Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/mnPrSMgzWMjrGJwXUScu5aeEP9o.roa
File:                     mnPrSMgzWMjrGJwXUScu5aeEP9o.roa (raw, json)
Hash identifier:          DHlc6nFq2Z4rg0FFY1oT5XRIyxLTYzoUaKEj7OQnamk=
Subject key identifier:   9A:73:EB:48:C8:33:58:C8:EB:18:9C:17:51:27:2E:E5:A7:84:3F:DA
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       01926C95883DD0D92AA2729D015E07F09F27
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/mnPrSMgzWMjrGJwXUScu5aeEP9o.roa
Signing time:             Tue 08 Oct 2024 14:43:11 +0000
ROA not before:           Tue 08 Oct 2024 14:43:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210036
IP address blocks:        193.36.104.0/24 maxlen: 24
                          193.36.105.0/24 maxlen: 24
                          193.36.106.0/24 maxlen: 24
                          2a0d:d740::/48 maxlen: 48
                          2a0d:d740:105::/48 maxlen: 48
                          2a0d:d740:c001::/48 maxlen: 48
                          2a0d:d740:c002::/48 maxlen: 48
                          2a0d:d740:c003::/48 maxlen: 48
                          2a0d:d740:c004::/48 maxlen: 48
                          2a0d:d740:c005::/48 maxlen: 48
                          2a0d:d740:c006::/48 maxlen: 48
                          2a0d:d740:c007::/48 maxlen: 48
                          2a0d:d740:c008::/48 maxlen: 48
                          2a0d:d740:c009::/48 maxlen: 48
                          2a0d:d740:c010::/48 maxlen: 48
                          2a0d:d740:c011::/48 maxlen: 48
                          2a0d:d740:c012::/48 maxlen: 48
                          2a0d:d740:c013::/48 maxlen: 48
                          2a0d:d740:c014::/48 maxlen: 48
                          2a0d:d740:c015::/48 maxlen: 48
                          2a0d:d740:c016::/48 maxlen: 48
                          2a0d:d740:c017::/48 maxlen: 48
                          2a0d:d740:c018::/48 maxlen: 48
                          2a0d:d740:c019::/48 maxlen: 48
                          2a0d:d740:c020::/48 maxlen: 48
                          2a0d:d740:c021::/48 maxlen: 48
                          2a0d:d740:c022::/48 maxlen: 48
                          2a0d:d740:c023::/48 maxlen: 48
                          2a0d:d740:c024::/48 maxlen: 48
                          2a0d:d740:c025::/48 maxlen: 48
                          2a0d:d740:c026::/48 maxlen: 48
                          2a0d:d740:c027::/48 maxlen: 48
                          2a0d:d740:c028::/48 maxlen: 48
                          2a0d:d740:c029::/48 maxlen: 48
                          2a0d:d740:c030::/48 maxlen: 48
                          2a0d:d740:c031::/48 maxlen: 48
                          2a0d:d740:c032::/48 maxlen: 48
                          2a0d:d740:c033::/48 maxlen: 48
                          2a0d:d740:c034::/48 maxlen: 48
                          2a0d:d740:c035::/48 maxlen: 48
                          2a0d:d740:c036::/48 maxlen: 48
                          2a0d:d740:c037::/48 maxlen: 48
                          2a0d:d740:c038::/48 maxlen: 48
                          2a0d:d740:c039::/48 maxlen: 48
                          2a0d:d740:c040::/48 maxlen: 48
                          2a0d:d740:c041::/48 maxlen: 48
                          2a0d:d740:c042::/48 maxlen: 48
                          2a0d:d740:c043::/48 maxlen: 48
                          2a0d:d740:c044::/48 maxlen: 48
                          2a0d:d740:c045::/48 maxlen: 48
                          2a0d:d740:c046::/48 maxlen: 48
                          2a0d:d740:c047::/48 maxlen: 48
                          2a0d:d740:c048::/48 maxlen: 48
                          2a0d:d740:c049::/48 maxlen: 48
                          2a0d:d740:c050::/48 maxlen: 48
                          2a0d:d740:c051::/48 maxlen: 48
                          2a0d:d740:c052::/48 maxlen: 48
                          2a0d:d740:c053::/48 maxlen: 48
                          2a0d:d740:c054::/48 maxlen: 48
                          2a0d:d740:c055::/48 maxlen: 48
                          2a0d:d740:c056::/48 maxlen: 48
                          2a0d:d740:c057::/48 maxlen: 48
                          2a0d:d740:c058::/48 maxlen: 48
                          2a0d:d740:c059::/48 maxlen: 48
                          2a0d:d740:c060::/48 maxlen: 48
                          2a0d:d740:c061::/48 maxlen: 48
                          2a0d:d740:c062::/48 maxlen: 48
                          2a0d:d740:c063::/48 maxlen: 48
                          2a0d:d740:c064::/48 maxlen: 48
                          2a0d:d740:c065::/48 maxlen: 48
                          2a0d:d740:c066::/48 maxlen: 48
                          2a0d:d740:c067::/48 maxlen: 48
                          2a0d:d740:c068::/48 maxlen: 48
                          2a0d:d740:c069::/48 maxlen: 48
                          2a0d:d740:c070::/48 maxlen: 48
                          2a0d:d740:c071::/48 maxlen: 48
                          2a0d:d740:c072::/48 maxlen: 48
                          2a0d:d740:c073::/48 maxlen: 48
                          2a0d:d740:c074::/48 maxlen: 48
                          2a0d:d740:c075::/48 maxlen: 48
                          2a0d:d740:c076::/48 maxlen: 48
                          2a0d:d740:c077::/48 maxlen: 48
                          2a0d:d740:c078::/48 maxlen: 48
                          2a0d:d740:c079::/48 maxlen: 48
                          2a0d:d740:c080::/48 maxlen: 48
                          2a0d:d740:c081::/48 maxlen: 48
                          2a0d:d740:c082::/48 maxlen: 48
                          2a0d:d740:c083::/48 maxlen: 48
                          2a0d:d740:c084::/48 maxlen: 48
                          2a0d:d740:c085::/48 maxlen: 48
                          2a0d:d740:c086::/48 maxlen: 48
                          2a0d:d740:c087::/48 maxlen: 48
                          2a0d:d740:c088::/48 maxlen: 48
                          2a0d:d740:c089::/48 maxlen: 48
                          2a0d:d740:c090::/48 maxlen: 48
                          2a0d:d740:c091::/48 maxlen: 48
                          2a0d:d740:c092::/48 maxlen: 48
                          2a0d:d740:c093::/48 maxlen: 48
                          2a0d:d740:c094::/48 maxlen: 48
                          2a0d:d740:c095::/48 maxlen: 48
                          2a0d:d740:c096::/48 maxlen: 48
                          2a0d:d740:c097::/48 maxlen: 48
                          2a0d:d740:c098::/48 maxlen: 48
                          2a0d:d740:c099::/48 maxlen: 48
                          2a0d:d740:c100::/48 maxlen: 48
                          2a0d:d740:c101::/48 maxlen: 48
                          2a0d:d740:c102::/48 maxlen: 48
                          2a0d:d740:c103::/48 maxlen: 48
                          2a0d:d740:c104::/48 maxlen: 48
                          2a0d:d740:c105::/48 maxlen: 48
                          2a0d:d740:c106::/48 maxlen: 48
                          2a0d:d740:c107::/48 maxlen: 48
                          2a0d:d740:c108::/48 maxlen: 48
                          2a0d:d740:c109::/48 maxlen: 48
                          2a0d:d740:c110::/48 maxlen: 48
                          2a0d:d740:c111::/48 maxlen: 48
                          2a0d:d740:c112::/48 maxlen: 48
                          2a0d:d740:c113::/48 maxlen: 48
                          2a0d:d740:c114::/48 maxlen: 48
                          2a0d:d740:c115::/48 maxlen: 48
                          2a0d:d740:c116::/48 maxlen: 48
                          2a0d:d740:c117::/48 maxlen: 48
                          2a0d:d740:c118::/48 maxlen: 48
                          2a0d:d740:c119::/48 maxlen: 48
                          2a0d:d742::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:6c:95:88:3d:d0:d9:2a:a2:72:9d:01:5e:07:f0:9f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Oct  8 14:43:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9a73eb48c83358c8eb189c1751272ee5a7843fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:f2:51:fe:6e:fc:b6:36:61:b0:27:fd:ef:
                    ae:c0:85:22:17:a9:31:3b:ea:40:61:18:3a:13:02:
                    e6:33:1a:d6:5f:ef:13:1c:b8:25:e5:d2:c6:98:71:
                    fc:95:08:aa:90:64:15:36:a2:da:0b:de:f3:92:db:
                    2e:85:43:7c:c1:46:07:df:06:6d:81:66:ee:c6:d7:
                    c2:98:46:0e:1c:dd:a2:6f:a3:7a:0a:b8:90:79:17:
                    fb:86:a4:f5:47:78:ca:d0:dc:87:f8:7b:c9:26:1a:
                    04:72:fb:b9:5c:ee:a2:70:ee:6d:b4:5a:39:55:0d:
                    65:9c:34:bb:a9:6f:8c:6f:3f:a4:3d:d2:4d:87:5e:
                    ee:e6:3c:c8:4a:5e:70:72:fa:33:d4:66:4b:ed:08:
                    eb:dd:57:41:fc:6f:31:ed:38:84:2d:02:33:13:3d:
                    ed:8f:40:c5:d5:cf:8c:dd:5a:ab:e5:99:64:c8:6e:
                    c5:9a:f4:aa:f0:29:ac:21:ad:81:00:41:c5:8c:cf:
                    39:07:71:6b:fc:95:7c:d1:2d:80:da:ed:4a:18:46:
                    13:7b:10:cc:21:e4:6e:6d:43:98:6d:42:f3:57:24:
                    29:be:ae:11:fd:d6:8c:9b:73:96:9b:54:88:4b:b3:
                    3b:f1:ad:77:e1:80:c8:88:e1:37:ec:59:f6:2e:50:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:EB:48:C8:33:58:C8:EB:18:9C:17:51:27:2E:E5:A7:84:3F:DA
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/mnPrSMgzWMjrGJwXUScu5aeEP9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.104.0-193.36.106.255
                IPv6:
                  2a0d:d740::/48
                  2a0d:d740:105::/48
                  2a0d:d740:c001::-2a0d:d740:c009:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c010::-2a0d:d740:c019:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c020::-2a0d:d740:c029:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c030::-2a0d:d740:c039:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c040::-2a0d:d740:c049:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c050::-2a0d:d740:c059:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c060::-2a0d:d740:c069:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c070::-2a0d:d740:c079:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c080::-2a0d:d740:c089:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c090::-2a0d:d740:c099:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c100::-2a0d:d740:c109:ffff:ffff:ffff:ffff:ffff
                  2a0d:d740:c110::-2a0d:d740:c119:ffff:ffff:ffff:ffff:ffff
                  2a0d:d742::/45

    Signature Algorithm: sha256WithRSAEncryption
         05:dc:c3:fd:e9:c7:86:7e:17:02:1f:66:4b:57:fd:b3:3c:c3:
         fc:a9:6f:2b:bd:76:ba:d8:b0:44:d6:4a:0f:af:79:10:09:c8:
         2c:23:c8:35:27:27:f8:1f:1c:3a:79:cc:64:a3:2e:57:8d:9b:
         84:7c:37:f8:98:46:67:c8:9d:37:26:ec:6b:37:e6:d2:96:14:
         fb:f6:73:76:06:b2:b7:18:71:00:33:49:82:82:1d:26:88:12:
         0f:a3:c6:e7:ec:ce:4d:46:60:c6:a3:81:b2:02:8d:b1:1e:13:
         ce:78:a8:d1:24:65:4a:8d:a2:ae:6d:32:0d:cf:32:97:08:f9:
         c0:da:12:9e:47:47:a7:d3:76:71:5f:2a:f8:c1:e2:89:2f:b6:
         1a:e1:ea:eb:b4:3f:44:3f:33:de:23:fd:b4:e2:45:ff:a2:9c:
         6c:34:43:1d:38:d6:5d:1c:2f:a1:bd:33:47:8b:6a:ba:53:b0:
         9d:ea:7b:ae:34:d4:5b:78:4a:a5:68:d1:bc:45:5e:5b:11:aa:
         a9:5b:e0:d8:0e:10:dd:0f:bb:6f:73:29:e4:5b:99:0f:47:1c:
         b3:aa:84:f1:21:52:1c:ae:e7:7e:db:3b:b7:f3:41:dc:de:c3:
         cb:47:11:6a:ec:8f:a6:3b:aa:0f:5f:b7:d0:44:68:0b:45:9f:
         e7:e0:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:21 2024 by rpki-client on console-ams.rpki-client.org