Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DrIkAho-ZwquJuE0fpsWLiOwU3E.roa
File:                     DrIkAho-ZwquJuE0fpsWLiOwU3E.roa (raw, json)
Hash identifier:          DZMIyHIu10VhOLAThpfpB2CyszQ/rOX/GE2fYKvLznA=
Subject key identifier:   0E:B2:24:02:1A:3E:67:0A:AE:26:E1:34:7E:9B:16:2E:23:B0:53:71
Certificate issuer:       /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial:       018CC2DB2DEDD5904B7EECA41C731AEB70D3
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DrIkAho-ZwquJuE0fpsWLiOwU3E.roa
Signing time:             Mon 01 Jan 2024 02:29:53 +0000
ROA not before:           Mon 01 Jan 2024 02:29:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207056
IP address blocks:        185.167.122.0/24 maxlen: 24
                          185.167.121.0/24 maxlen: 24
                          185.167.120.0/24 maxlen: 24
                          185.167.123.0/24 maxlen: 24
                          2a0b:6a00::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:2d:ed:d5:90:4b:7e:ec:a4:1c:73:1a:eb:70:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
        Validity
            Not Before: Jan  1 02:29:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0eb224021a3e670aae26e1347e9b162e23b05371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:e0:2c:94:16:d6:41:46:c3:76:62:75:87:
                    ce:97:ab:90:c4:7f:14:03:33:b1:94:eb:42:76:d8:
                    1e:a6:aa:51:b0:d6:ce:73:7e:df:02:9c:3c:86:68:
                    0a:c8:cf:67:9f:f2:d6:dc:c9:c2:b1:c8:8c:40:3d:
                    54:ed:b9:e8:e1:8e:aa:7b:56:c9:fa:9a:d9:5c:ef:
                    9f:e9:38:1e:5e:37:85:38:15:5d:1d:76:11:79:03:
                    89:52:25:57:6a:8b:db:49:d0:90:a6:5f:aa:bc:1b:
                    11:66:b3:4e:ea:da:f7:ed:66:0f:43:ca:b4:a9:ef:
                    e9:24:2f:0a:04:3d:f8:b0:ec:36:e5:50:84:1f:f0:
                    3a:9b:52:c5:a8:a7:f0:f4:f8:7d:22:36:58:9d:68:
                    65:0c:7c:16:7f:c9:25:de:de:ca:bc:94:88:17:6f:
                    56:0c:ad:a3:d3:c5:cb:6d:21:01:f1:a3:44:a2:e8:
                    83:ed:d7:f0:6c:35:c9:94:1a:e6:03:84:53:fb:3d:
                    19:40:3c:fd:2f:d0:f9:2e:3c:d0:d8:08:79:52:31:
                    3b:3d:a0:1c:62:23:e2:a1:44:0c:72:bb:4f:08:81:
                    20:14:06:8d:15:71:44:08:23:4e:f2:83:31:8b:6e:
                    4a:69:98:ad:14:74:9b:87:ee:72:11:64:90:e9:98:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B2:24:02:1A:3E:67:0A:AE:26:E1:34:7E:9B:16:2E:23:B0:53:71
            X509v3 Authority Key Identifier:
                keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DrIkAho-ZwquJuE0fpsWLiOwU3E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.120.0/22
                IPv6:
                  2a0b:6a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:3c:b4:d6:b4:f8:0f:d0:cb:8e:68:ff:ea:58:a9:be:2a:d1:
         75:40:ec:87:46:f8:ab:da:39:19:c9:72:6d:c9:85:c4:38:df:
         cc:12:24:39:b3:d2:0b:a8:a6:f7:8a:88:1b:d4:bd:ac:95:4c:
         a3:3f:b6:bc:01:9a:dd:94:e2:08:d3:22:b7:1b:6d:1d:45:8c:
         32:d9:03:4c:b0:72:bb:e5:a9:fc:0b:1d:1c:88:88:36:55:b8:
         9e:85:08:65:75:a8:5e:32:7e:51:3b:f6:d9:d1:1a:bf:d7:8b:
         81:71:35:a3:ed:9d:b0:0e:63:8e:01:63:a3:67:36:27:98:7f:
         cc:23:f7:7e:07:f5:cf:41:74:c2:f1:c2:1a:08:fa:d2:85:89:
         7e:68:39:e8:d0:3e:1a:f4:a3:91:be:cc:5c:bf:f0:68:f2:7a:
         86:ac:20:c2:88:9d:61:46:fe:d2:dd:3f:70:7e:c0:f1:65:bc:
         a8:52:7a:f3:72:61:aa:d9:ba:75:c1:eb:8f:ca:5e:66:3d:f2:
         cb:75:15:13:35:ce:bb:44:95:b1:11:32:90:0f:3d:6e:21:8c:
         b8:d2:01:4e:89:10:ac:58:8c:87:56:6e:bb:c2:e6:9c:8f:09:
         59:d1:fe:61:32:60:19:57:f4:bf:7f:0c:85:f5:6a:28:f7:74:
         97:2c:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:38:05 2024 by rpki-client on console-fra.rpki-client.org