Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa
File:                     7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (raw, json)
Hash identifier:          8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=
Subject key identifier:   EF:F3:1E:A9:2A:32:A5:9B:E0:B3:D6:40:2F:49:04:C1:84:34:BB:57
Certificate issuer:       /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial:       019424B3C8812C6D03EE3A977A371D6742A5
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa
Signing time:             Thu 02 Jan 2025 01:49:09 +0000
ROA not before:           Thu 02 Jan 2025 01:49:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61064
IP address blocks:        185.183.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c8:81:2c:6d:03:ee:3a:97:7a:37:1d:67:42:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
        Validity
            Not Before: Jan  2 01:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eff31ea92a32a59be0b3d6402f4904c18434bb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:78:6d:97:8c:97:5b:13:da:7b:42:5a:da:
                    52:30:9f:31:9b:e3:86:7a:a4:55:91:c0:0b:f4:38:
                    cc:f3:5a:47:48:c7:7d:63:6a:c2:7d:ba:aa:ee:87:
                    94:80:6d:35:a3:81:79:27:ab:64:b2:7e:89:e7:77:
                    8c:7a:e2:3f:f3:ed:d5:5b:3a:90:41:1e:98:70:15:
                    dd:37:fe:d3:a1:49:5d:bd:2a:db:b5:00:e1:2c:fd:
                    f3:27:a4:26:cf:7a:4d:d3:3c:01:8a:94:a3:3a:5a:
                    ed:6b:4b:42:19:32:88:6c:9c:9f:35:0c:8e:5e:29:
                    64:bf:40:ac:5d:0d:10:e0:5d:1e:aa:d2:a2:db:b8:
                    d9:e1:0d:c9:e3:de:1b:89:d0:ee:f4:e4:56:25:76:
                    ea:cb:08:81:d9:ce:c4:05:54:57:a8:1a:cc:6f:8e:
                    ee:a3:3b:13:1f:ad:07:9e:63:91:fa:74:09:01:c9:
                    e1:49:c2:e6:2c:0f:3b:d9:e0:1c:c3:38:9e:62:d3:
                    16:92:e6:b2:ee:0c:17:29:ad:82:82:69:cb:a2:38:
                    70:44:16:20:6a:96:d3:fb:63:8d:be:ee:48:55:77:
                    43:0b:b2:4f:85:a5:76:19:76:e2:0b:04:fb:82:ac:
                    c1:87:ad:e9:c2:e3:2e:cd:17:0b:d2:a0:26:e2:0b:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F3:1E:A9:2A:32:A5:9B:E0:B3:D6:40:2F:49:04:C1:84:34:BB:57
            X509v3 Authority Key Identifier:
                keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:26:fc:2d:68:ee:56:37:19:47:85:cc:7c:2d:19:1b:8b:
         0e:16:67:30:2d:2d:42:06:b4:5b:0e:83:2a:04:81:fc:a9:5b:
         58:39:d7:c5:58:15:b3:94:a9:1f:b3:d1:fe:55:ca:fe:3d:91:
         9d:9a:79:13:6a:82:76:e5:27:a7:a3:ba:37:28:0f:a4:2c:ec:
         22:4a:8c:d2:c8:1e:57:5a:20:ba:fb:1f:2f:0d:39:f1:63:dc:
         56:48:82:1a:67:78:fb:64:a9:d4:36:4a:4c:eb:08:61:b6:44:
         83:45:ca:6f:ea:13:9f:13:92:c2:aa:bf:44:9b:2e:b3:af:fc:
         96:a5:c2:70:53:09:f1:2b:e1:1c:30:bf:0b:8b:67:4e:09:62:
         b4:c4:4e:53:76:21:e7:fb:d2:a9:de:e3:72:e5:31:79:fe:3a:
         25:2b:4b:7d:3f:96:f7:63:c8:d0:c4:a5:c0:b5:17:42:f1:e6:
         01:87:44:14:bb:f2:56:18:d1:e0:a3:e0:4b:37:7b:2a:13:a3:
         a5:f9:bd:b2:07:ff:44:66:e0:6a:d4:c6:d2:60:6a:d3:56:07:
         8e:da:d1:56:1b:35:e0:3a:a1:fc:5b:01:72:ea:4e:70:a9:2f:
         7e:48:e5:17:a0:5b:6e:fc:09:14:a8:f6:41:4e:8f:50:12:e1:
         ae:54:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:12 2025 by rpki-client