Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_AoHnu-LrL7vutS2iihbycCCPSs.roa
File:                     _AoHnu-LrL7vutS2iihbycCCPSs.roa (raw, json)
Hash identifier:          T8iMIJ6douLt45wTCdqKPMOuDl/a03xgbDyHNvctZuM=
Subject key identifier:   FC:0A:07:9E:EF:8B:AC:BE:EF:BA:D4:B6:8A:28:5B:C9:C0:82:3D:2B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       018CC6B946CA140D1D51DA19D88674658E06
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_AoHnu-LrL7vutS2iihbycCCPSs.roa
Signing time:             Mon 01 Jan 2024 20:31:20 +0000
ROA not before:           Mon 01 Jan 2024 20:31:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208322
IP address blocks:        85.187.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:46:ca:14:0d:1d:51:da:19:d8:86:74:65:8e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  1 20:31:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc0a079eef8bacbeefbad4b68a285bc9c0823d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:a9:28:e0:88:c0:17:f6:7a:9a:99:45:04:
                    17:0d:cd:93:9b:78:b9:57:29:d0:06:fe:dd:08:e6:
                    ee:e8:df:2f:34:48:54:45:c2:c1:44:a9:68:5d:16:
                    f3:d8:16:98:21:d4:75:c7:b9:89:90:49:b0:f8:0f:
                    ce:d1:d5:15:e3:fd:2f:17:cc:e3:80:3c:cf:95:b1:
                    c5:ab:d1:38:a5:32:dd:b2:be:6a:94:df:e1:9d:e7:
                    30:b8:a0:39:92:2f:7a:83:0d:dd:94:fc:b9:4e:69:
                    2c:85:b5:9e:e0:e9:4c:42:73:8a:40:b1:e7:6f:de:
                    d6:47:72:c6:9b:02:d8:d2:4a:d6:9d:8c:31:16:61:
                    10:ec:5d:cd:ff:7c:8b:44:97:60:44:87:53:4d:24:
                    8f:58:cb:c3:f1:d2:1d:6f:fb:fa:04:21:85:58:97:
                    a9:8d:1e:dc:22:ac:54:15:43:d9:a2:56:4e:c9:0d:
                    13:ad:58:48:e4:13:3c:53:40:e1:f0:ef:d8:e3:9e:
                    aa:16:90:6e:56:34:95:69:a8:af:a0:9f:63:04:92:
                    cc:f2:8d:35:65:95:2c:7d:80:c6:e0:8b:42:b4:c3:
                    5e:c7:0b:e9:6f:49:fb:70:43:dc:dd:42:28:88:89:
                    1b:90:4e:6c:d1:e8:e5:25:6d:7e:65:bb:ab:93:cb:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:07:9E:EF:8B:AC:BE:EF:BA:D4:B6:8A:28:5B:C9:C0:82:3D:2B
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_AoHnu-LrL7vutS2iihbycCCPSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.187.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:9f:7f:6f:9b:ba:78:f1:cb:88:43:08:6c:6b:d0:a0:ec:
         05:6d:c9:40:5b:de:39:ac:51:9e:3f:9a:5c:84:db:8b:d7:19:
         97:f4:16:1a:d6:60:ab:9b:2a:98:e5:65:5e:d7:63:c7:d3:29:
         dd:60:78:e0:2d:2b:ef:89:26:fa:27:7e:7b:0b:43:ae:6b:3d:
         ea:c8:f3:a3:6e:4f:37:64:32:4d:e9:b4:d6:8e:65:59:e4:32:
         c7:a2:ac:da:0c:8b:05:e1:5e:5f:21:23:b7:c1:af:83:a1:a7:
         17:c6:9c:14:48:72:45:56:e7:0a:12:34:36:57:f5:8d:99:11:
         ea:3d:5d:c0:5c:18:63:eb:48:b7:b0:cc:67:8b:9b:cb:98:22:
         49:e6:fe:ee:88:56:66:fb:82:45:f4:38:cb:2c:36:4d:a3:cb:
         43:39:73:cd:9f:db:38:1d:5b:54:22:11:c7:ed:4f:4b:50:0f:
         3e:e7:0c:b4:15:f9:87:20:4b:4b:37:54:4b:9a:f4:a4:68:7e:
         12:de:55:ed:93:a6:25:b5:b2:a5:04:a5:8a:46:e5:65:2b:d3:
         c2:38:c1:02:17:8e:99:d5:32:8a:64:3d:6e:e5:9e:2d:ef:fa:
         9e:f1:32:6e:b0:05:31:0e:c6:8c:a2:fe:17:68:66:c0:44:aa:
         2f:cb:95:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:38 2024 by rpki-client on console-fra.rpki-client.org