Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/YiYxeZ-kXN71hSJr9bo7azD27b8.roa
File:                     YiYxeZ-kXN71hSJr9bo7azD27b8.roa (raw, json)
Hash identifier:          z0naVi8M0zqqDkmdT3ejLgI645AEXOCp/3QtrsnvKCw=
Subject key identifier:   62:26:31:79:9F:A4:5C:DE:F5:85:22:6B:F5:BA:3B:6B:30:F6:ED:BF
Certificate issuer:       /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial:       018CC86F17BD465E4027786A07ABFA4A22EC
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/YiYxeZ-kXN71hSJr9bo7azD27b8.roa
Signing time:             Tue 02 Jan 2024 04:29:32 +0000
ROA not before:           Tue 02 Jan 2024 04:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56550
IP address blocks:        89.34.161.0/24 maxlen: 24
                          89.33.133.0/24 maxlen: 24
                          89.36.228.0/24 maxlen: 24
                          86.105.177.0/24 maxlen: 24
                          95.142.208.0/21 maxlen: 21
                          185.8.24.0/22 maxlen: 22
                          93.117.152.0/23 maxlen: 23
                          93.117.172.0/23 maxlen: 23
                          185.163.172.0/22 maxlen: 22
                          31.177.40.0/21 maxlen: 21
                          89.42.25.0/24 maxlen: 24
                          46.102.188.0/23 maxlen: 23
                          109.230.212.0/24 maxlen: 24
                          31.14.28.0/24 maxlen: 24
                          89.32.168.0/23 maxlen: 23
                          94.177.127.0/24 maxlen: 24
                          85.204.119.0/24 maxlen: 24
                          89.32.186.0/23 maxlen: 23
                          93.115.62.0/23 maxlen: 23
                          31.214.153.0/24 maxlen: 24
                          188.241.154.0/24 maxlen: 24
                          85.204.147.0/24 maxlen: 24
                          128.0.123.0/24 maxlen: 24
                          128.0.122.0/23 maxlen: 23
                          128.0.124.0/22 maxlen: 22
                          185.157.52.0/22 maxlen: 22
                          2a03:1140::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:17:bd:46:5e:40:27:78:6a:07:ab:fa:4a:22:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
        Validity
            Not Before: Jan  2 04:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=622631799fa45cdef585226bf5ba3b6b30f6edbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:b8:4b:6e:67:94:3b:24:70:ba:1f:f7:fb:
                    52:b1:cb:8c:d5:ca:87:06:c0:18:f9:3c:7e:e7:2e:
                    84:55:b0:30:84:55:a7:bb:4c:2f:c2:32:5c:13:2c:
                    2b:94:cf:ba:19:76:6a:ef:ad:a3:b9:dd:8f:da:b9:
                    b3:48:d3:c0:0c:90:29:04:48:d0:ec:f5:01:68:74:
                    80:5b:43:99:58:6e:ed:b2:74:a3:d0:c3:5a:ab:e6:
                    74:3c:29:ad:02:1e:93:67:8b:92:1b:fd:a4:f9:3f:
                    7e:43:61:19:21:8e:f5:4a:32:ac:84:9b:ab:b9:b3:
                    85:01:4e:89:36:c3:d3:f4:82:6c:90:d2:b1:e3:2d:
                    49:1f:a8:1e:9b:34:3f:37:83:5f:b7:bb:0c:b6:49:
                    2d:8c:d7:1d:a3:cf:72:ea:d7:ef:93:2e:c4:05:ab:
                    5b:0c:1f:ed:89:ae:c5:35:2d:31:1f:69:da:6f:db:
                    0a:ae:89:7e:af:b5:cc:ef:cc:1e:6b:42:57:60:86:
                    a8:05:c4:f6:e4:88:f9:b8:36:67:e4:5f:e4:e5:42:
                    6e:3d:9c:4a:da:e2:45:fd:07:2e:a0:0b:de:d1:a5:
                    57:65:e2:55:c4:f3:c9:9f:ce:ab:98:f8:3b:aa:91:
                    ea:3b:7c:32:e7:9d:29:ae:7d:e6:0c:c7:46:98:ae:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:31:79:9F:A4:5C:DE:F5:85:22:6B:F5:BA:3B:6B:30:F6:ED:BF
            X509v3 Authority Key Identifier:
                keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/YiYxeZ-kXN71hSJr9bo7azD27b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.28.0/24
                  31.177.40.0/21
                  31.214.153.0/24
                  46.102.188.0/23
                  85.204.119.0/24
                  85.204.147.0/24
                  86.105.177.0/24
                  89.32.168.0/23
                  89.32.186.0/23
                  89.33.133.0/24
                  89.34.161.0/24
                  89.36.228.0/24
                  89.42.25.0/24
                  93.115.62.0/23
                  93.117.152.0/23
                  93.117.172.0/23
                  94.177.127.0/24
                  95.142.208.0/21
                  109.230.212.0/24
                  128.0.122.0-128.0.127.255
                  185.8.24.0/22
                  185.157.52.0/22
                  185.163.172.0/22
                  188.241.154.0/24
                IPv6:
                  2a03:1140::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:f8:bc:46:0e:65:fb:a1:0c:93:c0:e4:00:b6:6f:88:d9:
         e6:f7:63:1c:28:74:74:07:91:da:49:a4:87:99:03:1b:a6:18:
         58:77:0f:75:a4:1c:c4:bb:fb:e1:fd:7c:55:eb:84:ca:bf:b4:
         50:cd:bb:e0:54:fc:f2:58:db:4e:69:97:5f:96:a7:96:43:eb:
         c4:d0:92:8b:d2:7e:41:48:02:3a:07:0c:59:f8:86:17:52:f7:
         f3:a8:d8:31:a4:e5:c6:b0:6d:3b:73:76:31:c5:5e:8a:b2:c6:
         39:8f:08:3c:d6:6e:05:7b:82:5d:b6:06:4e:64:0d:4e:58:7b:
         7a:d2:9b:4d:d4:9b:73:16:f3:b6:b6:fe:b0:c3:dc:1f:44:50:
         4c:17:6c:0c:77:b2:dc:5d:db:ac:ca:d6:91:f5:cd:1e:db:16:
         75:b5:45:98:11:e7:48:cc:3c:e1:6b:5e:fa:c9:5f:5e:01:17:
         54:cc:ea:5a:25:2c:8d:f0:3c:d9:e2:32:8b:31:69:0e:d3:90:
         3a:a6:a4:40:35:c3:07:7d:95:23:15:23:00:a7:45:b7:d5:b1:
         a5:7a:c7:58:e1:70:47:77:a6:d1:10:f6:65:e9:a5:04:59:ee:
         f9:c0:c3:e3:1c:d7:71:bc:ea:b8:f5:c1:2e:74:e9:2e:90:12:
         fd:b3:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:42:55 2024 by rpki-client on console-fra.rpki-client.org