Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/ECJQUrJi_NUGqWIEuS0xydZ7Xq8.roa
File:                     ECJQUrJi_NUGqWIEuS0xydZ7Xq8.roa (raw, json)
Hash identifier:          wY5NWIIjYPH2Mweg0Gk9J4YXPZgcP+2oWw3yJkOpJNo=
Subject key identifier:   10:22:50:52:B2:62:FC:D5:06:A9:62:04:B9:2D:31:C9:D6:7B:5E:AF
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       018CCA2BC5B16C0907E772A2E2ADC6EE4A74
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/ECJQUrJi_NUGqWIEuS0xydZ7Xq8.roa
Signing time:             Tue 02 Jan 2024 12:35:15 +0000
ROA not before:           Tue 02 Jan 2024 12:35:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211484
IP address blocks:        146.19.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:c5:b1:6c:09:07:e7:72:a2:e2:ad:c6:ee:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jan  2 12:35:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10225052b262fcd506a96204b92d31c9d67b5eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:b0:36:dc:28:b0:80:3a:a8:02:f9:73:aa:
                    6c:72:96:09:f3:0d:cf:6d:cf:4d:e8:f6:dd:41:c8:
                    c6:ea:0f:98:1c:2e:52:2b:8f:98:11:99:93:a6:53:
                    5b:0b:7d:40:8a:48:a6:e2:bd:6a:5b:d0:86:2b:24:
                    36:8d:4b:bd:85:48:34:7d:de:06:19:35:9a:fb:82:
                    9a:03:e0:ec:c5:c2:94:d0:6e:fe:31:52:eb:ac:91:
                    c1:8b:94:8c:0d:ff:39:d9:6e:7d:94:aa:9b:8a:ad:
                    11:d6:44:53:97:5c:62:df:fc:84:cb:80:ac:ef:5e:
                    79:41:3b:9b:90:34:61:ce:b7:0f:ec:9b:32:7d:65:
                    09:6f:a6:04:1e:f0:e0:26:55:7a:9d:c7:40:cc:bd:
                    a2:e8:3d:b3:c2:e6:f0:79:c8:51:68:37:7e:d3:95:
                    c3:8a:e6:7b:7a:a0:b1:18:f0:53:fd:2f:c4:0a:71:
                    50:e6:09:c8:d4:e4:36:8f:a9:07:9a:16:41:20:3e:
                    a7:c2:bf:03:79:db:3f:98:69:8b:71:df:49:33:f6:
                    28:1d:2e:e6:01:6c:1d:15:40:85:fd:4c:04:13:3a:
                    d9:7f:c0:a5:9f:8f:e3:5a:a1:de:42:55:69:0c:04:
                    12:11:d8:1e:e5:51:f7:51:f1:02:04:fc:30:55:70:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:22:50:52:B2:62:FC:D5:06:A9:62:04:B9:2D:31:C9:D6:7B:5E:AF
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/ECJQUrJi_NUGqWIEuS0xydZ7Xq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:eb:69:26:ca:11:d6:2c:4b:f9:80:c7:bf:6d:62:24:a7:
         b1:7d:0c:02:b4:3c:6b:28:91:f8:a9:01:8a:51:46:74:c5:e9:
         95:06:0a:bb:7a:a6:ab:c8:06:35:4d:6e:3d:bd:be:d7:d1:e1:
         59:9f:c4:d6:3f:f9:ba:a7:52:bf:74:0d:77:f4:c9:82:04:88:
         eb:7c:45:93:1e:9a:fc:b7:3d:4e:3b:a5:72:c1:a7:84:df:73:
         18:2f:1f:56:b3:c5:44:87:2a:6a:3d:ea:d1:f3:23:b5:a6:21:
         cb:ad:ba:39:d7:67:63:27:4e:01:7a:09:ea:72:a2:9b:df:41:
         a7:6b:97:76:6f:31:8d:f1:71:72:cd:3d:36:b1:a6:f3:b2:36:
         7b:ae:c2:54:78:84:28:4d:c4:ee:7d:a2:86:69:a0:89:96:c4:
         d1:4d:36:06:ab:62:e7:25:e6:05:6a:d0:49:9b:80:77:97:94:
         43:8d:b6:e9:d4:7e:df:33:9a:da:cb:aa:d8:1d:7a:19:5a:2d:
         93:8b:e6:ab:ce:49:6c:da:2d:fd:8e:a8:c7:34:b9:e6:58:7a:
         22:97:69:66:fd:a7:85:22:53:47:ea:3c:b5:f8:65:cf:54:53:
         6a:0b:9f:f0:a9:5b:fa:aa:e0:6f:8c:ba:36:4f:4c:76:8d:2b:
         b4:01:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:20:16 2024 by rpki-client on console-fra.rpki-client.org