Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/uYgWW_zdLQsajiXhTq8i3RTL28Q.roa
File:                     uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (raw, json)
Hash identifier:          97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=
Subject key identifier:   B9:88:16:5B:FC:DD:2D:0B:1A:8E:25:E1:4E:AF:22:DD:14:CB:DB:C4
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       019425FC59536044CC5354D1852B876ED486
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/uYgWW_zdLQsajiXhTq8i3RTL28Q.roa
Signing time:             Thu 02 Jan 2025 07:48:02 +0000
ROA not before:           Thu 02 Jan 2025 07:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197889
IP address blocks:        193.111.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:59:53:60:44:cc:53:54:d1:85:2b:87:6e:d4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Jan  2 07:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b988165bfcdd2d0b1a8e25e14eaf22dd14cbdbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9c:bb:56:52:c2:dd:c4:3e:06:d4:24:15:2c:
                    cc:3f:1d:1a:48:25:68:3f:98:25:b9:64:16:65:f2:
                    51:8a:ea:27:60:78:76:21:34:aa:9e:bb:a2:6a:69:
                    f1:a2:96:b6:9e:00:b0:d3:df:ee:13:b8:42:b3:6b:
                    53:81:84:8f:b8:fe:65:ec:14:3b:60:fc:07:13:67:
                    b7:12:b5:e8:cf:f9:47:fe:95:f5:73:eb:15:fa:32:
                    be:c9:3a:bc:60:6c:c6:04:a7:cd:d2:b7:8f:72:51:
                    c5:67:bd:ba:04:d6:6c:2d:a1:95:38:31:f7:d9:99:
                    4e:b2:08:2a:ae:d0:16:f6:b8:a3:bb:cf:7b:4d:a8:
                    33:cf:db:47:53:e3:2e:4a:7e:09:63:47:38:5c:42:
                    26:55:29:ce:ba:73:8c:80:83:06:3b:92:06:b3:c4:
                    34:c1:9b:8a:40:72:06:da:b8:01:25:e6:db:31:93:
                    d3:c9:19:61:48:14:09:c9:dc:6b:9f:48:4b:19:ca:
                    fa:92:ac:d0:eb:21:72:11:8a:03:ec:80:dc:21:92:
                    66:d5:9e:be:95:2b:dd:8b:1a:71:db:95:b7:e3:6b:
                    34:a6:f9:10:04:de:f5:60:39:7f:cc:d9:8a:da:52:
                    91:d1:a4:7c:99:5c:11:0b:63:32:da:e3:f5:35:bb:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:16:5B:FC:DD:2D:0B:1A:8E:25:E1:4E:AF:22:DD:14:CB:DB:C4
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/uYgWW_zdLQsajiXhTq8i3RTL28Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:77:dd:24:d4:fc:54:95:85:de:f2:3c:6a:00:e4:58:90:
         27:24:ef:5f:7a:5f:0c:4e:39:c9:cd:98:e5:1b:09:44:e7:6e:
         1d:81:09:e4:34:c0:c0:39:13:c6:00:1c:a7:f5:14:81:a1:94:
         e7:be:9e:17:7a:a7:29:a5:36:41:a4:f7:b6:2f:31:4b:2e:73:
         ae:14:87:83:20:14:b9:02:f0:2a:ae:8e:4b:89:ba:86:63:b6:
         da:2e:29:c9:68:89:9e:b4:4d:50:a0:3a:22:85:78:52:41:ae:
         35:48:9c:b8:fa:3a:d8:37:e3:6c:cd:6f:c4:86:76:a9:0c:57:
         c9:15:88:4e:57:49:ee:90:a4:1a:5f:33:11:6e:61:6c:8a:21:
         c7:d5:68:13:74:ae:5a:36:0e:49:2e:1e:12:5e:a9:60:27:15:
         1f:5a:7e:e5:b3:c9:20:85:d1:12:53:78:dc:8e:0b:6a:ec:92:
         01:3f:14:a8:e5:62:72:40:5d:32:a4:c9:69:c0:35:43:c5:a1:
         96:c8:ba:03:cf:be:a4:0b:bb:1d:48:45:fb:23:3a:e4:88:d8:
         78:7f:3f:74:dd:78:4d:2d:78:c4:84:76:e0:4a:3b:46:2d:e5:
         4d:c9:34:e8:a7:0d:8d:af:ac:a9:02:42:d3:38:ba:b1:6f:25:
         05:e5:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:45 2025 by rpki-client