Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/Ur4R6BEVQ5ZVrCxRAx6kH6PxdNw.roa
File:                     Ur4R6BEVQ5ZVrCxRAx6kH6PxdNw.roa (raw, json)
Hash identifier:          W8F7XyXSIJMD/DWWQji23aFXLuxhBN8ESNtYelMTfZU=
Subject key identifier:   52:BE:11:E8:11:15:43:96:55:AC:2C:51:03:1E:A4:1F:A3:F1:74:DC
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       018D2CA7813CF114DA41DDDCA3D3F7A25759
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/Ur4R6BEVQ5ZVrCxRAx6kH6PxdNw.roa
Signing time:             Sun 21 Jan 2024 15:33:11 +0000
ROA not before:           Sun 21 Jan 2024 15:33:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49037
IP address blocks:        185.1.72.0/24 maxlen: 32
                          2001:7f8:a3::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:2c:a7:81:3c:f1:14:da:41:dd:dc:a3:d3:f7:a2:57:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Jan 21 15:33:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=52be11e81115439655ac2c51031ea41fa3f174dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:29:54:79:e7:bd:21:6a:53:a0:3e:6b:ce:
                    b7:12:14:d4:96:10:c9:37:56:3f:26:f4:93:c0:e2:
                    05:c5:57:40:1e:0b:e1:ec:c8:75:07:1c:49:f4:26:
                    fe:06:c4:6e:63:03:b5:01:64:60:b9:28:11:51:ca:
                    d3:46:41:fd:f3:62:1c:bb:70:14:2c:1e:d6:96:86:
                    2b:a3:a8:07:3c:f6:8b:55:7e:b6:bc:e5:f9:59:63:
                    a0:b3:9b:49:d7:29:40:a5:a7:87:a5:a6:1a:0b:72:
                    23:f7:21:07:1f:7a:25:e2:2c:86:97:97:dc:82:cb:
                    04:57:c1:e9:f0:db:d7:ca:d5:af:ad:5b:38:64:35:
                    1b:2e:00:f1:b4:ec:45:04:82:01:12:c8:39:ab:b3:
                    1d:96:ed:05:3c:54:cd:1a:17:89:0f:ed:8e:f7:b9:
                    18:f8:32:74:2a:52:48:88:11:28:c2:a8:8f:f7:00:
                    69:04:26:3c:62:14:39:57:7c:14:bd:5f:d2:85:53:
                    9b:b1:b9:43:b8:36:0b:18:7b:45:21:aa:d9:c4:02:
                    f5:ab:5d:17:98:2c:b1:1e:40:0d:5c:d5:c9:47:a2:
                    8b:b3:ad:f3:5a:a6:41:45:d4:c6:07:1f:94:0f:3f:
                    42:c2:b6:fb:ae:d4:5e:b6:e5:74:1e:48:48:e0:d7:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:11:E8:11:15:43:96:55:AC:2C:51:03:1E:A4:1F:A3:F1:74:DC
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/Ur4R6BEVQ5ZVrCxRAx6kH6PxdNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.72.0/24
                IPv6:
                  2001:7f8:a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:c4:de:b1:05:75:74:8e:23:c1:16:27:4b:28:fe:70:ed:
         00:59:20:58:31:09:84:de:ec:c4:e6:e4:91:4f:70:14:24:b4:
         c8:44:bb:43:b8:33:c6:d9:d9:fa:0a:d4:65:8f:29:7c:81:61:
         a0:90:43:cf:da:f3:0d:c0:52:e6:36:d7:9d:1f:52:c0:e2:93:
         d5:3f:46:e8:f9:17:28:ad:9d:1d:ce:b2:a7:cd:a1:45:36:87:
         21:50:37:2a:93:c6:2e:4d:3f:3f:81:f9:39:cc:13:d8:79:58:
         c7:19:27:bd:99:14:4c:ac:93:76:20:e5:4b:68:ae:35:ac:5d:
         bb:de:e5:f2:10:f3:62:5c:69:8e:1c:c0:ff:cc:5b:e0:e3:5d:
         97:99:32:60:01:34:9f:5d:65:a5:df:5a:7f:2c:43:b0:b9:39:
         8c:bb:2f:52:81:6d:2a:2b:8b:2f:65:8a:74:db:14:f0:fd:e7:
         99:19:5c:07:37:31:1d:c5:67:76:93:82:8a:dd:6d:83:13:f0:
         99:e0:52:c0:7b:9a:e8:4e:58:47:57:7f:ec:4a:7d:e3:bf:ce:
         18:c8:1a:15:5e:f9:2f:7a:3f:a3:a8:86:01:f1:ff:91:9f:cf:
         48:81:a0:c9:a3:05:73:31:ad:58:12:d6:2d:55:62:98:b4:a1:
         d2:6e:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:20:26 2024 by rpki-client on console-fra.rpki-client.org