Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/TeEyPYJqfI_PcKT7k0_3mM8CTGw.roa
File:                     TeEyPYJqfI_PcKT7k0_3mM8CTGw.roa (raw, json)
Hash identifier:          tX9WtPeK9mqydQIFa6KA//7zs+Z0qILGxhX5Fzn6UHE=
Subject key identifier:   4D:E1:32:3D:82:6A:7C:8F:CF:70:A4:FB:93:4F:F7:98:CF:02:4C:6C
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       018FC9AE32D6F1D877BB74DF432638F82F87
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/TeEyPYJqfI_PcKT7k0_3mM8CTGw.roa
Signing time:             Thu 30 May 2024 13:26:27 +0000
ROA not before:           Thu 30 May 2024 13:26:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31673
IP address blocks:        185.62.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:ae:32:d6:f1:d8:77:bb:74:df:43:26:38:f8:2f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: May 30 13:26:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4de1323d826a7c8fcf70a4fb934ff798cf024c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:79:fe:5c:70:54:a0:71:e5:08:18:ff:da:
                    7d:ad:b5:7d:1c:6c:d0:64:f3:37:d1:08:85:aa:e8:
                    63:a5:bd:dc:51:fa:05:5f:bd:6a:61:35:a5:70:53:
                    1c:37:d3:9c:06:5d:85:a7:d2:13:9d:03:85:a0:5f:
                    6f:19:f2:19:7a:4e:7e:42:30:0c:9f:92:9d:ef:33:
                    71:14:21:73:ae:05:7c:69:ca:3a:cf:22:28:81:e4:
                    a8:6a:14:20:bb:19:30:17:03:97:0b:88:1d:67:90:
                    d2:a5:8e:b7:8b:a6:0a:96:9b:79:0a:e2:03:95:71:
                    0b:3e:fb:3a:55:1c:7e:4c:71:4f:e7:88:53:39:52:
                    5a:7c:31:06:a4:c2:92:6e:a1:3f:ed:93:ec:fa:d5:
                    63:20:5d:59:33:96:8a:b0:3f:b0:eb:2f:dd:9c:45:
                    00:2b:4b:66:7e:62:a9:73:1a:9b:53:26:97:e8:e5:
                    5f:96:bd:73:2f:da:7e:82:e6:c8:68:7f:6a:3d:78:
                    58:e9:5c:af:a6:8a:46:2e:8a:d5:79:15:2b:5b:65:
                    05:aa:74:09:d3:6e:96:fd:5d:17:c8:dc:60:cc:36:
                    0c:8f:39:78:ad:a1:0e:cd:d8:5a:57:ff:9d:69:7e:
                    89:51:70:fb:91:84:50:cc:9f:86:8d:8b:82:8c:00:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:32:3D:82:6A:7C:8F:CF:70:A4:FB:93:4F:F7:98:CF:02:4C:6C
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/TeEyPYJqfI_PcKT7k0_3mM8CTGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:c5:34:52:2e:21:24:e2:34:9e:ea:1f:f0:81:d7:b0:b4:
         4b:64:5a:ac:39:e6:8a:60:6c:8d:62:a8:3b:42:7c:4c:18:70:
         81:33:38:14:d1:a5:50:b4:26:17:2e:35:90:6f:4e:39:f9:e1:
         88:f8:94:fb:4b:8c:b7:d2:01:f0:64:87:34:0a:88:09:2b:a5:
         f4:6c:60:9e:e1:f4:2f:25:77:8f:b9:a7:c4:46:43:92:95:65:
         7a:5b:83:5e:10:45:3e:92:82:fd:b3:8b:00:b2:d6:50:02:fd:
         ab:78:c2:d9:fe:db:64:4b:f9:65:0a:6c:4c:0f:3b:08:da:8c:
         60:45:f1:63:4f:fd:03:5e:df:20:6e:2f:71:1a:f6:4a:ff:ff:
         bd:e1:48:7a:30:f7:20:6c:ad:05:0c:83:f1:00:9e:71:ec:7d:
         b0:8e:7f:91:fd:c2:14:c1:d7:37:e8:5f:78:98:93:45:1e:21:
         44:34:7c:7b:a2:dd:f4:e6:da:75:81:ca:39:41:51:05:6b:07:
         e2:28:0c:af:36:1b:04:b6:7a:bc:df:16:8d:37:98:bf:19:d8:
         05:25:a5:2d:4d:65:7c:40:4c:7a:67:77:46:3e:da:25:df:f9:
         70:82:57:8f:c9:6d:35:0c:26:98:30:97:0f:89:3b:ea:98:e3:
         e4:37:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:57:25 2024 by rpki-client on console-fra.rpki-client.org