Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Au6DgRRxXOC5_uEHAY5BHYrESl4.roa
File:                     Au6DgRRxXOC5_uEHAY5BHYrESl4.roa (raw, json)
Hash identifier:          xLoQPk2MtSaIuM8/5pUN+xQjyA+PWA0jzmidIehb6CE=
Subject key identifier:   02:EE:83:81:14:71:5C:E0:B9:FE:E1:07:01:8E:41:1D:8A:C4:4A:5E
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       018CC5DD3A181D867BA78069382472234A83
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Au6DgRRxXOC5_uEHAY5BHYrESl4.roa
Signing time:             Mon 01 Jan 2024 16:30:58 +0000
ROA not before:           Mon 01 Jan 2024 16:30:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47891
IP address blocks:        185.90.96.0/22 maxlen: 24
                          91.206.156.0/23 maxlen: 24
                          91.229.230.0/23 maxlen: 24
                          2a05:df00::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dd:3a:18:1d:86:7b:a7:80:69:38:24:72:23:4a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jan  1 16:30:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=02ee838114715ce0b9fee107018e411d8ac44a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:68:cc:ba:33:98:06:00:a4:47:43:92:95:
                    8f:9d:4e:87:65:05:3d:f7:5a:7e:be:d6:ee:43:4f:
                    a7:ea:ac:d1:d4:30:59:20:36:c3:a9:aa:f6:62:aa:
                    c8:25:75:70:59:e7:3f:3a:4a:e2:11:b8:52:67:34:
                    25:94:d8:5c:28:f8:fb:97:dc:0b:9a:7f:7b:57:c2:
                    ee:68:40:b1:f2:c5:73:e5:e7:6e:0a:29:d0:33:21:
                    cf:70:40:c7:c0:4a:27:19:f9:ab:5c:c3:e4:f7:0b:
                    5a:77:7e:bc:a9:95:45:21:bc:6b:44:a1:7c:a7:4d:
                    74:5b:2b:03:83:4a:c7:c7:65:90:13:d1:4d:06:cd:
                    a0:7b:8b:d0:c8:b0:8d:a1:f0:dd:09:cb:58:50:38:
                    b8:09:03:56:78:a5:79:9b:f9:93:21:c2:f5:ab:3e:
                    f4:9c:3e:a7:9e:a3:1f:eb:5b:b9:cc:6e:a8:da:ee:
                    ca:53:62:67:9f:76:39:9e:e1:d5:86:b5:ba:07:91:
                    c6:9f:f7:be:5b:3c:59:da:c9:78:8d:ec:96:63:2f:
                    dd:74:a4:04:0c:a9:11:47:45:4a:54:e2:df:96:1d:
                    56:b4:52:9e:d8:e8:bc:c6:6d:f9:92:f9:15:3c:84:
                    08:ff:b3:1e:06:e2:84:04:98:d0:57:40:d7:aa:56:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:83:81:14:71:5C:E0:B9:FE:E1:07:01:8E:41:1D:8A:C4:4A:5E
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Au6DgRRxXOC5_uEHAY5BHYrESl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.156.0/23
                  91.229.230.0/23
                  185.90.96.0/22
                IPv6:
                  2a05:df00::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:1f:05:0b:62:24:20:33:e3:d1:77:85:6e:ff:9b:80:35:
         20:27:00:9c:b8:59:57:97:3b:bc:3b:27:ff:0b:43:ef:d1:59:
         bb:a0:25:d9:1a:e2:0e:ab:92:5f:99:96:6f:f3:11:87:f6:a1:
         38:09:05:00:34:44:2f:c1:88:3b:2e:3d:b6:ca:4c:0f:2d:95:
         74:20:e1:f6:c7:e2:85:e1:50:43:fe:bb:95:36:74:a5:de:07:
         2a:c1:7c:fe:a2:46:d2:28:52:9f:fe:a5:4c:a9:f5:ac:6d:60:
         06:56:ce:eb:b1:cf:50:a5:cf:18:b2:8a:6c:17:12:bd:bd:99:
         be:fa:c1:77:47:18:47:29:d9:79:5f:96:4b:fa:7f:8d:7d:44:
         1b:64:04:e4:6e:2e:e4:c0:3b:63:34:c6:e4:a4:af:13:d7:0f:
         c1:8a:4f:cd:01:58:5b:05:00:9c:6d:9c:c4:8b:d1:40:6a:db:
         a5:66:0c:25:42:2f:24:ab:2f:bf:f3:fc:25:18:20:6f:ed:de:
         6b:a4:0a:65:5c:c0:d5:84:84:38:8b:99:50:da:ac:c8:cd:7d:
         62:0f:52:03:ea:17:6c:87:4c:6b:0c:34:25:11:f6:98:d6:d0:
         13:a1:77:eb:58:45:99:14:3c:6f:34:02:fa:cd:08:7f:2d:06:
         13:9b:9c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:03 2024 by rpki-client on console-fra.rpki-client.org