Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa
File:                     jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa (raw, json)
Hash identifier:          2oF7N7yTOxtyVqWqVHVYMJ2Ef9T/1aes9oCTIwVHYWc=
Subject key identifier:   8D:EA:B7:9A:2F:26:20:74:65:10:C6:92:09:08:6C:AE:65:CA:3B:C8
Certificate issuer:       /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial:       018CC6B7797103B729124E19BDFA9667DBF9
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa
Signing time:             Mon 01 Jan 2024 20:29:22 +0000
ROA not before:           Mon 01 Jan 2024 20:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202283
IP address blocks:        193.109.238.0/24 maxlen: 24
                          185.232.220.0/22 maxlen: 22
                          2a0c:d100::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:79:71:03:b7:29:12:4e:19:bd:fa:96:67:db:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
        Validity
            Not Before: Jan  1 20:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8deab79a2f2620746510c69209086cae65ca3bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:90:cf:57:de:14:9a:d3:e7:2c:a0:80:0b:
                    19:af:03:78:19:5f:5b:3b:22:e3:27:bd:57:f9:b9:
                    9e:d2:ea:cb:67:12:bb:04:69:7b:6c:06:0a:5a:1d:
                    1f:6c:5d:ed:24:65:ae:f0:63:12:7d:67:f4:b4:58:
                    32:ea:52:27:c3:2e:c7:79:ce:0b:8e:8b:38:d8:d5:
                    85:22:fd:d1:c5:d4:5b:b3:e0:26:7d:6a:05:97:b8:
                    65:a9:5b:f5:24:b1:a7:dd:d4:f0:b7:73:88:86:94:
                    d4:9d:dd:cd:eb:9c:e6:7b:8c:16:46:08:60:7f:c4:
                    f5:5e:f4:c0:58:ce:ed:ae:0e:1d:5c:ec:ca:e6:47:
                    cc:8b:82:3d:f5:22:08:08:25:d2:eb:4b:69:e8:c0:
                    a3:fa:6f:ee:da:59:50:7e:3b:f7:e0:3f:71:be:01:
                    db:ea:04:15:89:ad:88:e5:75:07:ac:dd:b3:e7:53:
                    08:4c:9b:57:ec:19:49:4e:46:d5:a0:fd:dd:e3:4d:
                    82:93:0a:ce:a5:de:fb:19:4a:5a:9a:a2:44:40:c5:
                    3b:60:fd:0b:dc:62:50:14:2c:40:6e:1e:c6:d5:39:
                    c4:a6:28:b0:aa:6d:b0:7b:4b:9f:3f:e4:7e:82:8b:
                    6a:e9:a0:df:76:91:56:a4:83:8b:7e:a2:29:50:5a:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:B7:9A:2F:26:20:74:65:10:C6:92:09:08:6C:AE:65:CA:3B:C8
            X509v3 Authority Key Identifier:
                keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.220.0/22
                  193.109.238.0/24
                IPv6:
                  2a0c:d100::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:77:2f:1e:fb:4c:28:9b:6a:57:04:ef:62:92:7c:fa:22:
         f2:41:cc:28:89:dd:cb:73:d5:50:b5:a7:eb:68:1a:04:fe:96:
         2f:56:a2:15:37:e6:e6:09:15:59:6e:3f:b5:ab:50:97:dd:44:
         5b:12:a5:3f:9e:b2:7f:53:84:e6:a2:7b:78:90:ee:3c:79:92:
         77:0a:82:d3:1a:50:2b:93:0c:88:69:3e:8a:ca:4e:03:97:f3:
         23:9e:f6:09:db:f9:9c:52:f2:19:43:bf:f6:ba:1f:64:a6:16:
         a0:54:c5:9f:49:1b:3c:24:b6:5c:b1:03:17:9e:2e:39:2f:7f:
         ae:88:62:01:56:05:de:d0:45:00:e0:f9:22:de:68:fb:82:ec:
         ab:2c:e0:bf:0d:5f:55:c2:d9:fe:2b:56:fc:38:ef:15:87:f3:
         47:00:71:c9:72:68:e2:ac:1e:da:eb:99:a6:e9:f4:4d:cb:ca:
         a7:27:ba:3b:99:57:27:db:48:7e:11:f7:53:34:ce:d2:e9:a8:
         be:49:03:d3:3a:3b:21:eb:83:1f:17:29:4c:20:4d:ba:8e:25:
         b7:4c:74:4a:70:9e:78:fd:d8:cf:07:c8:9c:d9:90:84:13:d7:
         13:a9:38:ad:3e:e7:10:ec:0c:19:83:a9:6e:22:ea:e5:12:19:
         c2:1b:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:13:25 2024 by rpki-client on console-fra.rpki-client.org