Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa
File:                     VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa (raw, json)
Hash identifier:          eud+UAWJhETQRgK9Hydcs6PeTJ4id14PP9yNrujH5I4=
Subject key identifier:   55:65:E3:AE:A4:CF:E4:0D:56:10:4F:B9:30:A8:2A:DD:10:10:23:56
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018F38F73D2D80923F42725CFBC4BBCD6D2D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa
Signing time:             Thu 02 May 2024 11:01:18 +0000
ROA not before:           Thu 02 May 2024 11:01:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212017
IP address blocks:        45.90.236.0/24 maxlen: 24
                          45.90.237.0/24 maxlen: 24
                          185.106.124.0/22 maxlen: 24
                          185.121.12.0/22 maxlen: 22
                          185.128.52.0/22 maxlen: 22
                          185.227.172.0/22 maxlen: 22
                          185.232.8.0/22 maxlen: 24
                          193.17.180.0/24 maxlen: 24
                          193.17.182.0/24 maxlen: 24
                          194.48.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:3d:2d:80:92:3f:42:72:5c:fb:c4:bb:cd:6d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: May  2 11:01:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5565e3aea4cfe40d56104fb930a82add10102356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:f3:a2:b2:6a:33:2e:18:b4:d9:db:84:d5:
                    77:48:07:d5:15:44:e7:eb:32:1a:db:96:d6:85:33:
                    f6:3c:8e:79:f1:38:58:d4:aa:6b:85:25:5b:a1:36:
                    6e:6e:89:aa:10:e2:81:19:02:22:d6:a3:68:d1:c9:
                    f9:02:e1:e0:77:46:75:55:f7:de:29:de:bf:97:ed:
                    a1:31:e2:97:94:55:3f:42:d3:25:e6:e3:83:42:1e:
                    f7:20:50:29:b2:7b:29:af:cb:ab:a0:ea:ad:29:b3:
                    b6:5f:59:f4:3c:1d:f0:59:43:ff:97:06:8c:bb:6c:
                    d4:63:f0:9b:e1:07:ef:36:1b:08:6c:12:87:6b:ae:
                    46:84:99:8a:8c:e0:69:51:41:38:07:f9:9c:cd:88:
                    70:ca:a5:50:0e:e0:8b:2a:75:66:03:1e:6e:e1:20:
                    f3:c7:9d:27:7c:45:3a:54:ca:14:45:15:96:eb:09:
                    15:58:97:aa:3b:ae:5e:fa:13:df:6c:b8:c6:d7:1a:
                    31:30:e0:eb:64:47:bf:19:90:4a:5f:4f:fe:b5:3b:
                    23:67:bd:97:1e:98:31:36:db:85:8f:3e:1b:d9:e3:
                    26:63:02:14:24:b7:95:da:42:bd:3c:ed:93:3d:10:
                    2c:1f:4e:0d:86:41:f9:d4:ba:3a:64:a6:ab:8f:e3:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:E3:AE:A4:CF:E4:0D:56:10:4F:B9:30:A8:2A:DD:10:10:23:56
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.236.0/23
                  185.106.124.0/22
                  185.121.12.0/22
                  185.128.52.0/22
                  185.227.172.0/22
                  185.232.8.0/22
                  193.17.180.0/24
                  193.17.182.0/24
                  194.48.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:22:65:13:c6:8f:9f:dc:08:49:9c:3b:d0:92:f4:be:08:
         ad:46:92:b6:b1:f3:5e:bc:b8:40:f7:15:bf:ed:1a:b0:a8:63:
         aa:64:5d:f9:5c:ad:1e:4a:4a:8f:7e:ea:b5:d9:8c:6d:d8:c2:
         64:bc:b2:91:74:c4:a6:e5:9c:57:6f:9e:46:7c:f1:f4:a8:3a:
         29:18:6b:c3:72:c9:84:ae:90:a6:21:f8:b7:76:58:ec:54:f6:
         9b:76:fa:36:ea:a6:c4:e3:fa:2b:07:1f:c8:a6:3e:63:01:30:
         01:3f:78:6c:c9:0c:65:dd:0f:e5:76:09:47:51:38:53:40:dc:
         67:ac:8e:31:45:73:b5:21:bc:e8:b5:10:8f:ab:7a:4d:f4:3f:
         39:f8:1e:44:b6:9e:e9:39:36:9a:74:60:47:5c:32:6a:3b:d8:
         dc:f0:3b:f9:2b:30:4a:cb:51:a2:76:65:58:14:98:dc:01:27:
         a8:c4:ea:cb:67:32:20:f4:62:3e:de:1d:14:5c:55:fa:83:ab:
         1d:c7:76:cf:65:cb:5d:d6:22:0c:fd:56:ec:32:c6:7b:d4:a0:
         0f:f3:96:57:4e:12:30:29:a1:27:93:ec:0a:1d:82:6a:80:eb:
         c6:84:67:5e:ad:93:8e:08:51:ae:71:0f:e2:64:85:d7:52:60:
         60:78:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:13:59 2024 by rpki-client on console-ams.rpki-client.org