Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/WrzpUoFIFug1-KmFj4vQtntCWvM.roa
File:                     WrzpUoFIFug1-KmFj4vQtntCWvM.roa (raw, json)
Hash identifier:          DA8Jiflg0gzddhInXQXT8IjqwU6HZZJyTe5oWHxyLNk=
Subject key identifier:   5A:BC:E9:52:81:48:16:E8:35:F8:A9:85:8F:8B:D0:B6:7B:42:5A:F3
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       01916F1F892CFCBA35313A75DEC2B4D2141C
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/WrzpUoFIFug1-KmFj4vQtntCWvM.roa
Signing time:             Tue 20 Aug 2024 09:30:23 +0000
ROA not before:           Tue 20 Aug 2024 09:30:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199614
IP address blocks:        80.93.192.0/24 maxlen: 24
                          80.93.194.0/24 maxlen: 24
                          80.93.195.0/24 maxlen: 24
                          80.93.196.0/24 maxlen: 24
                          80.93.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Dec 2024 14:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:6f:1f:89:2c:fc:ba:35:31:3a:75:de:c2:b4:d2:14:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Aug 20 09:30:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5abce952814816e835f8a9858f8bd0b67b425af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:6b:5c:7f:0d:e4:9f:3e:ba:0b:69:aa:6b:
                    0b:3c:4c:3b:ab:24:e5:f5:b3:a7:8c:4a:ba:d0:fa:
                    bc:f5:15:bc:e4:22:84:6b:5f:86:c0:2a:8c:9b:37:
                    0e:83:5c:38:a3:c7:7a:00:1c:f6:9f:ba:78:76:64:
                    95:1d:29:00:1a:56:8f:b8:83:68:5f:2c:fd:6d:17:
                    66:63:dd:3f:04:ef:7e:56:4c:c4:f1:63:eb:ed:1b:
                    d5:38:c6:1c:55:6c:02:34:de:b7:d4:05:a2:13:5f:
                    b3:b2:a1:20:fa:42:73:df:67:6a:ee:6f:dd:76:aa:
                    ed:d8:e4:ea:15:50:74:f5:6b:2a:f9:b8:5f:4b:84:
                    10:94:15:80:62:73:6e:14:f2:3c:70:d6:e9:28:bc:
                    43:1e:06:ea:65:33:64:0b:1b:fe:84:34:d7:52:e5:
                    57:33:33:7a:61:f9:f2:20:f5:a5:e9:90:60:86:0a:
                    a1:c3:d7:d3:63:22:10:21:8c:fe:d8:a4:f0:e8:d4:
                    fa:ad:81:77:58:f4:b4:bb:8c:da:3a:37:c0:74:4c:
                    dc:fd:4d:25:06:70:b1:1e:4e:c7:50:e3:67:17:aa:
                    e7:13:af:4e:c8:be:08:2f:9d:d1:bc:28:ea:2b:bb:
                    6d:c5:c4:b4:59:89:82:6a:30:02:f2:99:b9:f9:e3:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:E9:52:81:48:16:E8:35:F8:A9:85:8F:8B:D0:B6:7B:42:5A:F3
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/WrzpUoFIFug1-KmFj4vQtntCWvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.192.0/24
                  80.93.194.0-80.93.196.255
                  80.93.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:90:b6:cc:78:a2:5a:ce:7e:41:f8:b0:20:a9:cd:73:e3:
         ca:82:48:9c:54:46:e8:f7:eb:b3:77:a9:8d:36:48:8f:1d:ec:
         54:35:43:c1:bc:a6:d8:33:ea:f5:e4:5b:5d:16:dc:28:d1:a7:
         19:94:85:2c:0b:e0:c4:1e:b1:cd:b8:a1:23:16:e0:30:3b:60:
         4c:93:20:db:80:10:a2:c3:14:f7:05:7f:4c:71:6f:a6:86:a8:
         e8:ab:b3:5a:3d:f8:6d:9c:be:fa:d0:e2:8f:e7:ff:97:29:97:
         13:97:9c:62:89:e8:58:c9:75:88:47:4c:2d:97:2a:11:69:0d:
         de:20:0d:55:63:c0:70:aa:3d:14:c7:b5:ca:f4:fe:7a:e4:fe:
         9a:43:d3:65:fb:b9:78:6a:b0:91:c3:78:03:72:a0:9f:ba:7f:
         29:6f:48:ff:d1:80:14:6b:92:dc:7a:1e:9c:5a:6d:1c:92:1d:
         77:f5:7d:c4:e8:c9:c2:8c:cf:c0:9b:8a:a4:8a:b0:45:04:1a:
         8d:79:5a:7b:99:af:2d:c9:c0:ea:a1:06:63:ab:d1:66:8d:85:
         55:21:df:29:ad:a2:93:55:88:55:5d:9e:c8:6e:17:12:3f:45:
         ba:e1:1b:2a:2e:19:db:3e:02:1a:d8:5d:77:af:c3:78:25:bb:
         46:ac:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 22:01:55 2024 by rpki-client on console-fra.rpki-client.org