Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/1-NZKoOSZs97hyqkwh_hH4qe53Lc.roa
File:                     1-NZKoOSZs97hyqkwh_hH4qe53Lc.roa (raw, json)
Hash identifier:          qvAZq5s1NMULHvnLbOuvcm8AmAS4WDrdJYit/klW8Lk=
Subject key identifier:   F8:D6:4A:A0:E4:99:B3:DE:E1:CA:A9:30:87:F8:47:E2:A7:B9:DC:B7
Certificate issuer:       /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial:       018570CBF37EF0D6A6B21A075C0D242B5B7D
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/1-NZKoOSZs97hyqkwh_hH4qe53Lc.roa
Signing time:             Mon 02 Jan 2023 04:44:52 +0000
ROA not before:           Mon 02 Jan 2023 04:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        91.206.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Mar 2023 06:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:cb:f3:7e:f0:d6:a6:b2:1a:07:5c:0d:24:2b:5b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
        Validity
            Not Before: Jan  2 04:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8d64aa0e499b3dee1caa93087f847e2a7b9dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:15:de:99:c3:1b:2d:af:c0:cf:87:c8:61:
                    0f:5b:bb:ef:71:e0:4e:60:f2:49:8d:1e:90:ce:41:
                    30:2f:03:43:ad:e9:05:07:81:97:ab:30:8b:bc:4c:
                    e2:da:08:80:4d:c1:a4:22:1e:c5:86:3f:ad:c5:a0:
                    ad:65:2f:7b:46:39:49:cd:b3:11:77:24:3d:87:aa:
                    d5:5f:a5:35:5a:57:a0:6a:d8:0d:25:d8:0b:d1:1f:
                    5f:ac:6b:e8:51:b3:31:c0:8a:2f:43:ce:81:33:6d:
                    b0:aa:e2:3e:7f:17:84:46:10:31:76:8c:9e:52:51:
                    20:d4:c4:7d:98:a3:37:6c:80:8a:b8:22:86:bd:dd:
                    c9:21:d3:05:5d:1b:b6:f5:58:0c:82:d8:4c:48:c5:
                    e2:d1:fb:aa:7e:89:ae:96:88:58:22:86:9e:ff:c3:
                    77:9a:76:79:5f:0e:a9:71:82:09:1c:a3:a6:b4:ab:
                    b6:5b:3e:a3:73:0b:18:59:68:6f:9c:3f:4c:80:7b:
                    09:a8:7b:2f:c3:44:63:3e:d1:0e:fd:29:3e:5a:1b:
                    1b:72:d4:54:be:52:2d:02:c8:57:fe:50:a3:92:8c:
                    60:77:b5:9f:c3:7a:e4:ee:39:5c:1a:5c:b2:3f:66:
                    27:cb:61:55:0c:c7:b2:8e:56:2e:d0:be:63:57:65:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F8:D6:4A:A0:E4:99:B3:DE:E1:CA:A9:30:87:F8:47:E2:A7:B9:DC:B7
            X509v3 Authority Key Identifier: 
                keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/1-NZKoOSZs97hyqkwh_hH4qe53Lc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:20:af:ed:29:86:8a:43:c7:1e:ef:dd:31:16:81:42:cf:
         75:fd:4d:b3:28:fe:37:4d:f8:c4:8b:6e:80:74:09:85:39:89:
         d2:2d:1d:8c:3d:b2:48:ef:36:c4:e2:4a:ae:06:e0:7a:af:7b:
         97:96:1f:5a:e8:5f:2b:4d:66:64:5a:65:a8:78:aa:10:4c:11:
         22:b5:9b:b0:60:b0:5e:53:6d:e6:e1:9d:e6:93:c1:ec:0f:26:
         3b:57:ff:68:f2:c8:42:4b:d9:5d:33:a0:76:4f:e6:ac:53:29:
         c3:63:7b:ad:ba:88:1b:2f:71:ac:40:8e:20:d3:4c:59:a8:06:
         3d:31:f5:83:49:53:03:6a:3b:75:5e:f4:fa:ec:9c:3b:18:2c:
         1c:56:0e:c4:7d:82:f7:83:cb:9c:49:10:74:c8:d4:67:b2:fd:
         3b:ec:2d:92:29:ba:57:78:ed:6c:f5:1d:5a:e7:88:3c:65:8f:
         de:c6:33:25:f2:25:ad:3b:fc:97:30:ea:c1:bf:ee:42:26:9c:
         ab:a6:4d:23:5a:45:85:74:ae:34:dd:ea:ef:ad:04:0b:5e:f1:
         fe:1c:50:55:b5:7d:3b:99:ff:7f:49:ff:41:a6:ce:7f:2f:63:
         6e:32:4d:7c:66:f2:80:cf:9a:79:fc:b7:84:ea:ff:4e:b5:b0:
         f6:c8:e8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 13:08:39 2023 by rpki-client on console-ams.rpki-client.org