Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/AMMuLV4X9SKgZRrLuWd2DIpJcg4.roa
File:                     AMMuLV4X9SKgZRrLuWd2DIpJcg4.roa (raw, json)
Hash identifier:          qjurV5evmdOi56dIEW5rD/bcNZ6PUno9sSNjQLHH0dE=
Subject key identifier:   00:C3:2E:2D:5E:17:F5:22:A0:65:1A:CB:B9:67:76:0C:8A:49:72:0E
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019020B86764CD03012571E10049CC3FC36A
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/AMMuLV4X9SKgZRrLuWd2DIpJcg4.roa
Signing time:             Sun 16 Jun 2024 11:04:34 +0000
ROA not before:           Sun 16 Jun 2024 11:04:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202391
IP address blocks:        46.34.160.0/22 maxlen: 24
                          89.42.196.0/22 maxlen: 22
                          89.42.196.0/24 maxlen: 24
                          89.47.196.0/22 maxlen: 24
                          89.47.197.0/24 maxlen: 24
                          89.47.198.0/24 maxlen: 24
                          89.47.200.0/22 maxlen: 22
                          89.47.200.0/24 maxlen: 24
                          89.47.201.0/24 maxlen: 24
                          89.47.202.0/24 maxlen: 24
                          92.114.48.0/23 maxlen: 24
                          92.114.48.0/24 maxlen: 24
                          92.114.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:20:b8:67:64:cd:03:01:25:71:e1:00:49:cc:3f:c3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Jun 16 11:04:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=00c32e2d5e17f522a0651acbb967760c8a49720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:b4:71:de:3c:a7:df:09:5b:f4:9f:7a:f2:
                    9b:ee:75:a5:65:90:83:1c:91:46:6e:de:95:06:33:
                    45:3d:16:fd:1f:3d:87:d6:d5:01:1a:02:97:8f:43:
                    61:86:cf:12:a8:ba:51:d5:43:5b:79:2b:07:9b:e8:
                    3c:0e:98:1d:f9:07:f4:7b:fe:8a:83:a0:d8:d4:97:
                    92:01:ba:47:19:1f:6a:34:b5:d5:ca:b1:b1:b0:f2:
                    49:1b:34:2f:b9:5f:b5:d1:ce:7d:04:88:dd:1e:12:
                    cf:c1:ba:16:d0:39:8a:cb:5f:4a:a2:d9:93:1e:b1:
                    59:80:4a:dd:7f:ae:3b:06:6a:f3:1f:10:d8:07:17:
                    b8:14:82:1f:a1:2c:39:6b:90:36:2b:f1:3c:99:85:
                    8d:f0:61:65:7d:29:a3:67:ed:6d:2f:64:27:ac:9b:
                    56:82:5d:93:05:5e:5f:e0:d4:d9:ef:3a:71:69:56:
                    fd:f2:3e:0d:22:a1:47:5b:1a:66:d9:37:7b:0a:82:
                    bc:34:74:df:af:76:c2:67:dd:de:df:c9:57:74:f3:
                    c8:cd:45:3c:9a:c4:54:1f:8e:ca:b2:b3:88:88:bf:
                    f8:e4:6e:3c:4b:9f:4f:21:e2:60:fc:e2:8c:aa:b9:
                    fa:f5:62:92:f5:19:dd:da:7d:1b:64:9f:5f:f2:1c:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:2E:2D:5E:17:F5:22:A0:65:1A:CB:B9:67:76:0C:8A:49:72:0E
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/AMMuLV4X9SKgZRrLuWd2DIpJcg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.160.0/22
                  89.42.196.0/22
                  89.47.196.0-89.47.203.255
                  92.114.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:82:7b:96:45:3c:04:ef:67:96:89:ad:6c:3b:24:ed:4c:
         71:49:be:ff:b3:85:81:ed:81:33:28:61:b5:5c:d0:c6:8b:c5:
         cb:24:11:5d:7f:d9:ba:15:e9:69:2c:6f:5b:fe:db:2d:ef:ae:
         b5:af:6b:cb:f9:16:d6:ce:0e:d5:65:a8:5f:ef:0c:b2:e7:ea:
         64:93:81:e3:04:98:1d:08:1b:22:8b:14:29:50:3e:1a:7e:33:
         fe:d5:27:bf:ce:35:a6:56:f1:1c:1e:ff:29:bf:ad:ce:a0:ef:
         d5:6d:7e:89:68:de:b6:23:89:b6:13:3d:fa:be:ce:9a:1d:d7:
         3b:90:16:45:95:86:23:f7:01:3a:12:42:05:ef:50:c6:f1:a8:
         c4:1c:6c:df:a9:8c:4a:12:cf:2e:ab:1b:f0:31:27:16:f1:93:
         c2:23:4a:ef:17:73:77:76:f4:08:14:e5:24:66:43:46:77:a5:
         2c:14:ef:13:de:69:1b:12:2f:a2:d1:ef:a9:9e:db:14:f7:3a:
         0c:ed:f6:06:fd:bd:2b:26:21:0f:a0:b6:f0:10:8a:d9:80:6f:
         77:74:80:85:24:c7:bc:55:03:02:f3:96:6f:8a:c8:59:37:e5:
         60:04:82:d5:5b:3d:f2:df:78:ad:d5:e7:59:a3:06:1a:6c:05:
         d0:3d:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:58:33 2024 by rpki-client on console-ams.rpki-client.org