Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ws86Gr8ZWUqJAzc610e6ErHxeOc.roa
File:                     ws86Gr8ZWUqJAzc610e6ErHxeOc.roa (raw, json)
Hash identifier:          U3QhV8KX8jPx1UnJ6n9eWzNdJUea4k3ew+rYqt/Uno0=
Subject key identifier:   C2:CF:3A:1A:BF:19:59:4A:89:03:37:3A:D7:47:BA:12:B1:F1:78:E7
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       018F949FFF98B34C240CA6111A57CDD75745
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ws86Gr8ZWUqJAzc610e6ErHxeOc.roa
Signing time:             Mon 20 May 2024 06:11:04 +0000
ROA not before:           Mon 20 May 2024 06:11:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215400
IP address blocks:        45.155.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:9f:ff:98:b3:4c:24:0c:a6:11:1a:57:cd:d7:57:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: May 20 06:11:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2cf3a1abf19594a8903373ad747ba12b1f178e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:cb:c6:be:04:d0:a0:aa:59:86:d3:c0:9d:
                    92:da:57:73:0b:4b:93:8f:0f:c7:f7:55:91:93:14:
                    86:58:5a:5f:5e:b8:2c:f7:96:22:a7:9f:da:7a:59:
                    f9:72:13:47:c9:5b:6c:2e:7c:ba:e0:e8:6a:c3:fd:
                    4b:76:da:8f:3d:98:74:46:7c:f0:12:d9:5f:a3:8b:
                    ce:34:b5:17:55:b7:3c:de:a8:6e:51:6f:70:27:b9:
                    37:89:74:08:46:6d:bb:69:5a:89:56:a7:c5:59:1b:
                    65:bd:6c:e9:06:f6:2c:ca:94:e9:c5:c0:26:9e:05:
                    c3:83:59:73:29:72:bf:e7:8f:5d:dc:cc:47:89:5b:
                    1b:14:60:e7:2d:93:8d:a1:a5:08:99:25:83:e3:1f:
                    ba:e2:d5:d9:14:d9:31:33:2f:43:b9:00:79:54:35:
                    6f:49:ba:df:ef:af:d9:71:eb:eb:07:8c:e9:67:08:
                    fd:d3:0d:91:c3:4e:80:42:88:c4:ff:55:1c:63:62:
                    d3:fd:be:f2:b2:73:c2:19:b0:84:1f:8e:d4:51:c6:
                    e8:53:bb:22:90:f0:a7:c2:5c:6a:38:34:01:22:e0:
                    2d:67:e7:70:3b:ad:9d:cc:eb:2f:68:34:3f:6f:39:
                    be:f5:3d:22:be:14:2b:73:7d:13:0f:29:f7:30:6a:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CF:3A:1A:BF:19:59:4A:89:03:37:3A:D7:47:BA:12:B1:F1:78:E7
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ws86Gr8ZWUqJAzc610e6ErHxeOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:aa:8d:f5:1e:9e:46:e6:fb:21:9e:3f:c5:72:5a:ae:c3:
         a4:7a:0b:f3:f5:35:59:86:60:bd:a4:c1:23:b1:ae:04:63:24:
         33:f8:f9:47:ac:ea:9f:ef:21:e4:29:d4:f5:ed:24:9b:c1:27:
         a0:aa:d0:76:67:71:f5:53:95:13:fd:46:a3:ea:15:67:a8:eb:
         71:c3:0c:9d:2d:f7:f2:a8:c8:ab:ed:b0:37:23:5d:30:65:58:
         af:5d:08:09:86:61:d5:10:20:43:26:e8:8e:25:6e:ce:25:48:
         43:c1:90:78:9b:10:e7:61:82:42:e4:6b:e5:e6:6d:07:23:6c:
         7a:b2:93:d3:a6:1b:cd:82:d3:30:47:da:c8:a8:c6:ae:26:eb:
         38:a6:19:fc:3c:51:e9:82:37:8a:2e:07:ee:7d:db:88:ed:01:
         1f:e7:3a:05:88:43:10:e9:e6:32:b6:96:12:38:99:d5:d8:92:
         77:a7:88:ed:cc:1b:0c:07:ca:79:45:59:66:28:ed:b2:c7:eb:
         ec:00:c7:75:4b:dd:02:56:11:c1:d4:84:6b:8e:bb:cd:3a:20:
         38:02:c2:68:c0:c3:3e:ef:04:24:4d:91:00:8a:77:f2:51:49:
         a5:21:04:1e:5f:fa:fa:dc:ee:14:2f:18:98:5e:cb:3b:1c:72:
         01:c2:c6:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+Un/+Ys0wkDKYRGlfN11dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwNTIwMDYxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmNmM2ExYWJmMTk1OTRhODkwMzM3M2FkNzQ3YmExMmIxZjE3OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvnLxr4E0KCqWYbTwJ2S2ldzC0uT
jw/H91WRkxSGWFpfXrgs95Yip5/aeln5chNHyVtsLny64Ohqw/1LdtqPPZh0Rnzw
Etlfo4vONLUXVbc83qhuUW9wJ7k3iXQIRm27aVqJVqfFWRtlvWzpBvYsypTpxcAm
ngXDg1lzKXK/549d3MxHiVsbFGDnLZONoaUImSWD4x+64tXZFNkxMy9DuQB5VDVv
Sbrf76/ZcevrB4zpZwj90w2Rw06AQojE/1UcY2LT/b7ysnPCGbCEH47UUcboU7si
kPCnwlxqODQBIuAtZ+dwO62dzOsvaDQ/bzm+9T0ivhQrc30TDyn3MGrFzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLPOhq/GVlKiQM3OtdHuhKx8XjnMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvd3M4NkdyOFpXVXFKQXpjNjEwZTZFckh4ZU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvyMA0G
CSqGSIb3DQEBCwUAA4IBAQCb5aqN9R6eRub7IZ4/xXJarsOkegvz9TVZhmC9pMEj
sa4EYyQz+PlHrOqf7yHkKdT17SSbwSegqtB2Z3H1U5UT/Uaj6hVnqOtxwwydLffy
qMir7bA3I10wZVivXQgJhmHVECBDJuiOJW7OJUhDwZB4mxDnYYJC5Gvl5m0HI2x6
spPTphvNgtMwR9rIqMauJus4phn8PFHpgjeKLgfufduI7QEf5zoFiEMQ6eYytpYS
OJnV2JJ3p4jtzBsMB8p5RVlmKO2yx+vsAMd1S90CVhHB1IRrjrvNOiA4AsJowMM+
7wQkTZEAinfyUUmlIQQeX/r63O4ULxiYXss7HHIBwsYc
-----END CERTIFICATE-----
Generated at Mon Jun 17 07:25:13 2024 by rpki-client on console-ams.rpki-client.org