Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/ASdw3DhI648UM4opSeUNTz19jhE.roa
File:                     ASdw3DhI648UM4opSeUNTz19jhE.roa (raw, json)
Hash identifier:          p3WRyK0nZll3h9mKKw8Awcs8358sBSJLndxU3Oam/iE=
Subject key identifier:   01:27:70:DC:38:48:EB:8F:14:33:8A:29:49:E5:0D:4F:3D:7D:8E:11
Certificate issuer:       /CN=9915558c6897fea224855cf60381857354708411
Certificate serial:       018CC50131245C0CA0DAD5C6E608C684C618
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/ASdw3DhI648UM4opSeUNTz19jhE.roa
Signing time:             Mon 01 Jan 2024 12:30:38 +0000
ROA not before:           Mon 01 Jan 2024 12:30:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206643
IP address blocks:        185.180.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:31:24:5c:0c:a0:da:d5:c6:e6:08:c6:84:c6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915558c6897fea224855cf60381857354708411
        Validity
            Not Before: Jan  1 12:30:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=012770dc3848eb8f14338a2949e50d4f3d7d8e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:ce:8d:2e:9a:75:88:1b:80:c1:47:a4:0b:
                    f9:f6:6b:28:1c:09:7c:f9:c1:9f:f1:55:0f:1d:c8:
                    04:d2:2a:4b:22:4a:2f:0a:b3:63:97:bd:13:9e:94:
                    a5:93:44:8b:e0:14:c5:f9:c5:20:4d:76:33:62:d1:
                    96:a2:33:f9:92:ad:1d:7f:73:a8:09:46:4c:d2:41:
                    43:e8:8f:00:bb:8c:b5:66:7f:ab:9c:4c:1d:fb:28:
                    57:14:6d:41:4d:e0:77:9f:50:79:fb:10:bd:fb:c7:
                    4b:76:34:03:bf:f8:a2:ce:1f:00:ff:dc:74:88:1e:
                    25:52:63:29:c5:5f:8a:2d:89:5d:ca:4f:75:ab:4a:
                    08:f2:f2:cf:d3:7f:4a:f7:91:88:68:c2:f6:a0:6f:
                    78:20:cd:80:90:80:37:f4:6f:bb:4a:f2:3f:8b:dc:
                    9a:ff:94:27:a5:c2:03:db:cf:b9:b1:10:ef:b6:79:
                    76:9d:3b:95:ec:f7:17:ba:4e:53:56:bf:80:64:17:
                    fb:99:ef:13:00:57:c9:1b:57:63:5b:ac:ad:ea:e9:
                    6c:75:e2:91:98:33:8e:34:c1:38:f6:cb:b8:7d:1b:
                    68:8a:cd:59:56:34:63:bf:ed:c8:2b:b0:c3:25:4d:
                    56:84:26:9e:fb:9c:b1:01:2a:5b:df:d6:6a:fc:7c:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:70:DC:38:48:EB:8F:14:33:8A:29:49:E5:0D:4F:3D:7D:8E:11
            X509v3 Authority Key Identifier:
                keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/ASdw3DhI648UM4opSeUNTz19jhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:9c:0c:66:8e:22:f4:8b:18:99:fd:36:0a:64:ee:90:9e:
         db:3a:89:c9:f5:74:37:86:7a:2b:b6:80:f9:94:2e:91:fb:fe:
         38:b1:05:15:39:f2:c1:a6:6c:93:6f:ae:84:10:f8:7c:f5:73:
         20:99:ba:c6:92:58:23:a2:55:4e:6d:91:e8:da:24:e5:cc:25:
         01:97:63:8f:7c:e7:8c:8c:15:a5:0c:fb:9d:0b:be:84:50:eb:
         a1:8f:55:8c:da:ee:6d:fc:07:0f:23:dc:de:c7:50:f2:c1:de:
         c7:33:4b:59:d8:58:1e:da:93:19:1c:cf:f1:86:6d:bf:c9:51:
         4d:34:0d:59:d4:1f:a6:1a:33:01:01:3d:37:9f:c7:24:0f:f3:
         18:2e:c8:3a:b5:61:6c:dd:1b:0d:e5:16:c1:87:0b:14:42:ba:
         f7:bf:8d:a2:c5:3a:5a:0e:b7:b1:88:63:96:74:f3:8d:ef:7e:
         4e:b4:e1:52:18:54:16:ca:04:4c:e1:f3:dc:36:47:2e:8e:d1:
         59:26:db:cb:75:aa:59:76:5b:09:36:b3:69:b9:fd:d1:bf:03:
         96:05:86:0a:92:40:e5:06:a5:ab:0f:8c:75:7a:82:1b:92:e7:
         3f:0b:ee:c1:51:75:8e:c7:fc:a7:af:37:94:99:39:cb:14:ec:
         c3:ed:87:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFATEkXAyg2tXG5gjGhMYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTU1NThjNjg5N2ZlYTIyNDg1NWNmNjAzODE4NTczNTQ3
MDg0MTEwHhcNMjQwMTAxMTIzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI3NzBkYzM4NDhlYjhmMTQzMzhhMjk0OWU1MGQ0ZjNkN2Q4ZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz7OjS6adYgbgMFHpAv59msoHAl8
+cGf8VUPHcgE0ipLIkovCrNjl70TnpSlk0SL4BTF+cUgTXYzYtGWojP5kq0df3Oo
CUZM0kFD6I8Au4y1Zn+rnEwd+yhXFG1BTeB3n1B5+xC9+8dLdjQDv/iizh8A/9x0
iB4lUmMpxV+KLYldyk91q0oI8vLP039K95GIaML2oG94IM2AkIA39G+7SvI/i9ya
/5QnpcID28+5sRDvtnl2nTuV7PcXuk5TVr+AZBf7me8TAFfJG1djW6yt6ulsdeKR
mDOONME49su4fRtois1ZVjRjv+3IK7DDJU1WhCae+5yxASpb39Zq/HynCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAEncNw4SOuPFDOKKUnlDU89fY4RMB8GA1UdIwQY
MBaAFJkVVYxol/6iJIVc9gOBhXNUcIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUt
MTY1Yzk2ZmY5NTI5LzEvQVNkdzNEaEk2NDhVTTRvcFNlVU5UejE5amhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUtMTY1Yzk2ZmY5NTI5
LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubRoMA0G
CSqGSIb3DQEBCwUAA4IBAQCePpwMZo4i9IsYmf02CmTukJ7bOonJ9XQ3hnortoD5
lC6R+/44sQUVOfLBpmyTb66EEPh89XMgmbrGklgjolVObZHo2iTlzCUBl2OPfOeM
jBWlDPudC76EUOuhj1WM2u5t/AcPI9zex1Dywd7HM0tZ2Fge2pMZHM/xhm2/yVFN
NA1Z1B+mGjMBAT03n8ckD/MYLsg6tWFs3RsN5RbBhwsUQrr3v42ixTpaDrexiGOW
dPON735OtOFSGFQWygRM4fPcNkcujtFZJtvLdapZdlsJNrNpuf3RvwOWBYYKkkDl
BqWrD4x1eoIbkuc/C+7BUXWOx/ynrzeUmTnLFOzD7Yfo
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:29 2024 by rpki-client on console-fra.rpki-client.org