:41:b2:dd:5a:6b:6f:72:09:51:8c:72:83:e5:23:4b:
         b5:41:1f:f6:64:c4:04:89:6d:fa:27:6d:d8:3c:c7:fd:81:b5:
         36:7a:5e:ad:1a:43:a0:c3:c9:a8:ca:68:1d:c4:78:04:e1:63:
         df:bb:2f:11:14:cf:fc:81:86:09:b3:7c:3e:e7:fb:02:e2:c8:
         b4:2a:d5:c9:4f:b4:fc:21:2f:da:6a:cd:24:92:86:44:9d:20:
         cb:16:48:e5:1c:2b:77:03:67:fa:5c:49:83:11:e9:21:6f:e9:
         91:1a:70:d9:a1:05:d3:ec:02:59:1d:f6:1c:97:fc:75:c4:36:
         13:8b:af:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:51:08 2024 by rpki-client on console-fra.rpki-client.org