Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa
File:                     Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa (raw, json)
Hash identifier:          D0n9E5v2CMo767V0GKDClvmsokbEw9b6M609MX+t+rE=
Subject key identifier:   12:E8:F4:C9:3E:D3:CB:3B:2A:CD:CA:EB:45:1F:23:EC:85:87:1C:8B
Certificate issuer:       /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial:       018CC26D5D77515115BFF3C12890C6482504
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa
Signing time:             Mon 01 Jan 2024 00:29:56 +0000
ROA not before:           Mon 01 Jan 2024 00:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60516
IP address blocks:        185.30.4.0/22 maxlen: 22
                          185.30.4.0/23 maxlen: 23
                          185.30.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:5d:77:51:51:15:bf:f3:c1:28:90:c6:48:25:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
        Validity
            Not Before: Jan  1 00:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12e8f4c93ed3cb3b2acdcaeb451f23ec85871c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:f4:77:6f:05:62:ea:74:cf:ee:cc:bf:1d:
                    6e:8f:e6:99:6b:ed:63:f3:e4:4e:7f:56:f8:d1:71:
                    bd:18:8a:37:13:09:26:43:14:8b:11:10:0b:33:ed:
                    2b:cc:3e:34:a6:d8:3f:57:00:bb:22:bc:77:e6:ab:
                    c4:9d:1f:81:8c:1f:82:e1:d2:61:1f:93:98:60:d7:
                    a6:cb:4a:9c:09:15:9b:fb:83:3c:9a:ad:bf:28:f6:
                    ea:5d:56:c7:6d:28:dd:ad:12:f7:95:93:54:90:8b:
                    b5:c2:ff:ae:9d:7a:2c:f7:b3:17:1d:85:f1:fe:31:
                    59:2d:74:07:39:7f:4f:f3:50:a5:69:c2:fd:04:ed:
                    2c:04:d7:6a:c3:14:31:ca:0d:52:9c:fa:8b:fc:87:
                    a3:e8:d6:3d:d0:aa:c1:7e:95:04:e7:28:d8:bf:c6:
                    e7:9f:09:54:21:11:ac:8f:59:cd:5d:8f:72:5f:91:
                    ea:34:4c:97:99:c2:97:e0:7e:87:b8:bb:e0:2e:95:
                    b7:c1:ea:f5:f2:b1:c9:08:cc:c7:ae:3f:21:e3:c0:
                    7e:0f:cf:60:00:8e:ef:7f:41:34:f5:2a:ea:e9:e9:
                    7f:b8:69:42:9d:50:1c:59:2e:17:a8:35:1d:f7:76:
                    32:b4:82:e2:d8:c0:06:a5:66:f5:9d:85:12:56:08:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E8:F4:C9:3E:D3:CB:3B:2A:CD:CA:EB:45:1F:23:EC:85:87:1C:8B
            X509v3 Authority Key Identifier:
                keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:83:31:58:8d:a3:6a:2a:81:e9:37:b4:28:55:93:eb:50:a4:
         ed:0b:fe:d2:a2:c7:39:54:09:e6:12:44:f7:de:53:03:bc:31:
         48:c4:a6:98:f5:df:10:79:3a:45:a4:ac:c7:4e:70:f3:bb:f9:
         e1:e8:c1:40:fe:14:49:61:f4:56:05:ef:ba:ac:50:69:fc:03:
         bc:6a:ec:ef:57:27:2c:bb:89:c6:ab:0f:9c:ef:75:27:aa:90:
         04:cf:ac:bd:19:29:7c:cb:9a:d8:1c:6c:a3:b9:b4:14:2f:1d:
         80:f7:3f:5e:ab:59:13:92:73:7f:d1:b6:30:3e:3d:9e:73:3c:
         1f:09:b7:1e:cb:44:d3:38:bd:d0:d0:45:ca:9b:3d:c2:19:9a:
         81:23:0b:01:e7:7f:b1:d8:74:b6:5a:98:10:ee:0a:af:d5:56:
         89:82:e5:a8:6a:8d:b2:7b:8a:6b:ef:8e:02:1b:10:4c:1e:1c:
         a1:b0:58:2b:20:44:ef:88:4b:11:53:6f:4a:cf:99:a3:4d:bd:
         43:fb:8a:3d:56:f3:e2:3e:29:7f:62:2e:70:19:4c:1a:54:9b:
         dc:39:39:db:e2:24:f9:5e:86:3b:eb:ee:ec:50:7e:3d:2f:f5:
         a2:4a:f8:ef:aa:55:91:09:ef:a7:e5:c8:5a:8f:0b:45:a7:a5:
         57:72:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:15:47 2024 by rpki-client on console-fra.rpki-client.org