Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/X9Vxskz6hr3mfW7gnPoonFxPOus.roa
File:                     X9Vxskz6hr3mfW7gnPoonFxPOus.roa (raw, json)
Hash identifier:          RiSanlmiMM2m/zrCD850fDUyebFT7ecfAdHzTK3IVOs=
Subject key identifier:   5F:D5:71:B2:4C:FA:86:BD:E6:7D:6E:E0:9C:FA:28:9C:5C:4F:3A:EB
Certificate issuer:       /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial:       018E3D2A48FB366C9C1529FA1301221A98AA
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/X9Vxskz6hr3mfW7gnPoonFxPOus.roa
Signing time:             Thu 14 Mar 2024 13:32:45 +0000
ROA not before:           Thu 14 Mar 2024 13:32:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201709
IP address blocks:        185.41.104.0/23 maxlen: 24
                          2a01:55e4::/30 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:3d:2a:48:fb:36:6c:9c:15:29:fa:13:01:22:1a:98:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
        Validity
            Not Before: Mar 14 13:32:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5fd571b24cfa86bde67d6ee09cfa289c5c4f3aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:ed:e5:f4:e0:b2:15:6b:3e:95:91:26:14:
                    ee:ab:84:c8:1c:bc:cb:1a:37:c7:26:f4:8a:be:92:
                    8b:75:55:0f:ff:46:d1:41:67:80:17:cd:99:98:0c:
                    33:12:e9:2c:39:91:fc:94:38:40:46:46:33:a0:d5:
                    06:39:ab:80:ba:a5:ff:0e:b5:64:a3:38:73:f2:53:
                    ed:21:94:00:f8:54:91:a5:2c:ba:10:4e:5b:09:16:
                    45:df:de:72:6a:fe:f6:32:13:ef:58:19:e5:d2:70:
                    cf:f4:91:fa:ae:a9:aa:f6:db:ab:a7:4f:53:27:f0:
                    88:a7:b4:ed:16:d9:f1:9e:14:4e:85:ef:42:fa:c7:
                    d4:19:ab:9a:fd:bf:45:27:c5:6c:51:3c:1b:17:10:
                    4c:7f:85:6c:df:92:4d:38:92:f0:e1:36:34:a7:4a:
                    a2:3e:d6:42:af:7d:1e:0a:a8:eb:12:e9:17:11:9e:
                    1a:10:09:e0:54:9a:18:df:49:df:ed:80:71:9d:c8:
                    5c:9e:a5:13:0a:5f:f1:7b:be:7c:4d:3f:f0:f3:ca:
                    45:33:80:33:56:3c:30:8c:e3:30:27:e6:01:a0:d8:
                    39:11:ba:0f:de:e3:e2:09:91:02:bc:33:b9:14:d4:
                    a0:1a:0a:fa:ae:9f:95:23:91:e7:cb:89:fd:ec:b4:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D5:71:B2:4C:FA:86:BD:E6:7D:6E:E0:9C:FA:28:9C:5C:4F:3A:EB
            X509v3 Authority Key Identifier:
                keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/X9Vxskz6hr3mfW7gnPoonFxPOus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.104.0/23
                IPv6:
                  2a01:55e4::/30

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:fd:d8:77:50:eb:10:1f:be:45:39:b3:0f:56:c2:7b:31:
         a3:a9:44:d1:b2:b7:19:70:13:28:6f:f9:2b:c0:a1:4d:f6:df:
         90:ad:c4:f9:57:8c:9f:ff:f0:8f:70:a7:5a:d0:3c:36:9e:b0:
         fc:e6:ca:9f:d7:10:e8:6a:d3:64:4f:e5:0c:b9:1b:5d:68:95:
         dd:25:5c:19:d1:63:6d:d7:e5:43:2e:0f:52:b3:1b:74:da:82:
         37:a4:30:67:84:53:b1:96:3b:1c:9b:07:bf:4d:84:52:44:2e:
         12:77:1d:47:9c:94:9a:05:d6:19:ec:f7:05:4f:0e:5f:57:dc:
         22:8d:40:48:f6:d5:99:2f:34:e6:6f:0b:0a:9c:03:5c:3c:9f:
         8d:07:c0:08:fd:32:76:7c:36:37:32:63:08:01:15:04:c4:d4:
         49:86:6f:f7:6d:88:4a:d3:c9:c7:87:72:a0:e4:f2:9c:a1:6c:
         14:16:36:db:60:ee:ac:1c:f5:20:6d:e3:1b:67:35:c0:eb:96:
         81:c9:ed:14:84:d5:c8:1a:cd:da:e4:b0:c2:e1:eb:ff:c8:0a:
         2e:2c:fc:ee:40:a7:28:9a:3f:c3:e4:2e:51:99:4a:13:e0:9f:
         ec:9a:73:b3:17:d2:07:09:df:ec:be:6c:ed:8b:ef:f1:0d:cb:
         0d:39:ce:48
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY49Kkj7NmycFSn6EwEiGpiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWVhZGMwMDMyODUwMjM2ZmVlNzU2ZWI1OGZiZjA1ZTEz
MTZiNWUwHhcNMjQwMzE0MTMzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQ1NzFiMjRjZmE4NmJkZTY3ZDZlZTA5Y2ZhMjg5YzVjNGYzYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2bt5fTgshVrPpWRJhTuq4TIHLzL
GjfHJvSKvpKLdVUP/0bRQWeAF82ZmAwzEuksOZH8lDhARkYzoNUGOauAuqX/DrVk
ozhz8lPtIZQA+FSRpSy6EE5bCRZF395yav72MhPvWBnl0nDP9JH6rqmq9turp09T
J/CIp7TtFtnxnhROhe9C+sfUGaua/b9FJ8VsUTwbFxBMf4Vs35JNOJLw4TY0p0qi
PtZCr30eCqjrEukXEZ4aEAngVJoY30nf7YBxnchcnqUTCl/xe758TT/w88pFM4Az
VjwwjOMwJ+YBoNg5EboP3uPiCZECvDO5FNSgGgr6rp+VI5Hny4n97LT6eQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF/VcbJM+oa95n1u4Jz6KJxcTzrrMB8GA1UdIwQY
MBaAFKxercADKFAjb+51brWPvwXhMWteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt
YzIzOGNlNDgxN2RiLzEvWDlWeHNrejZocjNtZlc3Z25Qb29uRnhQT3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri
LzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuSloMA0E
AgACMAcDBQIqAVXkMA0GCSqGSIb3DQEBCwUAA4IBAQAqFP3Yd1DrEB++RTmzD1bC
ezGjqUTRsrcZcBMob/krwKFN9t+QrcT5V4yf//CPcKda0Dw2nrD85sqf1xDoatNk
T+UMuRtdaJXdJVwZ0WNt1+VDLg9Ssxt02oI3pDBnhFOxljscmwe/TYRSRC4Sdx1H
nJSaBdYZ7PcFTw5fV9wijUBI9tWZLzTmbwsKnANcPJ+NB8AI/TJ2fDY3MmMIARUE
xNRJhm/3bYhK08nHh3Kg5PKcoWwUFjbbYO6sHPUgbeMbZzXA65aBye0UhNXIGs3a
5LDC4ev/yAouLPzuQKcomj/D5C5RmUoT4J/smnOzF9IHCd/svmzti+/xDcsNOc5I
-----END CERTIFICATE-----
Generated at Sat Jun 15 11:19:53 2024 by rpki-client on console-fra.rpki-client.org