Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/X-fB_A5F94_q-cCyqlL3HF9GOec.roa
File:                     X-fB_A5F94_q-cCyqlL3HF9GOec.roa (raw, json)
Hash identifier:          4mphb2QHAuz4HmvgEIyCLBIo815hCRFJP876HXCkRVQ=
Subject key identifier:   5F:E7:C1:FC:0E:45:F7:8F:EA:F9:C0:B2:AA:52:F7:1C:5F:46:39:E7
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       018CC56F04EA68840CB3BEB8E0A5FCF0F724
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/X-fB_A5F94_q-cCyqlL3HF9GOec.roa
Signing time:             Mon 01 Jan 2024 14:30:36 +0000
ROA not before:           Mon 01 Jan 2024 14:30:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197216
IP address blocks:        89.252.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6f:04:ea:68:84:0c:b3:be:b8:e0:a5:fc:f0:f7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Jan  1 14:30:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5fe7c1fc0e45f78feaf9c0b2aa52f71c5f4639e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:3f:36:d4:41:f6:33:aa:24:f4:95:8d:ef:
                    66:01:c9:20:32:2d:1b:f4:f4:ff:0a:54:21:da:5c:
                    f7:bd:5f:4b:2b:10:19:9f:5f:45:03:0b:ee:76:b2:
                    47:ae:b8:d0:59:3a:d3:4f:f2:a9:f1:88:4e:a8:66:
                    1e:92:b0:08:cc:2c:f1:99:be:23:96:15:1e:26:1a:
                    be:a0:2e:05:9c:3c:93:c2:36:6c:92:e5:03:2a:c9:
                    87:82:9d:b6:a6:ae:45:3e:ca:e3:77:e8:ee:ba:8f:
                    d1:78:1f:f3:dd:dc:7b:dd:ff:37:45:43:3c:28:0a:
                    47:38:69:25:90:37:dc:55:b6:4a:57:3d:db:71:ca:
                    f0:cd:4b:10:18:1d:f2:6d:15:27:29:d6:8b:fc:f6:
                    d2:00:62:d0:c1:70:a2:69:8c:63:90:89:e8:f3:d2:
                    6c:42:2e:c5:25:e2:0a:02:2a:09:a4:3f:20:ee:f1:
                    3a:47:ce:29:f5:a8:29:c5:75:b2:18:bf:f4:dd:ae:
                    c9:30:3c:68:d5:03:44:f1:74:d6:b3:9d:9e:26:09:
                    e6:26:bb:d0:6e:a0:21:29:b5:f8:80:e0:c9:e0:56:
                    1a:3e:9a:a7:88:24:3e:46:19:ae:63:40:86:d7:3e:
                    b8:51:55:24:bc:4f:74:80:24:3f:dc:3f:2d:4a:e5:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:C1:FC:0E:45:F7:8F:EA:F9:C0:B2:AA:52:F7:1C:5F:46:39:E7
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/X-fB_A5F94_q-cCyqlL3HF9GOec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.252.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:60:16:1d:57:68:87:85:99:82:ba:87:9c:a0:8c:73:41:
         36:2f:b3:59:6d:51:9a:90:2d:06:97:f9:58:d4:cf:af:c6:e0:
         0a:d9:fe:38:79:91:97:b3:ef:9b:0b:a3:2d:21:35:79:97:94:
         db:a0:fd:0b:e9:5a:28:e7:17:d4:07:44:e0:14:2c:4f:91:4d:
         a0:6c:29:52:56:b1:ab:77:66:8e:80:bf:89:43:23:77:bd:53:
         7c:ad:5d:87:d0:5f:02:00:8d:ac:2b:71:c0:6b:d9:0b:a6:b0:
         dd:52:25:52:26:25:16:81:fb:76:ef:4b:78:e4:bd:e7:44:59:
         a2:62:9c:39:b4:ef:a4:9f:2c:1e:1c:18:9a:d4:9d:c9:59:21:
         d4:31:35:85:f8:a8:62:33:f0:15:52:65:31:30:37:3f:38:a6:
         b7:da:73:01:0e:6e:5a:9e:fe:4c:0c:ac:c5:b0:ef:1e:05:bd:
         d7:2f:cb:81:aa:48:fe:cb:5f:35:2a:4e:42:6a:f8:25:0e:cf:
         ba:d4:e9:96:42:7b:bb:0b:50:d5:e4:48:26:57:e5:8d:69:82:
         af:55:bd:41:ea:53:6a:f9:a4:25:68:03:d8:42:30:1a:cb:e4:
         84:04:b8:f5:42:db:e8:94:34:40:45:83:d9:45:ef:a7:d2:f7:
         15:4b:af:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbwTqaIQMs7644KX88PckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjQwMTAxMTQzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmU3YzFmYzBlNDVmNzhmZWFmOWMwYjJhYTUyZjcxYzVmNDYzOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyA/NtRB9jOqJPSVje9mAckgMi0b
9PT/ClQh2lz3vV9LKxAZn19FAwvudrJHrrjQWTrTT/Kp8YhOqGYekrAIzCzxmb4j
lhUeJhq+oC4FnDyTwjZskuUDKsmHgp22pq5FPsrjd+juuo/ReB/z3dx73f83RUM8
KApHOGklkDfcVbZKVz3bccrwzUsQGB3ybRUnKdaL/PbSAGLQwXCiaYxjkIno89Js
Qi7FJeIKAioJpD8g7vE6R84p9agpxXWyGL/03a7JMDxo1QNE8XTWs52eJgnmJrvQ
bqAhKbX4gODJ4FYaPpqniCQ+RhmuY0CG1z64UVUkvE90gCQ/3D8tSuVmIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/nwfwORfeP6vnAsqpS9xxfRjnnMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvWC1mQl9BNUY5NF9xLWNDeXFsTDNIRjlHT2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfz3MA0G
CSqGSIb3DQEBCwUAA4IBAQAKtGAWHVdoh4WZgrqHnKCMc0E2L7NZbVGakC0Gl/lY
1M+vxuAK2f44eZGXs++bC6MtITV5l5TboP0L6Voo5xfUB0TgFCxPkU2gbClSVrGr
d2aOgL+JQyN3vVN8rV2H0F8CAI2sK3HAa9kLprDdUiVSJiUWgft270t45L3nRFmi
Ypw5tO+knyweHBia1J3JWSHUMTWF+KhiM/AVUmUxMDc/OKa32nMBDm5anv5MDKzF
sO8eBb3XL8uBqkj+y181Kk5CavglDs+61OmWQnu7C1DV5EgmV+WNaYKvVb1B6lNq
+aQlaAPYQjAay+SEBLj1QtvolDRARYPZRe+n0vcVS6+r
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:29 2024 by rpki-client on console-fra.rpki-client.org