Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa
File:                     T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa (raw, json)
Hash identifier:          pTYrgI+v5etvkP1DnLdvJuNvP04bVVPAfvJxUx4P/Ac=
Subject key identifier:   4F:72:26:98:96:FA:4D:4D:D5:77:2E:81:B0:01:78:A8:2F:F6:D1:DB
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       018CC56F00221A799905BCE775B24B274C20
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa
Signing time:             Mon 01 Jan 2024 14:30:35 +0000
ROA not before:           Mon 01 Jan 2024 14:30:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41703
IP address blocks:        89.252.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6f:00:22:1a:79:99:05:bc:e7:75:b2:4b:27:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Jan  1 14:30:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4f72269896fa4d4dd5772e81b00178a82ff6d1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:aa:07:d3:ac:94:f7:9e:8d:8a:ab:06:6b:
                    9a:dd:d1:f7:f8:98:ae:5e:93:58:76:51:97:0e:b9:
                    d6:d7:d2:ad:95:cb:4e:39:ce:3c:cb:22:35:bd:f7:
                    1e:38:40:97:1d:2e:7f:c7:b8:e1:4d:27:b1:e0:0e:
                    eb:9c:a8:83:39:c8:91:b8:fa:3b:7c:34:3f:5a:2c:
                    7f:73:30:79:f0:4a:40:d8:45:e6:51:11:31:b4:1c:
                    6d:1e:3f:ac:58:40:07:1d:e5:82:f3:e9:a0:c4:1c:
                    74:40:00:fe:6f:e5:99:23:1d:ed:81:40:82:c4:be:
                    72:c4:48:06:8c:76:a4:db:73:91:45:f1:3d:07:2d:
                    3f:35:fa:e9:da:a1:a2:e5:34:4b:95:6d:1f:02:20:
                    f9:19:b2:21:cb:75:9a:cc:ea:66:ff:fc:60:b9:53:
                    44:db:82:38:19:70:67:a0:fd:2c:d4:2b:91:41:4c:
                    1b:1b:58:a9:4f:36:9d:da:66:63:48:f1:ff:c1:ff:
                    52:28:6a:91:4b:a1:0a:5d:d7:a5:9f:15:c4:8c:37:
                    4b:25:eb:b3:58:17:72:52:cc:58:93:07:9a:3f:3a:
                    79:7b:20:5f:d8:a3:f4:4a:b5:b1:52:3e:95:db:ff:
                    db:2f:16:d7:ae:2b:77:ce:b5:86:2a:a6:57:0b:51:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:26:98:96:FA:4D:4D:D5:77:2E:81:B0:01:78:A8:2F:F6:D1:DB
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.252.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:31:a8:e8:3e:bc:32:58:38:6d:63:77:20:62:ec:33:ca:
         f6:70:8a:8b:bd:86:e0:78:3d:b4:3b:91:ab:64:aa:8d:2d:21:
         14:17:de:e7:0c:ee:b6:ac:71:aa:b2:3f:1f:16:05:ec:4a:06:
         64:78:d5:78:f5:c7:64:90:93:d0:d0:5d:5b:9f:10:0c:34:a7:
         72:22:fe:c2:19:22:4b:76:63:02:60:bf:36:29:5e:df:74:bc:
         4b:33:ac:8a:89:86:94:8f:32:2a:00:0a:68:66:85:0d:d3:0f:
         a8:8f:3c:bc:b1:b8:13:18:ef:90:3e:e4:5f:6f:bf:ab:46:ed:
         01:9d:a6:bd:cf:10:aa:d8:d3:21:9f:f9:1b:95:cb:26:07:5f:
         79:28:c7:fc:d7:62:1a:c2:27:d4:ed:f1:c4:e8:82:43:14:89:
         15:53:12:e8:8c:4a:5a:90:e7:c5:f7:8a:f7:a2:4e:42:54:43:
         3f:aa:3c:f2:f8:07:31:2e:51:1f:cf:85:4c:22:8b:0f:28:4b:
         4a:51:f9:2c:b9:99:d9:3a:03:34:6e:4e:78:fd:11:01:3a:6c:
         7d:33:c6:00:eb:32:62:2f:76:46:9e:ca:4e:b9:9b:7e:9b:2c:
         77:8a:de:54:53:78:d8:69:de:fd:55:c8:15:2f:62:2f:b8:53:
         33:32:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:51:40 2024 by rpki-client on console-ams.rpki-client.org