Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa
File:                     iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa (raw, json)
Hash identifier:          UL7/hqPAtlUAPV17SaCcOm/8+EaEmdYUpCIbwuHD0U4=
Subject key identifier:   88:10:3D:54:48:BD:68:13:C5:D0:E9:08:F9:C2:E2:F0:3A:7D:51:9B
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0192F81C515BC81A77E36018150964EC6D72
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa
Signing time:             Mon 04 Nov 2024 16:57:38 +0000
ROA not before:           Mon 04 Nov 2024 16:57:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208708
IP address blocks:        88.209.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f8:1c:51:5b:c8:1a:77:e3:60:18:15:09:64:ec:6d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Nov  4 16:57:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=88103d5448bd6813c5d0e908f9c2e2f03a7d519b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:02:7a:36:f7:de:cf:74:b1:7b:01:9b:f7:
                    93:5a:80:75:4a:7f:9f:92:ef:49:8f:58:86:6a:5b:
                    9a:c3:71:42:2a:a9:d9:7a:77:b0:ef:58:ac:28:cf:
                    1d:49:9f:14:95:25:07:f1:44:a0:b7:78:37:c4:15:
                    44:64:a4:cc:cb:08:8c:8a:af:f8:4a:6e:1e:0b:4d:
                    9a:ae:ad:f2:eb:4d:d8:38:c7:23:fb:f6:ee:79:68:
                    06:60:21:d1:3f:03:c7:aa:43:bd:92:31:d5:86:75:
                    ad:d3:16:08:47:17:6c:cb:f6:85:4d:6b:96:7c:fb:
                    d1:e9:23:a4:d2:4a:fa:f6:16:ad:f4:23:44:15:0b:
                    c7:42:8d:d9:65:dd:da:b5:c5:62:fa:6d:85:e4:ad:
                    cd:36:5a:e6:7c:03:94:71:35:c5:73:99:1e:29:6b:
                    5b:e5:b9:27:05:6c:4a:b4:bb:1b:9c:df:52:c9:86:
                    32:c6:95:59:05:2f:73:36:80:d3:65:0e:79:bc:15:
                    37:f7:85:5c:ba:cf:a6:43:e1:09:4b:80:ae:7f:77:
                    aa:fa:a3:d9:c8:58:d3:56:9b:02:eb:0c:10:19:9a:
                    a7:02:eb:a3:63:64:13:7e:0e:18:99:e9:81:f5:14:
                    5e:83:a6:b9:c4:73:a9:fb:ff:44:76:05:09:c2:b6:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:3D:54:48:BD:68:13:C5:D0:E9:08:F9:C2:E2:F0:3A:7D:51:9B
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.209.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:d7:9b:65:f7:69:7f:70:8f:5b:30:c8:07:1e:e9:48:41:d8:
         6c:71:c2:5a:b3:f1:04:da:3b:85:1e:54:46:92:66:90:52:9a:
         70:de:ab:31:fa:41:15:2d:c0:a3:a7:a8:59:3b:14:a0:48:d2:
         b5:75:68:c2:9c:1c:7f:10:96:87:08:4c:ae:9d:ad:2f:d6:6f:
         51:7d:48:92:da:54:a5:55:81:4f:ed:b0:0b:73:8c:b3:e0:9e:
         c8:6c:b7:41:24:fc:d2:b8:27:0a:0b:7d:0a:1c:ad:8f:46:c1:
         bd:cb:d1:52:33:ea:12:1d:b5:19:b4:fb:8b:51:b7:73:60:95:
         c2:21:1b:ac:74:a0:16:bf:32:42:00:64:e8:1c:94:9a:43:c8:
         af:34:5f:4f:36:44:c4:88:05:72:4e:3a:8d:08:97:90:3e:75:
         55:f3:49:3a:7b:96:4d:3b:e8:71:e7:01:68:11:63:a8:d7:d3:
         c1:b9:5b:8e:f9:ec:aa:83:25:0d:3a:d6:ec:da:a2:46:01:27:
         88:47:db:65:c5:77:56:ac:46:70:33:8b:dc:9c:b9:66:73:40:
         3d:c9:5a:d5:0d:72:c4:7f:07:d7:fc:a0:62:3d:6b:1e:13:3f:
         5b:4c:d5:f9:c6:f0:f4:99:63:c1:d6:a0:e3:58:a3:36:c7:ee:
         ad:2a:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:23 2024 by rpki-client on console-fra.rpki-client.org